https://blog.flawfind.ai/Recent attacks, exploited vulnerabilities and what to do about them.enTue, 15 Sep 2026 21:37:35 +0000https://blog.flawfind.ai/posts/acronis-warns-of-actively-exploited-flaw-in-its-cpanel-backup-plugin-6e529cd8.htmlhttps://blog.flawfind.ai/posts/acronis-warns-of-actively-exploited-flaw-in-its-cpanel-backup-plugin-6e529cd8.htmlTue, 15 Sep 2026 21:37:35 +0000Acronis disclosed a high-severity Linux local privilege escalation vulnerability in its backup plugin for cPanel, WebHost Manager (WHM), and Plesk that may be exploited in the wild. [...]newshttps://blog.flawfind.ai/posts/kremlin-banking-malware-hijacks-chrome-and-edge-to-steal-credentials-and-session-216666e1.htmlhttps://blog.flawfind.ai/posts/kremlin-banking-malware-hijacks-chrome-and-edge-to-steal-credentials-and-session-216666e1.htmlTue, 15 Sep 2026 18:54:14 +0000Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic Security Labs is tracking the activity under the moniker REF9334. Active since at least May 2025, the threat actor has used lures that impersonate a dozen Brazilian banks and install a malicious browser extension on Google Chrome andnewshttps://blog.flawfind.ai/posts/cve-2026-76461-2b7216c4.htmlhttps://blog.flawfind.ai/posts/cve-2026-76461-2b7216c4.htmlMon, 14 Sep 2026 00:00:00 +0000Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.known-exploitedcisa-kevhttps://blog.flawfind.ai/posts/cve-2026-85706-eb189f1e.htmlhttps://blog.flawfind.ai/posts/cve-2026-85706-eb189f1e.htmlFri, 11 Sep 2026 00:00:00 +0000GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.known-exploitedcisa-kevhttps://blog.flawfind.ai/posts/cve-2026-84869-40a7c3bd.htmlhttps://blog.flawfind.ai/posts/cve-2026-84869-40a7c3bd.htmlFri, 11 Sep 2026 00:00:00 +0000ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to file transfer and execution through an active remote sessions without authorization or host confirmation.known-exploitedcisa-kevhttps://blog.flawfind.ai/posts/cve-2026-42018-a96cb7b6.htmlhttps://blog.flawfind.ai/posts/cve-2026-42018-a96cb7b6.htmlFri, 11 Sep 2026 00:00:00 +0000JFrog Artifactory contains an improper authentication vulnerability that could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.known-exploitedcisa-kevhttps://blog.flawfind.ai/posts/cve-2026-42016-2bb90eb6.htmlhttps://blog.flawfind.ai/posts/cve-2026-42016-2bb90eb6.htmlFri, 11 Sep 2026 00:00:00 +0000JFrog Artifactory contains an incorrect authorization vulnerability that allows leads to privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.known-exploitedcisa-kevhttps://blog.flawfind.ai/posts/cve-2026-86060-0bc21b9a.htmlhttps://blog.flawfind.ai/posts/cve-2026-86060-0bc21b9a.htmlThu, 10 Sep 2026 00:00:00 +0000MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacked to change the trusted RouterOS policy mask, leading to privilege escalation.known-exploitedcisa-kevhttps://blog.flawfind.ai/posts/cve-2026-67277-beffcad9.htmlhttps://blog.flawfind.ai/posts/cve-2026-67277-beffcad9.htmlThu, 10 Sep 2026 00:00:00 +0000MikroTik RouterOS contains a missing authenticaion for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service.known-exploitedcisa-kevhttps://blog.flawfind.ai/posts/cve-2026-19490-1c70af4d.htmlhttps://blog.flawfind.ai/posts/cve-2026-19490-1c70af4d.htmlWed, 09 Sep 2026 00:00:00 +0000Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy), an unauthenticated remote threat actor may be able to bypass authentication.known-exploitedcisa-kevhttps://blog.flawfind.ai/posts/microsoft-plugs-nearly-1-000-security-holes-bf5c69a9.htmlhttps://blog.flawfind.ai/posts/microsoft-plugs-nearly-1-000-security-holes-bf5c69a9.htmlTue, 08 Sep 2026 21:44:22 +0000Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the discovery of vulnerabilities, but security experts warn that many organizations already are struggling to prioritize the more human-intensive endeavor of testing and deploying so many fixes each month.news