ScanForge Security Digest 2632-01

August 3, 2026200 items

59 critical0 high10 news

This week's security digest includes 0 actively exploited vulnerabilities (CISA KEV), 59 critical CVEs, and 0 high-severity CVEs. Review the details below and prioritize patching for any affected systems.

Critical

10.0 Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa CVE-2026-60389

10.0 Vulnerability in the Oracle Weblogic Server Proxy Plug-in pr 2 CVEs

CVE-2026-60365, CVE-2026-60364

10.0 An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was n CVE-2021-22205

9.9 Vulnerability in the Oracle WebCenter Portal product of Orac 6 CVEs

CVE-2026-60568, CVE-2026-60565, CVE-2026-60562, CVE-2026-60561, CVE-2026-60566 +1 more

9.9 Vulnerability in the Oracle WebCenter Sites product of Oracl 4 CVEs

CVE-2026-60552, CVE-2026-61140, CVE-2026-60555, CVE-2026-60551

9.9 Vulnerability in the Oracle WebCenter Enterprise Capture pro 2 CVEs

CVE-2026-60524, CVE-2026-60458

9.9 Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (comp CVE-2026-60402

9.9 Improper access control in Azure Resource Manager allows an authorized attacker to elevate privilege CVE-2026-24304

9.8 The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all ve CVE-2026-8457

9.8 The Single Sign On For TNG plugin for WordPress is vulnerable to Authentication Bypass via unauthent CVE-2026-15964

9.8 CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, the is_image and mime_in upload valid CVE-2026-63223

9.8 Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp. Image::WebP does CVE-2026-58586

Security News

OpenAI teases Astra, its next major AI model, after it solves 10 long-standing math problems Bleeping Computer

OpenAI has revealed Astra, an unreleased model designed to tackle complex, long-running tasks, after an internal version

COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft Bleeping Computer

A vulnerability in COLDCARD hardware wallet firmware allowed attackers to steal an estimated $88.6 million in Bitcoin fr

Google Chrome may soon block New Tab hijacker extensions by default Bleeping Computer

Google is preparing a new Chrome security feature that would block policy-installed extensions from hijacking the New Ta

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes The Hacker News

An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at t

Rails patches critical Active Storage flaw with RCE potential Bleeping Computer

A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files f

Balance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity Investments SecurityWeek

The funding round was led by SYN Ventures, with participation from existing investors DataTribe and TEDCO. The post Bala

Ruby on Rails Patches Critical Vulnerability SecurityWeek

The flaw can be exploited by unauthenticated attackers to read arbitrary files and potentially achieve remote code execu

Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites The Hacker News

Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side too