Security Digest: September 12, 2026 - 29 Critical Vulnerabilities

Today’s digest is dominated by seven actively exploited flaws and a wide mix of high-impact auth bypasses, SSRF paths, privilege escalations, and denial-of-service bugs across firewall management, package repositories, collaboration platforms, storage tooling, and developer infrastructure. Patch or isolate exposed systems immediately; several of these issues allow unauthenticated remote compromise, and the rest can be chained by low-privilege users into tenant takeover, data theft, or service disruption.

· 21 min read

Executive Summary

Today’s digest is dominated by seven actively exploited flaws and a wide mix of high-impact auth bypasses, SSRF paths, privilege escalations, and denial-of-service bugs across firewall management, package repositories, collaboration platforms, storage tooling, and developer infrastructure. Patch or isolate exposed systems immediately; several of these issues allow unauthenticated remote compromise, and the rest can be chained by low-privilege users into tenant takeover, data theft, or service disruption.

The fastest wins are clear: remove public exposure for management services, apply vendor fixes now, and hunt for signs of abuse on Cisco FMC, MikroTik RouterOS, JFrog Artifactory, and GitLab first. If you operate any of the affected SaaS/self-hosted developer tools, treat today as an emergency maintenance window.

Critical Vulnerabilities

  • CVE-2026-20079: Cisco FMC/SCC authentication bypass
    • Impact: Unauthenticated remote attackers can bypass auth, run script files, and reach root on affected devices.
    • Affected Systems: Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management.
    • Immediate Action: Patch now and restrict management access to trusted admin networks only.
    • Mitigation: Apply Cisco’s fixed release and review FMC logs for unexpected script execution or login anomalies.
  • CVE-2026-86060: MikroTik RouterOS policy mask privilege escalation
    • Impact: Attackers can alter trusted policy settings and escalate privileges.
    • Affected Systems: MikroTik RouterOS.
    • Immediate Action: Update RouterOS immediately; block untrusted access to management interfaces.
    • Mitigation: Apply the vendor patch and verify no exposed admin services remain on WAN-facing interfaces.
  • CVE-2026-42016: JFrog Artifactory authorization flaw
    • Impact: Privilege escalation through broken token validation can expose repositories and admin functions.
    • Affected Systems: JFrog Artifactory.
    • Immediate Action: Upgrade Artifactory and rotate high-value tokens if the service was internet reachable.
    • Mitigation: Patch, audit token use, and review repository access logs for unusual scope changes.
  • CVE-2026-42018: JFrog Artifactory anonymous-token exposure
    • Impact: Unauthenticated callers may receive internal anonymous-user tokens and reach sensitive resources.
    • Affected Systems: JFrog Artifactory.
    • Immediate Action: Patch immediately and disable anonymous access where possible.
    • Mitigation: Apply the vendor fix and inspect for anonymous requests to sensitive endpoints.
  • CVE-2026-85706: GitLab path traversal in repository commits API
    • Impact: Unauthenticated attackers can read arbitrary files from affected GitLab instances.
    • Affected Systems: GitLab Community Edition and Enterprise Edition.
    • Immediate Action: Patch urgently and restrict GitLab exposure to trusted networks while you upgrade.
    • Mitigation: Apply GitLab’s update and review access logs for unusual repository commit API reads.
  • CVE-2026-67277: MikroTik RouterOS btest service missing authentication
    • Impact: Kernel memory disclosure and denial of service are possible through the btest service.
    • Affected Systems: MikroTik RouterOS.
    • Immediate Action: Disable or restrict btest exposure and upgrade RouterOS now.
    • Mitigation: Patch and confirm the service is not reachable from untrusted networks.
  • CVE-2026-59971: mysql_mcp_server unauthenticated SQL execution
    • Impact: Attackers can run arbitrary SQL, exfiltrate data, and potentially reach file read/write or RCE paths.
    • Affected Systems: pip mysql-mcp-server when MCP_TRANSPORT=sse.
    • Immediate Action: Upgrade to v0.4.2 and do not expose SSE mode without local-only binding and auth.
    • Mitigation: Switch to stdio mode, bind to 127.0.0.1, and verify no public SSE endpoint remains open.
  • CVE-2026-88018: rclone serve s3 auth-proxy zero-knowledge bypass
    • Impact: Unauthenticated attackers can pass S3 auth-proxy checks with empty-secret signatures.
    • Affected Systems: Go github.com/rclone/rclone deployments using --auth-proxy without --auth-key.
    • Immediate Action: Stop using auth-proxy in this configuration now and upgrade to a fixed release.
    • Mitigation: Require --auth-key, apply the vendor fix, and audit exposed S3 endpoints.
  • CVE-2026-59151: Prowler SAML cross-tenant account takeover
    • Impact: Attackers can obtain tokens for the wrong tenant and pivot into another tenant’s security data.
    • Affected Systems: pip prowler-cloud.
    • Immediate Action: Patch immediately and review SAML tenant mappings for inconsistencies.
    • Mitigation: Apply the fix, validate tenant binding, and monitor SAML login flows for unexpected domain mismatches.
  • CVE-2026-61534: yayson prototype pollution
    • Impact: Remote attackers can pollute Object.prototype, causing process-wide logic corruption and possible DoS.
    • Affected Systems: npm yayson <= 4.2.0.
    • Immediate Action: Upgrade to 4.3.0 and block untrusted JSON:API payloads.
    • Mitigation: Patch and add input validation for reserved object keys.
  • CVE-2026-88044: rclone RC per-server auth-proxy ignored
    • Impact: FTP auth-proxy settings can be silently skipped, exposing anonymous access; S3 proxy routing can also be bypassed.
    • Affected Systems: Go github.com/rclone/rclone RC-started FTP/S3 servers in affected versions.
    • Immediate Action: Remove exposed RC-started services or upgrade immediately.
    • Mitigation: Apply the vendor fix and verify per-server proxy options are actually enforced.
  • CVE-2026-59148: Mockoon admin API open by default
    • Impact: Unauthenticated remote callers can read secrets, rewrite mock routes, and poison runtime env vars.
    • Affected Systems: npm @mockoon/commons-server, @mockoon/cli.
    • Immediate Action: Disable or firewall the admin API right now; do not leave Mockoon listening on public interfaces.
    • Mitigation: Turn off admin access, bind to loopback, and upgrade once fixed releases are available.
