cybr.cx Daily Digest — September 08, 2026

Critical Vulnerabilities

⚠️ Actively exploited — CVE-2026-85046 | Google Chromium V8 | CVSS: N/A (KEV listed)
A type confusion vulnerability in Chromium's V8 JavaScript engine allows remote attackers to execute arbitrary code inside the browser sandbox via a crafted HTML page. Any browser built on Chromium is in scope — Chrome, Edge, and derivatives alike. CISA added this on September 4 with a remediation deadline of September 18; if you haven't pushed browser updates across your fleet yet, that window is closing fast.

⚠️ Actively exploited — CVE-2026-82329 | JFrog Artifactory | CVSS: N/A (KEV listed)
Under default configuration, Artifactory can be compromised by an unauthenticated attacker with network access to gain full administrative privileges. In environments where Artifactory sits at the heart of software supply chains, this is a critical blast radius — a compromised instance means tampered build artefacts. Patch or isolate immediately; CISA's remediation deadline was September 5.

⚠️ Actively exploited — CVE-2026-49869 | Kestra OSS | CVSS: N/A (KEV listed)
Unauthenticated remote attackers can create and execute arbitrary OS workflows against Kestra without credentials. Workflow orchestration platforms run with broad system access by design, making this particularly dangerous in CI/CD and data-pipeline contexts. The CISA remediation deadline has already passed (September 5) — if you're running Kestra, assume exposure.

⚠️ Actively exploited — CVE-2026-9586 | Sangoma Switchvox | CVSS: N/A (KEV listed)
A single crafted HTTP request can trigger arbitrary SQL execution against the backend PostgreSQL database, up to and including remote code execution. VoIP infrastructure is a high-value target for call interception and pivot operations. Patch or take the management interface off-network now.

⚠️ Actively exploited — CVE-2026-83548 / CVE-2026-83549 | SonicWall SMA1000 | CVSS: N/A (KEV listed)
Two separate flaws affect SonicWall's SMA1000 appliances: an SSRF allowing unauthenticated access to sensitive internal functionality, and a post-authentication OS command injection enabling full RCE as an administrator. Chained together they represent a near-complete takeover path for a device sitting at the network perimeter. Both had a September 5 remediation deadline — no grace period remaining.

⚠️ Actively exploited — CVE-2026-81578 / CVE-2026-82078 | PaperCut NG/MF | CVSS: N/A (KEV listed)
PaperCut is under active exploitation via two chained flaws: an unauthenticated attacker can modify system configurations (CVE-2026-81578), then leverage an unsafe reflection vulnerability to execute arbitrary Java bytecode from the application classpath under the PaperCut server's security context (CVE-2026-82078). Print management software is rarely top of mind for hardening, which makes it attractive to threat actors. Remediation deadline: September 14.

⚠️ Actively exploited — CVE-2026-59822 | BerriAI LiteLLM | CVSS: N/A (KEV listed)
LiteLLM's MCP Streamable HTTP endpoint fails to properly authenticate requests, allowing any arbitrary Bearer token to establish a fully authenticated MCP session. As LiteLLM acts as a proxy gateway to multiple LLM backends, unauthorised access here can mean unrestricted API calls, data exfiltration via prompt manipulation, or pivoting to connected AI infrastructure. Remediation deadline: September 16.

⚠️ Actively exploited — CVE-2026-48710 | Kludex Starlette | CVSS: N/A (KEV listed)
HTTP request/response smuggling in Starlette allows attackers to inject paths into the host component, prepending the actual request path. The practical result is authentication bypass in applications that reconstruct URLs for access control decisions — a class of bug that's deceptively easy to miss in code review and deceptively effective in exploitation.

CVE-2026-86427 | LibreNMS < 26.8.0 | CVSS: 8.8 — HIGH
An argument injection flaw in the graph_title parameter lets authenticated attackers break out of double-quote escaping to inject arbitrary rrdtool arguments. Attackers can read RRD files from devices they aren't authorised to access, or use newline injection for arbitrary rrdtool command execution, defeating per-device access controls entirely. Update to 26.8.0.

