17 vulnerabilities across 13 products scored HIGH or above on September 05, 2026.

  • 🟠 HIGH: 17

Exploit Status Upgrades

The following CVEs from previous bulletins have been upgraded based on new exploit intelligence:

  • [UPGRADED] CVE-2026-85046 (google/chrome) — F1: exploitable → functional, AAS: 10.6 → 12.6 (HIGH → CRITICAL). Originally in 2026-09-03 bulletin.

🟠 [HIGH] coollabsio/coolify

1 CVE | CVSS 4.0: 9.2 | AAS 11.7

  • cpe:2.3:a:coollabsio:coolify:*:*:*:*:*:*:*:*

Coolify, the open-source self-hosting platform by coollabsio, is affected by one high-severity vulnerability (CVE-2026-86117, CVSS 9.2) in versions through 4.3.17. The flaw is an authentication bypass in the OAuth callback handler that allows an attacker to sign into any existing account by simply registering the victim’s email address on a supported OAuth provider, completely bypassing password and two-factor authentication controls. This vulnerability is considered exploitable and is relevant to any organization running a self-hosted Coolify instance with OAuth login enabled.

Administrators should immediately check their Coolify version and upgrade beyond 4.3.17 as soon as a patched release is available. In the interim, consider disabling OAuth authentication or restricting which OAuth providers are permitted. Monitor the vendor’s GitHub repository at github.com/coollabsio/coolify for patch announcements and further guidance.

Vendor Advisory

🟠 [HIGH] wwbn/avideo

2 CVEs | CVSS 4.0: 9.3 | AAS 10.5

  • cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*

WWBN AVideo, the open-source video streaming platform, is affected by two high-severity vulnerabilities (CVE-2026-86189, CVE-2026-86190, max CVSS 9.3), including at least one that enables unauthenticated arbitrary file write via path traversal in the FFmpeg notification endpoint. An attacker can bypass authentication by replaying any previously issued encrypted token and then write attacker-controlled files to arbitrary locations on the server, which can readily lead to remote code execution.

Organizations hosting AVideo instances should review the vendor’s security advisory at the linked GitHub page and apply patches or mitigations immediately. If patching is not yet possible, consider restricting public access to the affected endpoint and monitoring for unexpected file creation on the server.

Vendor Advisory

🟠 [HIGH] mikrotik/routeros

3 CVEs | CVSS 4.0: 9.2 | AAS 10.2

  • cpe:2.3:a:mikrotik:routeros:*:*:*:*:*:*:*:*

MikroTik RouterOS is affected by three high-severity vulnerabilities (CVE-2026-86060, CVE-2026-67277, CVE-2026-67281, max CVSS 9.2), including at least one that allows unauthenticated privilege escalation through a flaw in SSH login argument handling. By crafting a username with a prohibited leading character, an attacker can manipulate the trusted policy mask during an SSH session, escalating privileges on the device without valid credentials.

Any organization running MikroTik routers should prioritize updating to the patched versions immediately: RouterOS 6.49.21 (Long-term), 7.23.4 (Long-term), or 7.24.2 (Stable). Given the widespread deployment of MikroTik devices at network perimeters and the unauthenticated nature of the attack, teams should also restrict SSH access to trusted management networks and review the CERT.PL advisory for additional technical details.

Vendor Advisory

🟠 [HIGH] mindsdb/mindsdb

1 CVE | CVSS 4.0: 8.7 | AAS 10.1

  • cpe:2.3:a:mindsdb:mindsdb:*:*:*:*:*:*:*:*

MindsDB, the open-source AI and machine learning database platform, is affected by one high-severity vulnerability (CVE-2026-86173, CVSS 8.7) in versions through 26.1.0. The flaw is a server-side request forgery in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs, including internal services and cloud metadata endpoints, by exploiting the default empty allowlist configuration.

Organizations running MindsDB instances, particularly in cloud environments, should upgrade beyond version 26.1.0 as soon as a fix is available and review the vendor’s GitHub advisory for guidance. In the interim, restrict network access to the MindsDB service, explicitly configure the URL allowlist to block internal and metadata endpoints, and audit logs for unexpected outbound requests from the crawler handler.

