September 4, 2026 | Jonathan Brown
Command View
Verification cutoff
September 4, 2026, 13:44 UTC.
This edition concentrates on an unusually dense cluster of active exploitation affecting remote-access appliances, enterprise telephony, software-supply-chain infrastructure, workflow orchestration, artificial-intelligence gateways, and browsers. Separate disclosures affecting Cisco network infrastructure, VMware desktop hypervisors, PostgreSQL replication accounts, and industrial-control products require accelerated exposure review even where exploitation has not been reported.
Priority posture
- RED: active exploitation, confirmed operational effect, or control-plane/cyber-physical exposure requiring immediate containment, compromise assessment, or recovery validation.
- AMBER: high-consequence exposure, major patching need, public exploit material, or serious supplier weakness without confirmed broad exploitation.
- WATCH: credible defensive, regulatory, campaign, or vendor development requiring tracking.
- CONTEXT: changes planning assumptions without establishing current compromise.
Today’s decisions
- RED — Network and incident-response teams: Upgrade affected SonicWall SMA 1000 appliances immediately. Preserve logs and configuration, review SonicWall indicators, and re-image affected appliances if compromise evidence is found; patching alone is not closure.
- RED — Unified-communications owners: Upgrade Sangoma Switchvox to 8.4.0.2 and examine
/var/log/switchvox/db-quirks.logfor exploitation. Treat observed reverse shells or the reported attacker address as compromise, not merely scanning. - RED — DevSecOps and supply-chain owners: Isolate and upgrade vulnerable self-managed JFrog Artifactory systems. Review administrative-token issuance, newly created users, federated-access changes, repository modifications, and downstream build integrity.
- RED — Cloud and artificial-intelligence platform teams: Inventory exposed Kestra, LiteLLM, Starlette, and Model Context Protocol services. Patch affected releases, restrict management routes, rotate stored provider and infrastructure credentials, and inspect container hosts—not only containers—for persistence.
- RED — Endpoint engineering: Force Chrome’s September third security update across managed Windows, macOS, and Linux fleets; active exploitation of CVE-2026-85046 is confirmed, although Google has not disclosed campaign scope.
- AMBER — Network engineering: Determine whether Cisco Nexus 9000 Silicon One switches or any IOS XR devices are affected. Apply fixed software or platform-specific Software Maintenance Updates and temporarily restrict exposed control-plane ports.
- AMBER — Database and virtualization teams: Patch supported PostgreSQL branches and VMware Workstation or Fusion installations. Audit PostgreSQL replication principals and treat administrative access inside a virtual machine as a potential route to its host.
- AMBER — OT engineering: Prioritize IXON VPN Client and NetStaX EtherNet/IP Stack exposure. Validate embedded-product provenance before assuming that a vulnerable third-party protocol stack is absent.
Threat and Resilience Ledger
RED — Remote-access edge | Global — SonicWall confirms exploitation of two SMA 1000 zero-days
SonicWall disclosed on September second that it investigated a case indicating active exploitation of CVE-2026-83548 and CVE-2026-83549 against SMA 1000 appliances. CVE-2026-83548 is a CVSS 10.0 pre-authentication server-side request-forgery flaw in the Appliance Work Place interface. CVE-2026-83549 is a CVSS 7.8 command-injection flaw requiring an authenticated administrator in the Appliance Management Console. Their proximity and the vendor’s plural reference to exploited “vulnerabilities” support treating them as a possible chain from unauthenticated appliance access to operating-system command execution, although SonicWall has not published the complete observed attack sequence. Models 6210, 7210, and 8200v are affected when running 12.4.3-03453 and earlier or 12.5.0-02835 and earlier. Fixed platform hotfixes are 12.4.3-03526 and 12.5.0-02952. If indicators are found, SonicWall directs customers to re-image or redeploy the appliance, change user and administrator passwords, and reset time-based one-time-password enrollment.
Evidence: confirmed.
Attribution: unknown.
Confidence: high.
Uncertainty: SonicWall has not disclosed the actor, victim scope, initial targeting, persistence method, or complete exploit chain.
Sources: SonicWall PSIRT — “SMA1000 Pre-Authentication SSRF and Post-Authentication OS Command Injection Vulnerabilities,” September 2, 2026; CISA — “CISA Adds Seven Known Exploited Vulnerabilities to Catalog,” September 2, 2026.
