Threat Library

LaVague, an LLM-driven web browsing agent, contains a critical flaw where Python code extracted from LLM-generated markdown is executed without validation or sandboxing. Because the LLM's output is influenced by untrusted web page content, an attacker who controls a web page can smuggle malicious instructions that get translated into arbitrary code execution on the operator's machine. This is a textbook indirect prompt injection escalating directly to remote code execution.

The OWL agent framework's extract_document_content tool fetches arbitrary caller-supplied URLs without validating scheme, host, or IP, allowing attackers to force the agent to make requests to internal or restricted resources. This is exploitable via prompt injection, where malicious instructions embedded in processed content or user input direct the tool to target internal services, cloud metadata endpoints, or other sensitive network locations, with the response content flowing back into the agent's context.

A previously undocumented Linux backdoor named 'Ted' has been discovered compiled directly into trojanized HAProxy load balancer builds at two South Korean organizations. The implant intercepts and manipulates web traffic, serving altered content to selected visitors, indicating a targeted, capability-focused intrusion rather than opportunistic malware distribution.

A 12-year-old flaw in PostgreSQL's logical decoding feature allows a database role with REPLICATION privileges to escalate to arbitrary code execution as the OS user running the database server. PostgreSQL has released patched versions across all supported major releases to address CVE-2026-6471.

Microsoft identified a high-volume phishing campaign that embeds invisible Unicode tag characters within financial lure words (e.g., 'funding') to evade traditional email security filters. The technique splits keywords at the character level so pattern-matching and keyword-based detection engines fail to flag the malicious content, while the text still renders normally to human recipients.

Microsoft has acknowledged a known technical issue causing delays or outright failures when some users attempt to open the Microsoft Teams desktop client on Windows systems. This is a service reliability/availability problem rather than a security incident, with Microsoft actively working on a resolution.

A critical authentication bypass vulnerability in Citrix NetScaler (CVE-2026-19490) is being actively exploited in the wild, as reported by vulnerability intelligence firm Previdian. The flaw allows attackers to bypass authentication controls on NetScaler ADC/Gateway appliances, potentially granting unauthorized access to internal networks and sensitive resources.

IDScan, an identity verification company, allegedly suffered a data breach in which threat actors claim to have obtained and offered for sale over 153 million driver's license records. The company now faces multiple lawsuits related to the incident. Details on the initial attack vector remain undisclosed publicly.

A critical stack-based buffer overflow vulnerability affects Pyramid Solutions NetStaX EtherNet/IP Stack products prior to v5.6.1, used across industrial control system (ICS) devices. Exploitation via oversized Class 3 explicit-message requests could cause memory corruption, device crashes, or remote code execution without any CIP error notification, posing significant risk to critical manufacturing, energy, water, and chemical sectors.

Tycon Systems TPDIN-Monitor-WEB3 firmware versions 2.2.9 and earlier contain three vulnerabilities—hard-coded credentials, CSRF, and missing authorization—that could allow an attacker to intercept sensitive data, perform state-changing operations, or extract system credentials, configurations, and flash contents. These devices are deployed worldwide in Critical Manufacturing and Energy sectors, and successful exploitation could enable man-in-the-middle attacks, factory resets, credential wipes, or full information disclosure. Tycon Systems has released firmware v2.4.2 to remediate all three issues.

CISA has added CVE-2026-85046, a type confusion vulnerability in Google Chromium's V8 JavaScript engine, to its Known Exploited Vulnerabilities catalog based on evidence of active exploitation. Federal agencies are required under BOD 26-04 to remediate this vulnerability on a prioritized timeline, and all organizations are encouraged to patch given confirmed in-the-wild exploitation.

A critical authorization flaw in MOOS essential-moos pShare (through 10.0.1) allows any publisher on the bus to send crafted PSHARE_CMD messages that reconfigure network routes and listeners at runtime. This enables attackers to redirect or duplicate sensitive inter-process communication traffic to attacker-controlled destinations without authentication, posing severe risks to robotics and autonomous system deployments that rely on MOOS for message passing.

A critical authentication bypass vulnerability exists in the optional MOOSDB HTTP server component of MOOS core-moos through version 10.4.0, allowing unauthenticated attackers to write arbitrary MOOS variables including actuator and override commands. This could enable remote attackers to hijack control of autonomous vehicles or robotic systems that rely on MOOS-IvP for mission control and coordination.

python-jose through version 3.5.0 contains an incomplete fix for a prior key-confusion vulnerability (CVE-2024-33663), allowing attackers who possess a service's RSA/EC public key to forge valid HS256-signed JWTs when the verifying application does not explicitly restrict accepted algorithms. This enables full authentication bypass against any system relying on python-jose for JWT verification without strict algorithm allowlisting.

Taipy, a Python framework used to build data and AI application front-ends, ships with a Socket.IO server configuration that combines wildcard CORS origins with credentialed connections enabled. This allows any malicious webpage to establish authenticated WebSocket sessions with a victim's running Taipy application and directly invoke state changes and backend callbacks without CSRF protection, effectively granting remote attackers unauthorized control over application logic and data.

A critical unauthenticated remote buffer overflow vulnerability has been identified in TOTOLINK CP450 4.1.0 routers, exploitable via the topicurl parameter in the /cgi-bin/cstecgi.cgi endpoint. With a CVSS score of 9.9, this flaw allows remote attackers to potentially execute arbitrary code or crash the device without authentication.

A type confusion vulnerability in Google Chromium's V8 JavaScript engine allows remote attackers to execute arbitrary code within the browser sandbox via a crafted HTML page. The flaw affects all Chromium-based browsers, including Google Chrome, Microsoft Edge, and Opera, and is listed in CISA's Known Exploited Vulnerabilities catalog with an active exploitation status and a remediation deadline of September 18, 2026.

BraZetsu is a Python-based Windows malware framework used by Initial Access Brokers (IABs) to commoditize compromised hosts on underground marketplaces. Rather than acting as a standard infostealer, it functions as a comprehensive toolkit that profiles, categorizes, and packages victim systems for resale to other threat actors, including ransomware operators.

Cisco disclosed a critical unauthenticated remote code execution vulnerability (CVE-2026-20212, CVSS 9.8) affecting 10 Silicon One-based Nexus 9000 switch models, allowing attackers to execute code as root without credentials. Alongside this, Cisco released an IOS XR hardening bundle addressing 7 CVEs, two rated 9.8, with no available workarounds for any affected IOS XR version, making immediate patching the only mitigation.

This roundup aggregates multiple ongoing threat campaigns including CEO/executive impersonation phishing kits, a mass compromise affecting roughly 5,000 Dropbox accounts, and OAuth consent-phishing traps that trick users into granting malicious apps access via legitimate-looking 'Allow' prompts. The common thread is abuse of trust in normal workflows—IT calls, shared files, and trusted apps—rather than technical exploitation, making these attacks highly effective and hard to detect through traditional security controls.