Vendor Advisory

🟠 [HIGH] wpmudev/hummingbird_performance_–cache&page_speed_optimization_for_core_web_vitals|critical_css|minify_css|defer_css_javascript|_cdn

1 CVE | CVSS 3.1: 9.8 | AAS 10.1

  • cpe:2.3:a:wpmudev:hummingbird_performance_cache_page_speed_optimization_for_core_web_vitals_critical_css_minify_css_defer_css_javascript_cdn:*:*:*:*:*:*:*:* (< 3.21.1)

The Hummingbird Performance plugin by WPMU DEV, a widely used WordPress caching and speed optimization plugin, is affected by one high-severity remote code execution vulnerability (CVE-2026-83627, CVSS 9.8) in all versions up to and including 3.21.0. The flaw exists in the page-cache debug logging function, which writes user-influenced data to a web-accessible PHP file whose protective die-header guard can be bypassed, allowing unauthenticated attackers to execute arbitrary code on the server.

Any WordPress site running the Hummingbird plugin should update beyond version 3.21.0 immediately. If an update is not yet available, disable the page-cache debug logging feature and verify that the log file at wp-content/wphb-logs/page-caching-log.php is not publicly accessible. Given the unauthenticated nature and critical severity of this vulnerability, treat this as a priority remediation item.

Vendor Advisory

🟠 [HIGH] yeswiki/yeswiki

2 CVEs | CVSS 3.1: 9.4 | AAS 10.0

  • cpe:2.3:a:yeswiki:yeswiki:*:*:*:*:*:*:*:*

YesWiki, the PHP-based wiki system, is affected by two high-severity vulnerabilities (CVE-2026-52766, CVE-2026-52777, max CVSS 9.4) in versions prior to 4.6.6, including at least one that allows any user with default write access to delete arbitrary wiki pages without authorization. The flaw in the EraseSpamedCommentsAction component accepts attacker-supplied page names and deletes them with no permission checks, which under YesWiki’s default open ACL model means virtually any visitor can destroy content across the entire wiki.

Administrators running YesWiki should upgrade to version 4.6.6 or later immediately. If upgrading is not feasible, restrict write access by tightening the default_write_acl setting and review the referenced commit for manual patching guidance. Organizations should also audit their wikis for signs of unauthorized page deletions.

Vendor Advisory

🟠 [HIGH] sqlchat/sqlchat

1 CVE | CVSS 4.0: 9.4 | AAS 9.7

  • cpe:2.3:a:sqlchat:sqlchat:*:*:*:*:*:*:*:*

SQL Chat, an open-source AI-powered database client, is affected by one high-severity vulnerability (CVE-2026-86123, CVSS 9.4) involving multiple unauthenticated API endpoints that accept caller-supplied database connection parameters and execute arbitrary SQL queries. An attacker can exploit these endpoints without any authentication to connect to internal databases, execute commands, enumerate schemas, and pivot into the host network, effectively turning the application into a proxy for attacking backend infrastructure.

Organizations running SQL Chat instances should take them offline or restrict access to trusted networks immediately. Review the vendor’s GitHub repository for patches or mitigations, and audit database access logs for any signs of unauthorized connections originating from the SQL Chat server. This is especially critical for deployments with network access to production or internal databases.

Vendor Advisory

🟠 [HIGH] hkuds/autoagent

1 CVE | CVSS 4.0: 9.3 | AAS 9.7

  • cpe:2.3:a:hkuds:autoagent:*:*:*:*:*:*:*:*

AutoAgent by HKUDS, an AI-powered autonomous agent framework, is affected by one high-severity vulnerability (CVE-2026-86124, CVSS 9.3) involving an unauthenticated TCP server that binds to all network interfaces and executes attacker-supplied commands as root. An attacker with network access to the exposed communication port can execute arbitrary bash commands inside the container, and through bind-mounted host workspace directories, potentially access or modify files on the underlying host system.

Organizations running AutoAgent should immediately ensure the TCP server port is not exposed to untrusted networks and restrict access via firewall rules. Review the vendor’s GitHub repository for updates and consider disabling or isolating the service entirely until a patch is available. Any deployment with host directory bind mounts should be treated as a host-level compromise risk.

Vendor Advisory

🟠 [HIGH] webstudio-is/webstudio

1 CVE | CVSS 4.0: 9.2 | AAS 9.6

  • cpe:2.3:a:webstudio-is:webstudio:*:*:*:*:*:*:*:*

Webstudio, the open-source visual website builder, is affected by one high-severity vulnerability (CVE-2026-86119, CVSS 9.2) in versions through 0.296.0. The flaw is an unauthenticated server-side request forgery in the image, video, and asset proxy routes that, when the RESIZE_ORIGIN environment variable is left unset, allows attackers to supply arbitrary URLs to read cloud instance metadata, access internal services, and perform network reconnaissance.