RED — Enterprise telephony | Predominantly United States exposure — Switchvox SQL injection exploited for reverse shells
Horizon3.ai reported on September first that valid exploitation of CVE-2026-9586 began striking its Switchvox honeypots on August thirtieth. The unauthenticated SQL-injection flaw resides in the /pa endpoint, where attacker-controlled PhoneIP data from XML input reaches a PostgreSQL query without parameterization. Because the query executes with PostgreSQL superuser authority, an attacker can perform database operations and invoke operating-system commands, including creation of a reverse shell. Horizon3 observed exploitation followed by process enumeration and identified 176.65.148[.]184 as one source. It estimated approximately 4,000 internet-visible systems, primarily in the United States; this is exposure telemetry, not a confirmed victim count. Sangoma fixed the issue in Switchvox 8.4.0.2. Public upstream references differ over the exact vulnerable legacy build—one CVE description names SMB Edition 8.3 build 104997, while Sangoma’s release notes reference 8.2.2.1—so defenders should not construe either string as a complete affected-version boundary.
Evidence: confirmed exploitation against honeypots; demonstrated remote code execution.
Attribution: unknown.
Confidence: high.
Uncertainty: The number of compromised production systems, attacker objectives beyond enumeration, and the complete vulnerable-version range remain undisclosed.
Sources: Horizon3.ai — “Off the Hook: Discovering and Observing Active Exploitation of Sangoma Switchvox CVE-2026-9586,” September 1, 2026; Sangoma — “Switchvox Release Notes Version 8.4.0.2,” July 14, 2026; CISA — “CISA Adds Seven Known Exploited Vulnerabilities to Catalog,” September 2, 2026.
RED — Software supply chain | Global — Artifactory authentication bypass used to mint administrator tokens
CISA added CVE-2026-82329 to the Known Exploited Vulnerabilities catalog on September second after researchers observed attacks against self-managed JFrog Artifactory. The CVSS 9.8 authentication weakness affects default configurations and can let an unauthenticated network attacker obtain administrative privileges. JFrog lists affected trains spanning 7.111.4 through 7.161.19, with branch-specific ranges; Artifactory 7.161.20 contains the publicly identified fix. WatchTowr reported exploitation beginning September first, including administrator-token generation, enumeration of users, groups, credentials and federated-access relationships, and—in limited cases—creation of backdoor users. Artifactory is a high-consequence software-distribution control plane: administrative compromise can contaminate repositories, build inputs, release artifacts, signing processes, and downstream deployments. Defenders must therefore validate artifact and pipeline integrity in addition to closing the authentication flaw.
Evidence: confirmed active exploitation.
Attribution: unknown.
Confidence: high.
Uncertainty: There is no public count of compromised production repositories, and no public evidence yet establishes widespread downstream package poisoning.
Sources: JFrog — “CVE-2026-82329 — Potential Authentication Bypass Leading to Administrative Access in Artifactory,” August 28, 2026; WatchTowr reporting, September 1, 2026; CISA — “CISA Adds Seven Known Exploited Vulnerabilities to Catalog,” September 2, 2026.
RED — Cloud, automation and AI control planes | Global — Exploited orchestration and gateway flaws expose secrets and container hosts
CISA’s September second exploitation update included CVE-2026-49869 in Kestra, CVE-2026-48710 in Starlette, and CVE-2026-59822 in LiteLLM. Kestra versions through 1.3.20 contain an authentication-filter error that lets an unauthenticated attacker create and execute workflows; default script plugins can provide root command execution inside the worker container. Fixes are 1.0.45 and 1.3.21. Microsoft assesses with high confidence that CVE-2026-49869 likely provided initial access in an observed compromise involving shell execution, Docker-socket access, container-environment discovery, XMRig deployment, defense evasion, and data collection through Kestra’s own key-value store.
