Security Digest: August 15, 2026 - 19 Critical Vulnerabilities

Today’s digest is dominated by active exploitation and high-impact remote attack paths, with one Metabase flaw and one Windows privilege-escalation bug already in CISA’s Known Exploited Vulnerabilities catalog. Several other issues can lead to remote code execution, data theft, cross-tenant disruption, or local system compromise if left unpatched.

· 35 min read

Executive Summary

Today’s digest is dominated by active exploitation and high-impact remote attack paths, with one Metabase flaw and one Windows privilege-escalation bug already in CISA’s Known Exploited Vulnerabilities catalog. Several other issues can lead to remote code execution, data theft, cross-tenant disruption, or local system compromise if left unpatched.

Act now: prioritize internet-facing services, Windows endpoints and servers, .NET runtimes, and any developer tools or agents exposed to untrusted input. Where patches are not immediately available, isolate the affected service, restrict access, and increase monitoring for suspicious authentication, metadata access, and unexpected child processes.

Critical Vulnerabilities

CVE-2026-72898: Metabase SQL Injection leading to admin access

  • Impact: Unauthenticated attackers can inject arbitrary SQL, gain administrator access, steal stored database credentials, read connected data, and export data.
  • Affected Systems: Metabase deployments exposed to network access.
  • Immediate Action: Treat as urgent if Metabase is reachable from the internet or partner networks. Restrict access now and check for suspicious admin creation, config changes, and unusual export activity.
  • Mitigation: Apply the vendor fix immediately and rotate any credentials stored in Metabase-connected databases.

CVE-2026-68820: Windows WinSock ancillary driver privilege escalation

  • Impact: An authorized local attacker can elevate privileges on Windows systems.
  • Affected Systems: Microsoft Windows Ancillary Function Driver for WinSock.
  • Immediate Action: Prioritize patching on shared workstations, servers, and endpoints with multiple local users.
  • Mitigation: Install the latest Microsoft security updates as soon as possible.

CVE-2026-73080: SeaweedFS unauthenticated SSRF with response read-back

  • Impact: Attackers who can reach the gRPC port can force requests to internal services, loopback, or cloud metadata endpoints and read the response.
  • Affected Systems: github.com/seaweedfs/seaweedfs before 4.24.
  • Immediate Action: Block public access to volume server gRPC ports and verify whether metadata credentials may have been exposed.
  • Mitigation: Upgrade to 4.24 and enforce network restrictions or mTLS.

CVE-2026-55072: Pimcore class UID SQL injection

  • Impact: An authenticated user with objects permission can inject SQL and exfiltrate database contents when a crafted object is loaded.
  • Affected Systems: pimcore/pimcore 2026.1.x with Studio API enabled.
  • Immediate Action: Review any low-privilege editor accounts and suspend class-definition changes until patched.
  • Mitigation: Apply the vendor fix and audit for abnormal class definitions and object loads.

CVE-2026-73654: Trigger.dev prototype pollution in run metadata

  • Impact: A low-privilege API key can pollute Object.prototype, break authentication and worker processing across tenants, and crash the process.
  • Affected Systems: @trigger.dev/core v3.3.8 through v4-beta before 4.5.6.
  • Immediate Action: Treat as a multi-tenant outage risk. Rotate environment API keys and isolate affected webapp instances if abuse is suspected.
  • Mitigation: Upgrade to 4.5.6 and block dangerous path segments such as __proto__, constructor, and prototype.

CVE-2026-55157: token-optimizer-mcp command injection

  • Impact: A crafted username can execute arbitrary shell commands on the MCP server host.
  • Affected Systems: @ooples/token-optimizer-mcp v0.2.0 / v5.0.1 tested.
  • Immediate Action: Disable or restrict MCP tool access until patched; review server logs for suspicious usernames containing shell syntax.
  • Mitigation: Replace shell command construction with safe argument handling and upgrade to a fixed release when available.

CVE-2026-55071: stata-mcp Stata command injection

  • Impact: A crafted package name can inject Stata commands and lead to OS command execution.
  • Affected Systems: stata-mcp package.
  • Immediate Action: Turn off exposed MCP access and block untrusted tool callers immediately.
  • Mitigation: Patch the tool to validate and sanitize package names; upgrade to the vendor-fixed version.

CVE-2026-53657: Lima guest agent socket exposure

  • Impact: An arbitrary user inside the VM can access the guest agent socket and run commands as root in the VM.
  • Affected Systems: github.com/lima-vm/lima/v2 on the qemu driver with guest agent enabled.
  • Immediate Action: If you use Lima on affected configurations, switch to vz or disable the guest agent now.
  • Mitigation: Upgrade to Lima v2.1.3 or apply the documented workarounds.

CVE-2026-32257: Winter CMS backend branding stored XSS

  • Impact: Users with backend branding permissions can inject stored XSS into backend pages.
  • Affected Systems: winter/wn-backend-module before v1.2.13.
  • Immediate Action: Review who has branding permissions and restrict them to trusted administrators only.
  • Mitigation: Upgrade to v1.2.13.

CVE-2026-32258: Winter CMS editor settings stored XSS

  • Impact: Users with editor-management permission can inject stored XSS through markup styles.
  • Affected Systems: winter/wn-backend-module before v1.2.13.
  • Immediate Action: Limit access to trusted staff and inspect custom style entries for untrusted content.
  • Mitigation: Upgrade to v1.2.13 and verify compiled CSS is sanitized.