Organizations hosting Webstudio instances, especially in cloud environments, should upgrade beyond version 0.296.0 as soon as a patch is available and ensure the RESIZE_ORIGIN environment variable is explicitly configured to restrict proxy targets. In the interim, restrict public access to the affected CGI proxy endpoints and monitor for suspicious outbound requests targeting internal IP ranges or cloud metadata services.

Vendor Advisory

🟠 [HIGH] gnome/libxml2

1 CVE | CVSS 3.1: 8.0 | AAS 9.3

  • cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* (< 2.15.4)

GNOME libxml2, a widely used XML parsing library embedded in countless applications and operating systems, is affected by one high-severity vulnerability (CVE-2026-86140, CVSS 8.0) in versions prior to 2.15.4. The flaw is a stack-based buffer overflow in the xmlSnprintfElements function within the validation module, which can be triggered when processing crafted XML documents and may lead to code execution or denial of service.

Given the pervasive use of libxml2 as a dependency across Linux distributions, web servers, language runtimes, and embedded systems, this vulnerability has a broad blast radius. Teams should update to libxml2 2.15.4 or later immediately, and check downstream distributions for backported patches. Applications that process untrusted XML input should be prioritized for remediation.

Vendor Advisory

🟠 [HIGH] getgrav/grav-plugin-api

1 CVE | CVSS 4.0: 8.7 | AAS 9.1

  • cpe:2.3:a:getgrav:grav-plugin-api:*:*:*:*:*:*:*:* (< 1.0.20)

The Grav CMS API plugin is affected by one high-severity vulnerability (CVE-2026-86196, CVSS 8.7) in versions prior to 1.0.20. The flaw allows unauthenticated attackers to manipulate password reset links by injecting a malicious Host header into the forgot-password endpoint, causing reset tokens to be sent to victims pointing at attacker-controlled domains. This enables full account takeover of any user, including super-admin accounts, without requiring any prior authentication.

Organizations running Grav CMS with the API plugin should update to version 1.0.20 or later immediately. If patching is not immediately possible, configure the web server to reject or override untrusted Host headers and review account activity for signs of unauthorized password resets. Refer to the vendor’s GitHub security advisory for full details.

Vendor Advisory

🟠 [HIGH] uscnanbu/welcart_e-commerce

1 CVE | CVSS 3.1: 8.8 | AAS 9.1

  • cpe:2.3:a:uscnanbu:welcart_e-commerce:*:*:*:*:*:*:*:* (< 2.12.2)

The Welcart e-Commerce plugin for WordPress is affected by one high-severity vulnerability (CVE-2026-19887, CVSS 8.8) in all versions up to and including 2.12.1. The flaw is a PHP Object Injection via unsafe deserialization in the Telecom EDY payment callback, where unauthenticated attackers can store crafted metadata during a public checkout and then trigger its deserialization through the callback endpoint without any signature or source verification, potentially leading to remote code execution depending on available gadget chains.

WordPress site operators using Welcart e-Commerce should update beyond version 2.12.1 as soon as a patch is available. In the interim, consider disabling the affected payment callback or restricting access to the transaction endpoint, and audit order metadata and server logs for any signs of exploitation.

Vendor Advisory

🟠 [HIGH] the_tcpdump_group/libpcap

1 CVE | CVSS 3.1: 8.7 | AAS 9.0

  • cpe:2.3:a:the_tcpdump_group:libpcap:*:*:*:*:*:*:*:* (< 1.10.5)

Libpcap, the widely used packet capture library maintained by the tcpdump group, is affected by one high-severity vulnerability (CVE-2026-0799, CVSS 8.7) involving a missing bounds check on BPF scratch memory register indices in the BPF interpreter. A crafted BPF filter program can cause the interpreter to read and write arbitrary process memory, spanning up to 16 GiB from the stack frame on 64-bit architectures or the entire address space on 32-bit systems, potentially enabling code execution or information disclosure.

Given that libpcap is a foundational dependency for network monitoring tools such as tcpdump, Wireshark, Suricata, and many commercial security products, this vulnerability has an exceptionally broad impact. Teams should update libpcap to a version containing the referenced fix and check downstream distributions for patched packages. Any application that accepts BPF filter programs from untrusted sources should be prioritized for immediate remediation.

Vendor Advisory