Starlette through 1.0.0 is vulnerable to CVE-2026-48710, a Host-header parsing defect that can cause security middleware to evaluate a different path from the one actually routed; version 1.0.1 fixes it. Researchers demonstrated its use with LiteLLM CVE-2026-42271 to turn an authenticated MCP test-endpoint command-injection flaw into unauthenticated remote code execution. LiteLLM 1.83.7 fixes that command-execution issue. Separately, CVE-2026-59822 allows an arbitrary bearer token to establish an authenticated LiteLLM MCP session and access configured tools; it affects releases before 1.84.0 and is fixed in 1.84.0. Microsoft observed attackers harvesting provider keys, master keys, database strings and virtual-token records and establishing SSH persistence. These services should be treated as privileged routing and automation planes, not ordinary applications.
Evidence: confirmed exploitation; demonstrated exploit chains; Microsoft assessment for the Kestra initial-access path.
Attribution: unknown; code characteristics do not establish AI-assisted authorship.
Confidence: high.
Uncertainty: Public reporting does not establish the number of organizations compromised or whether stolen AI-provider credentials have been used against downstream systems.
Sources: Microsoft — “When AI Infrastructure Becomes the Target: Securing Gateways and Control Points,” August 26, 2026; Kestra — GitHub Security Advisory GHSA-5vc5-wxxq-3fjx; Starlette — GitHub Security Advisory GHSA-86qp-5c8j-p5mr; LiteLLM — GitHub Security Advisories GHSA-v4p8-mg3p-g94g and GHSA-7488-6r32-c95q; Horizon3.ai — “CVE-2026-42271 Chained with CVE-2026-48710.”
RED — Enterprise endpoints | Global — Google patches an actively exploited Chrome V8 zero-day
Google released Chrome 152.0.7977.82 and 152.0.7977.83 for Windows and macOS and 152.0.7977.82 for Linux on September third. The update fixes CVE-2026-85046, a high-severity type-confusion vulnerability in the V8 JavaScript and WebAssembly engine. Google explicitly confirmed that an exploit exists in the wild but withheld technical details and campaign information while deployment proceeds. The confirmed pre-patch exploitation makes this a zero-day. Browser exploitation can become an initial-access route into administrative workstations, privileged web consoles, cloud management sessions and operational-support environments; the absence of a disclosed sandbox escape or victim profile should not be interpreted as proof that exploitation is low impact.
Evidence: confirmed active exploitation.
Attribution: unknown.
Confidence: high.
Uncertainty: Exploit-chain composition, affected victims, delivery method and whether additional vulnerabilities are involved remain undisclosed.
Sources: Google Chrome Releases — “Stable Channel Update for Desktop,” September 3, 2026.
AMBER — Network control plane | Global — Cisco fixes unauthenticated root execution in Nexus and broad IOS XR weaknesses
Cisco’s September second publication disclosed CVE-2026-20212, a CVSS 9.8 vulnerability affecting ten listed Nexus 9000 models containing Silicon One application-specific integrated circuits. TCP ports 43210 and 43211 are reachable through the default Layer 3 virtual routing and forwarding instance; an unauthenticated remote attacker able to connect can submit crafted input for root code execution or crash the S1HAL process and force a device reload. Cisco provides fixed NX-OS software, infrastructure access-control-list mitigation, and a temporary Live Protect shield. Cisco reports no known malicious use.
Cisco separately released a broad IOS XR hardening advisory covering CVE-2026-20274 through CVE-2026-20280. All IOS XR releases, including IOS XR7, are within the affected scope regardless of configuration, although the individual functional areas and applicable fixes vary by platform and train. The maximum reported CVSS score is 9.8. Cisco found the underlying weaknesses through internal testing, including work using frontier AI models, and reports no known exploitation. Remediation requires release- and platform-specific Software Maintenance Updates; future 26.2.2 and 26.3.1 releases are identified as the first planned releases containing the complete fixes without those updates.
Evidence: vendor-confirmed vulnerabilities; no confirmed exploitation.
Attribution: not applicable.
Confidence: high.
Uncertainty: Cisco groups multiple underlying weaknesses beneath class-level CVE identifiers, limiting public technical detail and complicating independent exploitability assessment.
Sources: Cisco — “Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability,” September 2, 2026; Cisco — “Cisco IOS XR Software Security Hardening Release: September 2026,” updated September 3, 2026.
