2 vulnerabilities across 2 products scored HIGH or above on September 15, 2026.

  • 🟠 HIGH: 2

Exploit Status Upgrades

The following CVEs from previous bulletins have been upgraded based on new exploit intelligence:

  • [UPGRADED] CVE-2026-48273 (adobe/coldfusion) — F1: exploitable → functional, AAS: 12.1 → 15.6 (CRITICAL → CRITICAL). Originally in 2026-09-08 bulletin.

🟠 [HIGH] wandb/wandb

1 CVE | CVSS 4.0: 8.7 | AAS 9.6

  • cpe:2.3:a:wandb:wandb:*:*:*:*:*:*:*:* (< 0.29.0)

Weights and Biases wandb versions prior to 0.29.0 are affected by one high-severity vulnerability (CVSS 8.7). The flaw exists in the File.download function, which fails to validate file names received from server responses, allowing path traversal attacks. An attacker who controls or compromises the backend can supply crafted file names containing directory traversal sequences to write arbitrary files outside the intended download directory, potentially achieving code execution by modifying shell startup files or Python import paths.

Teams using wandb for ML experiment tracking and model management should treat this as a priority update. The vulnerability is considered exploitable and could allow full compromise of developer workstations or training infrastructure. Upgrade to wandb 0.29.0 or later immediately and review the vendor advisory on GitHub for additional guidance.

Vendor Advisory

🟠 [HIGH] gnu/libextractor

1 CVE | CVSS 4.0: 8.7 | AAS 9.1

  • cpe:2.3:a:gnu:libextractor:*:*:*:*:*:*:*:* (< 1.15)

GNU libextractor versions prior to 1.15 are affected by one high-severity vulnerability (CVSS 8.7). A stack-based buffer overflow in the process_star_office function allows an attacker to craft a malicious StarOffice document that causes a stack overflow by forcing allocation of up to 4 MB on the stack via attacker-controlled OLE2 stream data, crashing any application that attempts to extract metadata from the file.

Organizations running file indexing services, document management systems, or any application that relies on libextractor for metadata extraction should prioritize this update. The vulnerability is considered exploitable and can be triggered simply by processing a crafted document. Upgrade to libextractor 1.15 or later and review the vendor commit linked in the advisory for patch details.

Vendor Advisory