CVE-2026-62871: .NET WPF out-of-bounds write

  • Impact: Local code execution on Windows systems using affected .NET desktop runtime packages.
  • Affected Systems: Microsoft.WindowsDesktop.App.Runtime packages for .NET 8, 9, and 10 in the affected ranges.
  • Immediate Action: Update runtimes and redeploy self-contained apps that bundle vulnerable versions.
  • Mitigation: Install 8.0.30, 9.0.19, or 10.0.11 as appropriate.

CVE-2026-62886: .NET WPF integer overflow leading to local privilege escalation

  • Impact: An unauthorized local attacker can elevate privileges on Windows.
  • Affected Systems: Microsoft.WindowsDesktop.App.Runtime packages for .NET 8, 9, and 10 in the affected ranges.
  • Immediate Action: Patch Windows desktop runtimes on developer and user endpoints first.
  • Mitigation: Upgrade to the patched runtime versions and restart affected apps.

CVE-2026-70354: .NET WPF out-of-bounds write

  • Impact: Local code execution on Windows.
  • Affected Systems: Microsoft.WindowsDesktop.App.Runtime packages for .NET 8, 9, and 10 in the affected ranges.
  • Immediate Action: Update all Windows desktop deployments that use the affected runtime packages.
  • Mitigation: Move to the patched runtime versions and redeploy self-contained applications.

CVE-2026-62901: .NET WebSockets denial of service

  • Impact: A remote attacker can trigger a denial of service over the network.
  • Affected Systems: Microsoft.NETCore.App.Runtime packages for .NET 8, 9, and 10 across Windows, Linux, and macOS.
  • Immediate Action: Prioritize internet-facing services using WebSockets and watch for connection storms or hung workers.
  • Mitigation: Upgrade to 8.0.30, 9.0.19, or 10.0.11 and restart services.

CVE-2026-46369: Nimiq replay protection bypass

  • Impact: A signed transaction can be replayed within a narrow window, causing double execution and double transfers.
  • Affected Systems: nimiq-blockchain.
  • Immediate Action: Treat as a financial-integrity issue; monitor for repeated transaction IDs and unusual duplicate transfers.
  • Mitigation: Apply the upstream patch immediately.

CVE-2026-62898: Microsoft QUIC use-after-free information disclosure

  • Impact: A remote attacker can disclose information over the network.
  • Affected Systems: Microsoft.NETCore.App.Runtime packages for .NET 8, 9, and 10 in the affected ranges.
  • Immediate Action: Patch systems that expose QUIC or HTTP/3 services first.
  • Mitigation: Install the fixed runtime versions and restart affected applications.

CVE-2026-55153: mchange-commons-java JNDI object factory abuse

  • Impact: Malicious JNDI references can trigger unsafe object construction, network access, or deserialization gadget chains.
  • Affected Systems: mchange:mchange-commons-java and dependent c3p0 deployments.
  • Immediate Action: Search for exposed JNDI entry points and restrict untrusted serialized input immediately.
  • Mitigation: Upgrade to v0.6.0 or later; update c3p0 alongside it.

CVE-2026-48798: SSH.NET SCP directory traversal

  • Impact: A malicious SCP server can write files outside the intended download directory, enabling persistence or code execution on the client host.
  • Affected Systems: SSH.NET.
  • Immediate Action: Stop recursive downloads from untrusted or newly changed SCP servers until patched.
  • Mitigation: Upgrade to the fixed release that validates remote names and blocks path traversal.

CVE-2026-62897: .NET WPF integer overflow

  • Impact: Local code execution on Windows.
  • Affected Systems: Microsoft.WindowsDesktop.App.Runtime packages for .NET 8, 9, and 10 in the affected ranges.
  • Immediate Action: Treat as a companion emergency to the other WPF advisories; patch all affected Windows desktop runtimes together.
  • Mitigation: Upgrade to the patched runtime versions and redeploy self-contained apps.

🚨 ACTIVELY EXPLOITED

  • CVE-2026-72898 — Metabase SQL injection; CISA KEV. Patch immediately and assume exposure if the service was internet reachable.
  • CVE-2026-68820 — Windows WinSock ancillary driver use-after-free; CISA KEV. Prioritize Windows patching across endpoints and servers.

Previously Alerted

What to Do Now

  1. Patch the exploited and internet-facing systems first. Start with Metabase, Windows endpoints/servers, SeaweedFS, and any exposed MCP or automation tools.
  2. Remove unnecessary exposure. Restrict gRPC, admin, and developer-tool ports to trusted networks only.
  3. Upgrade runtimes and libraries in bulk. For Microsoft .NET, move to the patched runtime versions and redeploy self-contained apps.
  4. Rotate secrets where data may have been exposed. Assume credential theft is possible for Metabase and any system that can reach cloud metadata endpoints.
  5. Audit for abuse. Look for new admin accounts, unusual exports, prototype pollution symptoms, unexpected shell commands, and repeated transaction IDs.

Verification steps: confirm installed versions, compare against the affected ranges above, and validate that patched releases are actually running in production. For Windows and .NET, use dotnet --info and endpoint inventory; for containerized or self-hosted apps, verify the deployed image tags and runtime package versions.

Monitoring recommendations: watch for anomalous SQL activity, metadata service access, gRPC requests from unknown sources, process crashes, and authentication failures across tenants. Add alerts for suspicious usernames, newline injection patterns, and repeated SCP downloads from untrusted servers.

Related Resources

  • Internal follow-up analysis: pending — link will be added when available.
  • Official vendor advisories: Microsoft Security Response Center, GitHub Security Advisories, CISA KEV catalog, and product-specific release notes for Metabase, SeaweedFS, Pimcore, Trigger.dev, Lima, Winter CMS, Nimiq, SSH.NET, mchange-commons-java, and the affected .NET runtimes.

Keep reading