AMBER — Virtualization boundary | Global — VMware guest-to-host code execution flaws receive fixes
Broadcom published VMSA-2026-0007 on September third for VMware Workstation and Fusion 25H2 and 26H1. CVE-2026-59346 is a CVSS 9.3 integer overflow in VMXNET3 that can let a malicious actor with local administrative privileges inside a virtual machine execute code on the host. CVE-2026-59347 is a CVSS 8.1 stack-based buffer overflow in VMware Host Guest File System handling that can let a similarly privileged guest attacker execute code in the virtual machine’s VMX process on the host. Both are fixed in Workstation and Fusion 26H1u1. Broadcom provides no workaround and reports that both vulnerabilities were privately disclosed; no exploitation has been reported.
Evidence: confirmed vulnerabilities; no confirmed exploitation.
Attribution: not applicable.
Confidence: high.
Uncertainty: Public exploit availability and the practical reliability of escaping hardened guest configurations are not known.
Sources: Broadcom — “VMSA-2026-0007: VMware Workstation and Fusion Updates Address Integer-Overflow and Buffer Overflow Vulnerabilities,” September 3, 2026.
AMBER — Database trust boundary | Global — PostgreSQL replication privilege can become server code execution
Renewed technical reporting on September fourth highlighted CVE-2026-6471, which PostgreSQL patched on August thirteenth. A non-superuser holding the REPLICATION privilege can select a logical-decoding plugin using an arbitrary filesystem path, causing PostgreSQL to load a file visible to the operating-system account running the server. Malicious library loading can execute arbitrary code as that account. Supported branches are fixed in PostgreSQL 18.6, 17.11, 16.15, 15.19 and 14.24; earlier maintenance releases are affected. Researchers report that the underlying behavior reaches back to PostgreSQL 9.4, meaning unsupported installations require migration rather than an expected backport. Exploitation requires a replication-capable account or theft of its credentials; no active exploitation has been reported.
Evidence: confirmed vulnerability; demonstrated impact; no confirmed exploitation.
Attribution: not applicable.
Confidence: high for supported-version exposure; moderate for the complete historical range.
Uncertainty: The prevalence of overprivileged replication credentials and the number of unsupported exposed installations are unknown.
Sources: PostgreSQL Global Development Group — “CVE-2026-6471: PostgreSQL Logical Decoding Can dlopen Arbitrary File,” August 13, 2026; Cyera Research — “PostGREShell,” September 2026.
AMBER — Industrial remote access and embedded protocols | Global — New OT advisories expose privileged clients and EtherNet/IP devices
CISA’s September third industrial advisories include two issues with direct operational relevance. CVE-2026-75925 affects IXON VPN Client releases before 1.4.7. Improper handling of carriage-return and line-feed characters in configuration values can introduce directives into a file consumed by a privileged subprocess, potentially producing root or SYSTEM execution on the workstation running the remote-access client. The CVSS 3.1 score is 9.6; user interaction is part of the scoring vector. Version 1.4.7 is the fixed release.
CVE-2026-78012 affects Pyramid Solutions NetStaX EtherNet/IP Stack before version 5.6.1 across adapter and scanner kits, including variants with CIP Security. A large Class 3 explicit-message request can exceed the receiving application buffer without returning a Common Industrial Protocol error, causing memory corruption, device failure or a potential remote compromise path. The CVSS 3.1 score is 9.8. Because this is an embedded software component, operators must identify downstream equipment and vendor firmware incorporating affected NetStaX releases rather than searching only for the supplier’s name.
Evidence: confirmed vulnerabilities; no confirmed exploitation.
Attribution: not applicable.
Confidence: high.
Uncertainty: Downstream embedded-product exposure for NetStaX and the practical remote delivery path against IXON clients have not been comprehensively enumerated.
Sources: CISA — “IXON VPN Client,” ICSA-26-246-02, September 3, 2026; CISA — “Pyramid Solutions NetStaX EtherNet/IP Stack,” ICSA-26-246-07, September 3, 2026.
