SecurityTwo MikroTik RouterOS flaws are now used in attacks, and the fix dates from 3 SeptemberOn 10 September CISA listed CVE-2026-86060 and CVE-2026-67277 in RouterOS as actively exploited, with a deadline of 13 September. MikroTik released the fixes a week earlier and advises keeping SSH closed to untrusted networks.SecurityChrome 153 fixed 230 security holes, and one of them in V8 is already used in attacksGoogle released Chrome 153 on 8 September with 230 security fixes and wrote that it is aware of an exploit in the wild for CVE-2026-87491. The next day CISA added the vulnerability to its catalog of actively exploited flaws. Other Chromium browsers are affected too.SecurityThree devices that guard the network entered the catalog of exploited flaws in one day, with three days to patchOn 9 September CISA listed as actively exploited flaws in Cisco Secure Firewall Management Center, NetScaler ADC and Gateway, and FortiOS. The deadline for all three is 12 September. The Cisco one was disclosed back in March with the highest possible score.SecurityA Magento flaw rated 10 entered the catalog of exploited vulnerabilities, with three days to patchOn 8 September CISA listed four vulnerabilities as actively exploited. The one closest to online shops is in Adobe Commerce and Magento Open Source: code execution without login, rated 10.0 by Adobe, patched the day before. Next to it sit N-able N-central and two local Windows flaws.SecurityPoland's CERT confirmed attacks on MikroTik routers over SSH that began at least a day before the patch bulletinOn 5 September CERT Polska said two of the six flaws it found in RouterOS are being combined to take full control of routers with SSH open to the internet. The fixes were announced on 3 September, and the successful attacks go back to at least 2 September.SecurityChrome patched a V8 flaw that Google knows is already being usedOn 3 September Google released Chrome 152 with 12 security fixes. For CVE-2026-85046, a type confusion in V8, the company writes that an exploit already exists in the wild. On 4 September CISA added it to the KEV catalogue with a deadline of 18 September.SecuritySeven flaws in one day in the actively exploited catalogue, LiteLLM and Artifactory among themOn 2 September CISA added seven CVEs to KEV. For people running AI infrastructure, two stand out: LiteLLM lets anyone with a made-up token reach the MCP tools, and Artifactory hands out admin rights without a login. The deadline for Artifactory and SonicWall is 5 September.SecurityTwo PaperCut flaws entered the actively exploited catalogue, and they chain togetherOn 31 August CISA added CVE-2026-82078 and CVE-2026-81578 in PaperCut NG and MF to the KEV catalogue. The two chain into code execution. The vendor said on 27 August that it was investigating active exploitation, and advises closing the web interface to the internet immediately.
83 stories