Sep 3: Elasticsearch ML RCE, Seven KEV Additions, FalconFlank PoC

Elasticsearch’s machine learning module is patched. Seven more flaws are on CISA’s known-exploited list. CrowdStrike Falcon has an unpatched privilege escalation with a public PoC. This is September 3.

Elasticsearch: ML module deserialization, RCE patched

CVE-2026-72649 is patched in Elasticsearch 8.19.2, 9.4.5, and 9.5.1. CVSS 8.8, HIGH. The flaw is a deserialization of untrusted data vulnerability (CWE-502) in the machine learning component. A user can supply a crafted trained model artifact to trigger object injection (CAPEC-586) and achieve remote code execution. Confidence: confirmed, vendor advisory ESA-2026-114.

No exploitation in the wild confirmed as of this briefing. Deserialization RCE in a widely deployed search platform is a short window. Versions 8.19.2, 9.4.5, and 9.5.1 contain the fix. If ML is not in use, the attack surface is narrower but the patch is still indicated.

CISA KEV: seven flaws added, reverse shells and miners observed

CISA added seven exploited vulnerabilities to the Known Exploited Vulnerabilities catalog on September 3. Confirmed among the additions: CVE-2026-9586, the Sangoma Switchvox unauthenticated SQL injection (CVSS 9.8, critical). Attackers are using it to deploy reverse shells against enterprise VoIP infrastructure. The CVE identifier was not publicly confirmed when yesterday’s briefing ran; it is confirmed now, verified against NVD.

The full batch covers seven products. Per BOD 26-04, federal civilian agencies face a mandatory remediation deadline. Current additions are listed at cisa.gov/known-exploited-vulnerabilities-catalog.

CrowdStrike Falcon: FalconFlank PoC published, no patch confirmed

A researcher using the handle Chaotic Eclipse (also known as INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) published a PoC for a privilege escalation vulnerability in CrowdStrike Falcon, naming it FalconFlank. No CVE has been assigned in public reporting as of this briefing. Confidence: confirmed per The Hacker News; researcher identity and PoC existence attributed to named researcher.

Falcon runs with high kernel privileges on most endpoints where it is deployed. A privilege escalation flaw in the sensor is a direct path to full system compromise on protected machines. No patch confirmed in public reporting as of this briefing.

ICS/OT: AI-assisted exploit porting across WAGO PLCs

Forescout Vedere Labs used Anthropic’s Claude to port a working pre-authentication RCE exploit from one WAGO programmable logic controller model to another. The research confirms that cross-model exploit reuse in ICS hardware is achievable with AI-assisted tooling. No CVE for the newly ported exploit is named in current reporting. Confidence: confirmed, Forescout Vedere Labs attribution per The Hacker News.

Published CVE counts for a given PLC vendor do not bound the actual exploitable surface across that vendor’s product line.

Also noted

• SonicWall SMA1000: CVE-2026-83548 and CVE-2026-83549 remain under active exploitation. No new developments since September 2. Patches are available from SonicWall.
• JFrog Artifactory CVE-2026-82329: active exploitation continues. The authentication bypass granting admin-level access was disclosed August 28. Attackers were on it within days of disclosure.
• Langflow CVE-2026-0768: credential-theft attacks against exposed instances continue. OpenAI API keys, AWS tokens, and other stored credentials remain the target.