WATCH — Aviation data systems | United Kingdom — Manchester Airports Group data published after extortion attempt
Manchester Airports Group disclosed on August twenty-seventh that an unauthorized third party obtained customer information associated with Manchester, London Stansted and East Midlands airports. The company said aviation safety and airport operations were not affected. Subsequent reporting indicates that the FulcrumSec extortion group published a large portion of the stolen material after MAG refused payment. Have I Been Pwned indexed approximately 8.8 million affected email-address records and associated telephone data. Reporters also reviewed samples containing booking and travel-history information. Claims that exposed administrative keys provided initial access remain attacker assertions, not independently verified findings. The immediate infrastructure risk is secondary exploitation: airport-themed phishing, help-desk impersonation, account recovery abuse and targeting based on travel or vehicle information.
Evidence: incident and customer-data theft confirmed; publication independently observed; access-path claims unverified.
Attribution: FulcrumSec claim, unconfirmed.
Confidence: high for breach and publication; low for initial-access claims.
Uncertainty: The complete dataset, intrusion path, persistence period and downstream misuse remain unknown.
Sources: Manchester Airports Group public incident statement, August 27, 2026; Have I Been Pwned — “Manchester Airports Group”; BleepingComputer — “FulcrumSec Claims Manchester Airports Hack, Theft of 86 GB of Data,” August 30, 2026; SecurityWeek — “Manchester Airports Group Data on 8.8 Million People Leaked After Ransom Refusal,” September 3, 2026.
Defensive Posture Changes
Recovery must follow control-plane compromise
For SonicWall, Artifactory, Kestra and LiteLLM, an installed patch does not invalidate tokens, remove accounts, repair poisoned artifacts or eliminate host persistence. Response plans should place evidence preservation and containment before credential rotation, then validate identity stores, connected systems, repositories, automation definitions, container hosts and downstream deployments.
Extend investigations beyond the vulnerable process
Kestra and LiteLLM attacks crossed application, container and credential boundaries. A compromised container with access to the Docker socket, cloud metadata or neighboring environment variables may expose the host and unrelated services. Rebuilding only the application container can preserve the attacker’s access.
Treat build infrastructure as an integrity incident
Any Artifactory administrative compromise should trigger verification of repository changes, uploaded or replaced binaries, package metadata, promotion records, signing activity and builds produced during the exposure window. Known-good source is insufficient if dependencies or release artifacts passed through an untrusted repository.
Review privileged “service” identities
PostgreSQL replication principals, LiteLLM provider keys, orchestration secrets and appliance administrator accounts often escape ordinary user-access reviews. Inventory these credentials, establish owners, restrict their reachable systems, and rotate them when the platform holding them may have been compromised.
Use component provenance in OT inventories
NetStaX illustrates a recurring OT problem: the vulnerable name may describe a protocol stack embedded inside another manufacturer’s product. Procurement records, software bills of materials and supplier attestations may be required to determine exposure. Absence from a conventional network scan is not reliable evidence of absence.
Regional and Sector Pulse
North America — RED
The exploitation cluster is globally relevant, but Switchvox exposure telemetry is concentrated in the United States. North American enterprises, managed-service providers, healthcare organizations, government agencies and utilities should prioritize internet-visible telephony, VPN, repository and AI-gateway systems.
Europe and United Kingdom — AMBER
The Manchester Airports Group breach has not disrupted airport operations, but publication of customer and travel-related information creates a credible secondary fraud and impersonation threat. European industrial organizations also have direct exposure to the Netherlands-headquartered IXON remote-access ecosystem.
Indo-Pacific — WATCH
No region-specific exploitation campaign was verified by the cutoff. Global exposure nevertheless applies to SonicWall, JFrog, Cisco, VMware, PostgreSQL and embedded NetStaX deployments throughout the region.
Middle East and Africa — WATCH
No new region-specific operational incident was verified. Organizations using centralized remote-access and automation platforms should apply the global RED and AMBER actions without inferring lower risk from the absence of named regional victims.
Latin America and Caribbean — WATCH
No defensible region-specific escalation was identified. Internet-accessible edge appliances, telephony systems and supplier-managed automation remain the principal transferable risks.
Vulnerability and Supplier Watchlist
SonicWall SMA 1000
Issue: CVE-2026-83548 and CVE-2026-83549; possible unauthenticated-to-code-execution chain.
Affected scope: Models 6210, 7210 and 8200v running 12.4.3-03453 or earlier, or 12.5.0-02835 or earlier.
