ScanForge Security Digest 2632-02

August 6, 2026200 items

48 critical0 high10 news

This week's security digest includes 0 actively exploited vulnerabilities (CISA KEV), 48 critical CVEs, and 0 high-severity CVEs. Review the details below and prioritize patching for any affected systems.

Critical

10.0 Jupyter Enterprise Gateway launches remote Jupyter Notebook 3 CVEs

CVE-2026-44182, CVE-2026-44181, CVE-2026-44180

10.0 Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile th CVE-2025-34163

10.0 getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allow CVE-2024-51378

10.0 openHAB, a provider of open-source home automation software, has add-ons including the visualization CVE-2024-42467

9.9 ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability CVE-2026-48322

9.8 Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval CVE-2026-47036

9.8 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C CVE-2026-46919

9.8 SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary code v CVE-2025-57631

9.8 In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthent CVE-2024-55956

9.8 In the Linux kernel, the following vulnerability 31 CVEs

CVE-2021-47427, CVE-2021-47328, CVE-2021-47232, CVE-2022-48697, CVE-2022-48686 +26 more

9.8 A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 t CVE-2024-21762

9.8 User authentication with username and password credentials is ineffective in OpenText (Micro Focus) CVE-2023-4501

Security News

Meta AI Hacked External Systems During Cybersecurity Testing SecurityWeek

The incident involved a testing environment set up by Irregular, similar to what Anthropic reported last week. The post

Belarusian Ransom Cartel Mastermind Gets 16 Years in Prison SecurityWeek

Maksim Silnikau was the creator and administrator of the ransomware group and involved in Angler EK’s distribution. The

Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access The Hacker News

Attackers broke into an organization's Oracle database through a SQL injection flaw in a public-facing web application,

AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model The Hacker News

Security flaws in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel let untrusted or forged instru

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells The Hacker News

Cybersecurity researchers have disclosed details of a "factory-shipped backdoor" implanted in at least 20 Chinese router

Cisco Patches Critical SD-WAN, IOS XE, FMC Vulnerabilities SecurityWeek

Patches were rolled out for two dozen vulnerabilities, including one with public proof-of-concept (PoC) code. The post C

Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service The Hacker News

A federal judge in Alexandria, Virginia, sentenced Maksim Silnikau to 16 years in prison on August 5 for creating and ru

CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild The Hacker News

A newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come under active exploitation in