CVE-2026-19843 | 389-ds-base (Cockpit Console) | CVSS: 8.4 — HIGH
The Cockpit 389 Directory Server console constructs ldapsearch commands by embedding distinguished names directly into shell strings without sanitisation. An LDAP user with delegated create/rename privileges can craft a malicious DN containing shell metacharacters; when an admin views the entry, the characters execute in shell context. A classic privilege escalation path through an admin UI.

CVE-2026-86295 | D-Link DIR-895L A1_102b07 | CVSS: 8.3 — HIGH
Command injection via the Hostname field in the udhcpcd server packet handler allows remote unauthenticated code execution. A public exploit is already circulating. D-Link consumer routers have a long tail of unpatched deployments — if you manage any of these in your environment or support estate, isolate or replace.

CVE-2026-79678 | FreeIPA | CVSS: 8.1 — HIGH
The idp-add command passes insufficiently validated --organization and --base-url input to a constrained eval() call before LDAP access controls are enforced. Any authenticated IPA principal — regardless of privilege — can enumerate server environment variables or cause denial of service via memory exhaustion. In environments relying on FreeIPA for identity, this lowers the bar for internal reconnaissance significantly.

Headline News

$320M in Bitcoin drained from the Liquid Network — white hat or wake-up call?
Approximately 4,200 BTC, worth around $320 million at current prices, was withdrawn from the Liquid Network Federation wallet in what is being characterised as a white hat security operation. Liquid is a Bitcoin sidechain using a federated multisig model, where a consortium of functionaries control the peg-in and peg-out process — the integrity of the entire system depends on that federation remaining uncompromised. The incident exposes a fundamental architectural tension in federated sidechain designs: the security guarantees are ultimately only as strong as the operational security of the signatories, not the underlying cryptography. For security practitioners working in crypto-adjacent infrastructure or DeFi custody, this is a sharp reminder that federated trust models carry concentrated risk that no smart contract audit will catch.

Kestra, Artifactory, SonicWall, PaperCut all under active attack — orchestration and DevOps infrastructure in the crosshairs
The volume and diversity of this week's CISA KEV additions tells a coherent story: threat actors are actively targeting the connective tissue of modern development and enterprise infrastructure. Kestra (workflow orchestration), JFrog Artifactory (artefact management), PaperCut (print management), and SonicWall SMA1000 (secure remote access) represent the kind of high-privilege, often under-monitored systems that provide lateral movement opportunities far beyond their immediate function. In the Kestra and Artifactory cases, no authentication is required — attackers need only network access. Practitioners should audit exposure of these platforms urgently, prioritise network segmentation, and treat any of these systems as potentially compromised if they were internet-accessible before patches were applied.

Schrödinger's Feed

NEC Corporation has quietly exited superconducting quantum computer development, redirecting its efforts toward quantum-inspired annealing and classical emulation — citing the long commercialisation runway and punishing capital requirements of fault-tolerant hardware. The move is a significant signal: even well-resourced industrial labs are recalibrating their bets on which quantum modalities will reach practical utility first. For cryptographers and security planners, the consolidation of the field matters less than the underlying trajectory — NIST's post-quantum standards are already finalised, and the migration clock runs independently of any single vendor's hardware roadmap. The lesson for practitioners: PQC migration planning shouldn't be pegged to "when quantum computers arrive" — the standardisation work is done, and the implementation work is already overdue.

/dev/random

Caltech has announced what is believed to be the first hackathon devoted entirely to research-level mathematics — the Mathathon — challenging participants to make genuine progress on open mathematical problems rather than ship a working demo by Sunday night. Instead of deploying to prod, contestants are expected to produce results that could plausibly appear in a journal. It's a fascinating inversion of the hackathon format: the caffeine and the sleep deprivation are presumably the same, but the definition of "it works" is considerably harder to establish. No word yet on whether the judges accept proofs by vigorous hand-waving.