Fixed release: 12.4.3-03526 and 12.5.0-02952 platform hotfixes.
Severity: CVSS 10.0 and 7.8.
Status: RED — vendor-confirmed active exploitation.
Sangoma Switchvox
Issue: CVE-2026-9586; unauthenticated SQL injection leading to database and operating-system command execution.
Affected scope: Public records identify vulnerable pre-fix Switchvox SMB releases but disagree on the specific legacy build; confirm all deployments below 8.4.0.2 with Sangoma.
Fixed release: 8.4.0.2.
Severity: CVSS 9.3 in the CVE record.
Status: RED — exploitation and reverse-shell behavior observed.
JFrog Artifactory
Issue: CVE-2026-82329; unauthenticated administrative access under default configuration.
Affected scope: Multiple self-managed 7.x branches listed by JFrog, through 7.161.19 in the current train.
Fixed release: 7.161.20; customers remaining on older supported trains should obtain the vendor-designated branch fix.
Severity: Critical, CVSS 9.8.
Status: RED — administrator-token minting and backdoor-user creation observed.
Kestra OSS
Issue: CVE-2026-49869; authentication bypass enabling workflow creation and command execution.
Affected scope: Versions through 1.3.20.
Fixed release: 1.0.45 and 1.3.21.
Severity: Critical.
Status: RED — likely exploited in a Microsoft-observed compromise.
LiteLLM and Starlette
Issue: CVE-2026-42271 plus CVE-2026-48710 can produce unauthenticated LiteLLM command execution; CVE-2026-59822 separately bypasses MCP authentication.
Affected scope: LiteLLM 1.74.2 through 1.83.6 for CVE-2026-42271; LiteLLM before 1.84.0 for CVE-2026-59822; Starlette through 1.0.0 for CVE-2026-48710.
Fixed release: LiteLLM 1.84.0 or later and Starlette 1.0.1 or later.
Severity: High individually; critical when the demonstrated command-execution chain is reachable.
Status: RED — CISA exploitation findings and observed gateway compromises.
Google Chrome
Issue: CVE-2026-85046; V8 type confusion.
Affected scope: Pre-update desktop Chrome releases.
Fixed release: 152.0.7977.82/.83 on Windows and macOS; 152.0.7977.82 on Linux.
Severity: High.
Status: RED — Google confirms an exploit exists in the wild.
Cisco Nexus 9000 Silicon One
Issue: CVE-2026-20212; unauthenticated root code execution or device reload through TCP ports 43210 or 43211.
Affected scope: Ten Nexus 9000 product identifiers listed in Cisco’s advisory; other Nexus 9000 models and ACI-mode fabric switches are excluded.
Fixed release: Determined through Cisco’s Software Checker for the installed NX-OS release.
Severity: Critical, CVSS 9.8.
Status: AMBER — severe control-plane exposure without reported exploitation.
VMware Workstation and Fusion
Issue: CVE-2026-59346 and CVE-2026-59347; guest-to-host code execution.
Affected scope: Workstation and Fusion 25H2 and 26H1.
Fixed release: 26H1u1.
Severity: CVSS 9.3 and 8.1.
Status: AMBER — high-consequence boundary escape requiring administrative guest access; no reported exploitation.
PostgreSQL
Issue: CVE-2026-6471; replication privilege permits arbitrary library loading and code execution as the PostgreSQL operating-system account.
Affected scope: Supported branches before 18.6, 17.11, 16.15, 15.19 and 14.24; researchers report older unsupported branches are also affected.
Fixed release: 18.6, 17.11, 16.15, 15.19 and 14.24.
Severity: CVSS 7.2.
Status: AMBER — strong impact but requires replication privilege; no reported exploitation.
IXON VPN Client
Issue: CVE-2026-75925; carriage-return and line-feed injection leading to privileged command execution.
Affected scope: Versions before 1.4.7.
Fixed release: 1.4.7.
Severity: CVSS 9.6.
Status: AMBER — privileged OT remote-access client exposure without reported exploitation.
Pyramid Solutions NetStaX EtherNet/IP Stack
Issue: CVE-2026-78012; stack-based buffer overflow in Class 3 explicit-message handling.
Affected scope: Adapter and scanner development or DLL kits, including CIP Security variants, before 5.6.1.