  • CVE-2026-56828: Shopper framework role escalation via Livewire settings components
    • Impact: Low-privilege staff can grant themselves permissions, create admin users, or delete roles.
    • Affected Systems: composer shopper/framework.
    • Immediate Action: Patch and audit staff roles for unauthorized permission changes.
    • Mitigation: Apply the fix and review recent role/permission edits.
  • CVE-2026-55416: Pimcore custom reports SQL injection
    • Impact: Authenticated attackers with report configuration rights can execute arbitrary SQL.
    • Affected Systems: composer pimcore/pimcore.
    • Immediate Action: Restrict reports_config permissions and patch immediately.
    • Mitigation: Upgrade to the fixed release and review custom report definitions for injected SQL.
  • CVE-2026-87995: Open WebUI port preview same-origin script execution
    • Impact: An authenticated user can run script in the app origin and steal session tokens.
    • Affected Systems: pip open-webui.
    • Immediate Action: Upgrade and disable exposed shared terminal server previews until fixed.
    • Mitigation: Apply the patch and review terminal-server access and preview settings.
  • CVE-2026-59973: FrontMCP OpenAPI SSRF bypass
    • Impact: Attackers can trigger backend requests to loopback or private services during tool generation.
    • Affected Systems: npm mcp-from-openapi, @frontmcp/adapters, frontmcp.
    • Immediate Action: Patch and treat untrusted OpenAPI specs as hostile input.
    • Mitigation: Upgrade and disable external refs for untrusted specs.
  • CVE-2026-56829: Shopper VariantStock authorization bypass
    • Impact: Any authenticated admin-panel user can change inventory for arbitrary variants.
    • Affected Systems: composer shopper/framework.
    • Immediate Action: Patch and review inventory changes for unauthorized stock manipulation.
    • Mitigation: Apply the fix and lock Livewire-bound identifiers.
  • CVE-2026-87016: Open WebUI SQLite identity wildcard match
    • Impact: Subject matching can bind sign-in to the wrong account, including admins, on SQLite deployments.
    • Affected Systems: pip open-webui on SQLite with OAuth/OIDC or SCIM enabled.
    • Immediate Action: Patch and review identity-provider claim mappings.
    • Mitigation: Upgrade and avoid user-controlled subject claims.
  • CVE-2026-56825: Shopper CollectionProducts missing authorization
    • Impact: Browse-only staff can detach products from any collection, including bulk operations.
    • Affected Systems: composer shopper/framework.
    • Immediate Action: Patch and check for unexpected collection edits.
    • Mitigation: Apply the fix and enforce correct action-level authorization.
  • CVE-2026-56827: Shopper grouped bulk actions lack authorization
    • Impact: Read-only staff can delete attributes/tags or disable brands, categories, and suppliers in bulk.
    • Affected Systems: composer shopper/framework.
    • Immediate Action: Upgrade and review catalog integrity immediately.
    • Mitigation: Apply the fix and audit recent bulk changes.
  • CVE-2026-87996: Open WebUI Playwright loader DNS rebinding SSRF
    • Impact: Authenticated users can make the browser fetch internal services and metadata endpoints.
    • Affected Systems: pip open-webui with WEB_LOADER_ENGINE=playwright.
    • Immediate Action: Disable Playwright loading or patch immediately.
    • Mitigation: Upgrade and verify browser-side fetches are pinned to validated addresses.
  • CVE-2026-87011: Open WebUI back-channel logout DoS
    • Impact: Small bursts of requests can stall the async event loop and take the instance offline.
    • Affected Systems: pip open-webui with back-channel logout enabled.
    • Immediate Action: Disable the feature until patched; then upgrade.
    • Mitigation: Apply the fix and monitor logout traffic spikes.
  • CVE-2026-59960: Argos CI branch-name command injection
    • Impact: Crafted branch names can execute shell commands on CI runners.
    • Affected Systems: npm @argos-ci/core.
    • Immediate Action: Patch and sanitize branch/ref inputs in CI pipelines now.
    • Mitigation: Upgrade and remove shell-based git command construction.
  • CVE-2026-88045: rclone S3 multipart header-driven memory exhaustion
    • Impact: Attackers can force large memory reservations from request headers alone, causing DoS.
    • Affected Systems: Go github.com/rclone/rclone S3 streamed multipart deployments.
    • Immediate Action: Patch and limit S3 exposure to trusted clients.
    • Mitigation: Apply the fix and enforce a safe maximum part size.
  • CVE-2026-88017: rclone FTP auth-proxy cross-session backend confusion
    • Impact: One authenticated session can be rebound to another user’s backend and files.
    • Affected Systems: Go github.com/rclone/rclone FTP auth-proxy deployments.
    • Immediate Action: Patch and review active FTP sessions for unexpected backend switches.
    • Mitigation: Apply the fix and bind credentials to sessions, not usernames.
  • CVE-2026-87998: Open WebUI external knowledge connection deletion bug
    • Impact: Non-admin users can delete shared external knowledge connections used by other bases.
    • Affected Systems: pip open-webui with external knowledge providers.
    • Immediate Action: Patch and audit external knowledge base permissions immediately.
    • Mitigation: Upgrade and verify connection deletion is admin-gated.
  • CVE-2026-87999: Open WebUI internal address screen bypass
    • Impact: Authenticated users can make server-side fetches to internal or platform-reserved addresses.
    • Affected Systems: pip open-webui web fetch and RAG ingestion paths.
    • Immediate Action: Patch and block internal web-fetch destinations now.
    • Mitigation: Upgrade and enforce a strict internal address denylist.
  • CVE-2026-59965: Payload alt-text plugin authorization bypass
    • Impact: Any authenticated user can read or overwrite protected upload metadata fields.
    • Affected Systems: npm @jhb.software/payload-alt-text-plugin.
    • Immediate Action: Patch and disable the plugin if you cannot upgrade immediately.
    • Mitigation: Apply the fix and ensure Local API calls do not override access control.
  • CVE-2026-86074: n8n Instance AI credential origin mismatch
    • Impact: Attacker-influenced URLs can steer credential tests or probes to another origin.
    • Affected Systems: n8n prior to 2.37.7 and 2.38.2.
    • Immediate Action: Upgrade immediately and review Instance AI credential setup flows.
    • Mitigation: Apply the vendor fix and restrict user-controlled URL origins.

🚨 ACTIVELY EXPLOITED

These seven CVEs are confirmed in the wild and should be handled first:

  • CVE-2026-20079 — Cisco FMC/SCC authentication bypass
  • CVE-2026-86060 — MikroTik RouterOS privilege escalation
  • CVE-2026-42016 — JFrog Artifactory authorization flaw
  • CVE-2026-42018 — JFrog Artifactory anonymous-token exposure
  • CVE-2026-85706 — GitLab path traversal
  • CVE-2026-67277 — MikroTik RouterOS btest service flaw
  • CVE-2026-68839 — Previously issued critical alert, keep it at the top of your backlog

Previously Alerted

What to Do Now

  1. Patch the exploited products first: Cisco FMC/SCC, MikroTik RouterOS, JFrog Artifactory, and GitLab.
  2. Disable or isolate exposed management services until updates are complete, especially firewall, router, and repository admin interfaces.
  3. Upgrade developer tooling and self-hosted services including Open WebUI, rclone, Mockoon, Prowler, FrontMCP, n8n, and Shopper.
  4. Rotate secrets and tokens if any affected service was public-facing or recently abused.
  5. Review logs for abuse indicators: unexpected auth bypasses, file reads, token issuance, route rewrites, and bulk permission changes.

Verification steps:

  • Confirm package versions against vendor advisories and lockfiles.
  • Check whether vulnerable features are enabled, such as MCP_TRANSPORT=sse, WEB_LOADER_ENGINE=playwright, back-channel logout, or rclone auth-proxy modes.
  • Validate that admin APIs are not exposed on public interfaces and are bound to loopback or trusted networks only.
  • Search for suspicious changes to permissions, SAML mappings, external knowledge connections, and mock/runtime configuration.

Monitoring recommendations:

  • Alert on new admin sessions, token switches, and unexpected tenant changes.
  • Watch for file access, script execution, and repository API access spikes on GitLab, Artifactory, and Cisco FMC.
  • Track unusual outbound requests from loaders, proxies, and CI jobs to loopback, metadata, or private IP ranges.
  • Log and review Livewire, SAML, and bulk-action activity in Shopper-like admin panels.

Related Resources

  • Internal blog posts: A deeper technical roundup will be published separately; link it here once ready.
  • Official vendor advisories: Cisco, MikroTik, JFrog, GitLab, rclone, Open WebUI, n8n, Mockoon, Prowler, Shopper, Pimcore, Argos CI, FrontMCP, and Payload maintainers have all issued or are expected to issue fixes for the items above.

Keep reading