Fixed release: 5.6.1.
Severity: CVSS 9.8.
Status: AMBER — unauthenticated network-reachable embedded-stack weakness; downstream product scope remains incomplete.
Outlook and Uncertainty
Next 24 hours
Watch for SonicWall publication of indicators or recovery instructions; victim confirmation involving Artifactory, Switchvox, Kestra or LiteLLM; disclosure of CVE-2026-85046 exploit-chain details; emergency vendor updates to embedded NetStaX products; and Cisco clarification of platform-specific IOS XR and Nexus fixed builds.
What is not known
The public record does not establish victim counts for the seven September second KEV additions, the complete SonicWall attack chain, the full vulnerable Switchvox version boundary, whether Artifactory repositories were poisoned, whether stolen AI-platform credentials were used downstream, or the scope and targeting of Chrome zero-day exploitation. No public attribution is reliable for these exploitation clusters.
Trigger for escalation
Escalate immediately if defenders find newly issued administrator tokens, unknown appliance or repository accounts, workflow-origin shells, Docker-socket enumeration, modifications to SSH authorized keys, altered build artifacts, unauthorized MCP-tool calls, Switchvox SQL payloads, or communication with reported attacker infrastructure. Any evidence that CVE-2026-78012 is remotely exploited in deployed industrial equipment would move the NetStaX issue to RED.
Jonathan Brown is a cybersecurity researcher and investigative journalist at bordercybergroup.com.
If you would like to support our work — useful, well-researched, ad-free cybersecurity intelligence — subscribe, comment, or buy us a coffee! Thanks.
Jonathan Brown writes independent, decision-focused analysis on cybersecurity, infrastructure resilience, and operational risk, with an emphasis on primary-source verification and explicit uncertainty.
Support this work by sharing the briefing with operators who can act on it. Corrections supported by primary evidence are welcomed; material errors should be amended transparently. Feel free to subscribe, comment, or buy us a coffee! Thanks.
© 2026 Border Cyber Group. All rights reserved.
Sources Linked
Master Exploitation Record
Official CISA Known Exploited Vulnerabilities data repository on GitHub:
https://github.com/cisagov/kev-data/blob/develop/known_exploited_vulnerabilities.json
The Hacker News — CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners:
https://thehackernews.com/2026/09/cisa-adds-seven-exploited-flaws-as.html
SonicWall SMA 1000 — CVE-2026-83548 and CVE-2026-83549
SonicWall PSIRT advisory SNWLID-2026-0016:
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016
The Hacker News — Attackers Exploit Two SonicWall SMA 1000 Zero-Days:
https://thehackernews.com/2026/09/attackers-exploit-two-sonicwall-sma.html
Official CVE records:
https://www.cve.org/CVERecord?id=CVE-2026-83548
https://www.cve.org/CVERecord?id=CVE-2026-83549
Sangoma Switchvox — CVE-2026-9586
Horizon3.ai technical research and exploitation observations:
https://horizon3.ai/attack-research/disclosures/cve-2026-9586-sangoma-switchvox-rce/
Sangoma Switchvox 8.4.0.2 release notes:
Security Risk Advisors technical advisory — corrected path:
https://labs.sra.io/posts/switchvox/
SecurityWeek — Sangoma Switchvox Vulnerabilities Exploited in the Wild:
https://www.securityweek.com/sangoma-switchvox-vulnerabilities-exploited-in-the-wild/amp/
Official CVE record:
https://www.cve.org/CVERecord?id=CVE-2026-9586
JFrog Artifactory — CVE-2026-82329
JFrog Security Advisories:
https://docs.jfrog.com/releases/docs/jfrog-security-advisories
The Hacker News — Attackers Exploit Critical JFrog Artifactory Flaw:
https://thehackernews.com/2026/09/attackers-exploit-critical-jfrog.html
Official CVE record:
https://www.cve.org/CVERecord?id=CVE-2026-82329
Kestra — CVE-2026-49869
Kestra GitHub Security Advisory GHSA-5vc5-wxxq-3fjx:
https://github.com/kestra-io/kestra/security/advisories/GHSA-5vc5-wxxq-3fjx
Microsoft — When AI Infrastructure Becomes the Target:
Official CVE record:
https://www.cve.org/CVERecord?id=CVE-2026-49869
LiteLLM and Starlette — CVE-2026-42271, CVE-2026-48710 and CVE-2026-59822
Horizon3.ai — LiteLLM Unauthenticated Remote Code Execution Chain:
https://horizon3.ai/attack-research/vulnerabilities/cve-2026-42271-chained-with-cve-2026-48710/
LiteLLM GitHub advisory for CVE-2026-42271:
https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g
LiteLLM GitHub advisory for CVE-2026-59822:
https://github.com/BerriAI/litellm/security/advisories/GHSA-7488-6r32-c95q
Starlette GitHub advisory for CVE-2026-48710:
https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr
Microsoft observed-activity report:
Official CVE records:
https://www.cve.org/CVERecord?id=CVE-2026-42271
https://www.cve.org/CVERecord?id=CVE-2026-48710
https://www.cve.org/CVERecord?id=CVE-2026-59822
Google Chrome — CVE-2026-85046
Google Chrome Releases — Stable Channel Update for Desktop:
https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html
SecurityWeek — Google Patches Sixth Chrome Zero-Day of 2026:
https://www.securityweek.com/google-patches-6th-chrome-zero-day-of-2026/amp/
Official CVE record:
https://www.cve.org/CVERecord?id=CVE-2026-85046
Cisco Nexus 9000 and IOS XR
Cisco Nexus 9000 Silicon One advisory — CVE-2026-20212:
Cisco IOS XR September 2026 hardening advisory:
Cisco advance notification for September 2, 2026:
SecurityWeek — Cisco Warns of Unpatched Secure Email Flaws and Patches Critical Switch Vulnerabilities:
Official CVE record for the Nexus vulnerability:
https://www.cve.org/CVERecord?id=CVE-2026-20212
VMware Workstation and Fusion — CVE-2026-59346 and CVE-2026-59347
Broadcom VMSA-2026-0007:
SecurityWeek — VMware Workstation and Fusion Updates Patch Critical Vulnerability:
https://www.securityweek.com/vmware-workstation-and-fusion-updates-patch-critical-vulnerability/amp/
Official CVE records:
https://www.cve.org/CVERecord?id=CVE-2026-59346
https://www.cve.org/CVERecord?id=CVE-2026-59347
PostgreSQL — CVE-2026-6471
PostgreSQL official security advisory:
https://www.postgresql.org/support/security/CVE-2026-6471/
SecurityWeek — 12-Year-Old PostgreSQL Vulnerability Enables Database and Server Takeover:
Official CVE record:
https://www.cve.org/CVERecord?id=CVE-2026-6471
IXON VPN Client — CVE-2026-75925
Official CISA CSAF record hosted on GitHub:
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-246-02.json
Official CISA bulletin hosted by GovDelivery:
https://content.govdelivery.com/accounts/USDHSCISA/bulletins/428463a
Official CVE record:
https://www.cve.org/CVERecord?id=CVE-2026-75925
Pyramid Solutions NetStaX EtherNet/IP Stack — CVE-2026-78012
Official CISA CSAF record hosted on GitHub:
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-246-07.json
Official CISA bulletin hosted by GovDelivery:
https://content.govdelivery.com/accounts/USDHSCISA/bulletins/428463a
Official CVE record:
https://www.cve.org/CVERecord?id=CVE-2026-78012
September 3 ICS Advisory Index
Japan Vulnerability Notes summary of the September 3 CISA ICS advisories:
https://jvn.jp/vu/JVNVU94249914/
Official CISA September 3 bulletin hosted by GovDelivery:
https://content.govdelivery.com/accounts/USDHSCISA/bulletins/428463a
Official CISA CSAF repository on GitHub:
https://github.com/cisagov/CSAF/tree/develop/csaf_files/OT/white/2026
Manchester Airports Group
Have I Been Pwned — Manchester Airports Group breach record:
https://haveibeenpwned.com/Breach/ManchesterAirportsGroup
BleepingComputer — FulcrumSec Claims Manchester Airports Hack:
SecurityWeek — Manchester Airports Group Data on 8.8 Million People Leaked:
The Guardian — Three UK Airports Hit by Cyberattack:
Member discussion: