CVE-2026-44772

Three pressures shaped this week's queue. Perimeter and analytics software came under confirmed attack, with three fresh KEV entries carrying remediation deadlines that have already passed. Microsoft shipped one of the largest security releases in its history. PostgreSQL shipped the largest single security batch in project history. Underneath all of that sit near-term platform deadlines from GitHub and Kubernetes that land inside the next twelve days.

Immediate priorities

Close the overdue KEV entries. Metabase CVE-2026-72898 and Cisco CVE-2026-20349 were due August 14. Progress LoadMaster CVE-2026-8037 was due August 10. Windows AFD CVE-2026-68820 is due August 25. Verify exposure before assuming remediation. BOD 26-04 and its forensics triage guidance put weight on whether an asset was reachable during the exposure window, and version checks alone do not answer that. Patch Windows-hosted build capacity. The August release covers hosted runners, self-hosted agents, jump hosts, Hyper-V build hosts, and Windows Kubernetes nodes. Stage the PostgreSQL update now. Three of the twenty-eight security fixes require manual configuration or data cleanup work after the binary upgrade. Audit dependency lockfiles against the August 4 npm compromise window. Poisoned releases carried valid provenance, so signature checks did not flag them.

Actively exploited vulnerabilities

Cisco ASA and FTD, CVE-2026-20349

Cisco published advisory cisco-sa-asaftd-vpn-dos-dzv4mQFF on August 11. The flaw is insufficient error checking in the Remote Access SSL VPN service when processing HTTP requests, mapped to CWE-244. An unauthenticated attacker sends a crafted HTTP request and forces the device to reload. CVSS 3.1 base score is 8.6 with vector AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.

The documented impact is availability. Cisco's advisory describes no code execution and no data access, and the CVSS confidentiality and integrity metrics are both None. Draft language that framed this as a compromise vector with disproportionate blast radius overstates the record. Treat it as an availability event on a security boundary that terminates remote access for the workforce.

Exposure requires SSL listen sockets enabled through one of three configurations: SSL VPN, IKEv2 remote access VPN with client services, or Zero Trust Network Access on FTD. Cisco PSIRT became aware of exploitation in August 2026 and published no indicators of compromise. Fixed FTD trains include 7.0.9.1-1, 7.2.11.1-2, 7.4.7.1-1, 7.6.4.1-2, 7.7.11.1-2, and 10.0.0.1-2. Confirm your exact ASA build against the advisory table rather than a summary. Test a break-glass remote access path this week.

Windows AFD.sys, CVE-2026-68820

A use-after-free in the Ancillary Function Driver for WinSock, CVSS 7.0, exploitable by a locally authenticated attacker who wins a race condition to reach SYSTEM. Attack complexity is High. No user interaction is required.

Check Point Research reported the flaw to MSRC on July 28 and attributed exploitation to the Lazarus group under the Operation Dream Job campaign, targeting defense-sector companies. Observed post-exploitation tooling includes the FudModule rootkit and the ForestTiger backdoor, with the same campaign abusing CVE-2025-49113 in Roundcube and deploying RelayShell webshells as C2 relay infrastructure. This is the fourth afd.sys zero-day exploited in the wild since 2022.

The pairing that matters operationally is CVE-2026-68820 with CVE-2026-62832, a publicly disclosed User Profile Service elevation-of-privilege issue with proof-of-concept code available. Together they convert an initial foothold into full system compromise. Prioritize developer workstations, build servers, Windows runners, bastions, and shared RDP hosts. Review EDR telemetry for privilege transitions and kernel-level exploit-prevention events preceding the patch.

Metabase, CVE-2026-72898

Unauthenticated SQL injection through the POST /api/session/reset password endpoint, CWE-89, CVSS 10.0. Successful exploitation yields administrator access to the instance, which exposes stored connection credentials for every attached database and warehouse.

Metabase detected attacks against Metabase Cloud on August 3, published advisory GHSA-vwf4-m7j8-wcjf on August 6, received the CVE on August 10, and saw KEV listing on August 11. Exploitation predates disclosure and patch availability. Affected self-hosted branches run x.61.0 through x.61.10, x.62.0 through x.62.8, and x.63.0 through x.63.4, covering 0.58 and later on the open-source line and the corresponding Enterprise 1.x builds.

Three Metabase Cloud tenants have disclosed unauthorized customer-data access from the pre-patch window: Framework, Anaconda, and n8n. A Metabase listing has appeared on a ShinyHunters-branded extortion blog.

Scanning data frames the fleet problem. Wiz observed self-hosted Metabase in roughly 13 percent of cloud environments, with about a quarter of those fully internet-accessible. Dataminr fingerprinted around 11,000 probable self-hosted instances, of which 4,309 were potentially vulnerable, and found more than 97 percent of hosts on affected branches unpatched.

Upgrade to the patched build for your major version. Where upgrade is blocked, Metabase recommends temporarily blocking the reset-password endpoint. Rotate every secret the instance holds: database and warehouse service accounts, LDAP bind credentials, SMTP credentials, API keys, and SSO client secrets. Remove direct internet reachability and place the instance behind VPN, ZTNA, or an SSO-enforcing reverse proxy.

Progress LoadMaster, CVE-2026-8037

Added to KEV on August 7 with an August 10 deadline. Unauthenticated command injection through unsanitized input across multiple command endpoints, permitting arbitrary command execution on the appliance. This entry was absent from the draft and is now the most overdue item in the queue. Audit affected appliances for command-execution artifacts alongside the upgrade.

N-able N-central, CVE-2026-18577

An authentication bypass through an alternate path, CWE-288, CVSS 4.0 score 8.2. It is a patch bypass of CVE-2026-18556, which N-able fixed in 2026.2. N-able's Adlumin MDR detected exploitation on July 31 and confirmed active abuse on August 2.

Two hotfixes shipped. Hotfix 1 is version 2026.3.1.7, released August 2. Hotfix 2 is version 2026.3.1.10, released August 6, and N-able states it is required for every partner including those who applied Hotfix 1. Hosted deployments received both automatically. On-premises operators install manually.

Post-exploitation activity is well documented. Attackers used the built-in Take Control feature to reach managed endpoints, created a domain account named veeam , reset existing domain administrator passwords, installed AnyDesk, TeamViewer, RustDesk, and SimpleHelp, disabled Microsoft Defender and Sophos using an EDR-evasion tool called PhantomKiller, dumped LSASS with Mimikatz, and registered Cloudflare tunnels as Windows services for persistence that survives reboot and requires no inbound firewall rule. Microsoft assesses the activity as Storm-1175, a financially motivated group that has moved from Medusa to a strain called StormEncryptor.

N-able's own guidance is the operative point for anyone who patched late. Applying a hotfix closes the entry path. It does not evict an actor already present. Organizations that patched more than a few days after release should treat the environment as potentially compromised and review all accounts, privileges, and activity independent of what the vendor IOC scanning tool returns.

Microsoft patch exposure

Published CVE counts for the August release disagree, and the disagreement is methodological rather than factual. Tenable counted 398 after omitting two MITRE-assigned CVEs. BleepingComputer counted 400, excluding items fixed outside the Patch Tuesday window. CrowdStrike counted 415. SecurityWeek, Malwarebytes, and Dark Reading counted 421. SANS ISC counted 418. Critical-severity counts range from 42 to 62 depending on whether ESU and out-of-band items are folded in. One flaw was exploited in the wild, and two were publicly disclosed before patching. Elevation of privilege accounted for roughly 40 percent of the release and remote code execution for roughly 27 percent. Microsoft has attributed the sustained volume increase in part to AI-assisted vulnerability discovery.

The unauthenticated server-side items are where build infrastructure risk concentrates:

CVE Component CVSS Notes CVE-2026-62815 Microsoft QUIC (msquic) 9.8 Use-after-free, unauthenticated, no user interaction. Windows 11 and Server 2022/2025, including Server Core. CVE-2026-62878 Windows DNS Server 9.8 Stack-based buffer overflow. Characterized as wormable by the Zero Day Initiative. CVE-2026-62893 WDS TFTP Server 9.8 Use-after-free on UDP/69, a protocol with no built-in authentication. CVE-2026-59124 HPC Pack 9.8 Rated Important because HPC Pack is not installed by default. Exploitation assessed as more likely. CVE-2026-65665 SharePoint Server 8.8 Deserialization RCE that completes a chain whose authentication-bypass half shipped in July. CVE-2026-65667 Microsoft Teams 10.0 Missing authorization permitting unauthenticated privilege escalation over a network.

For QUIC, the practical exposure question is which services load the vulnerable stack and accept UDP/443 from untrusted networks. Documented vulnerable build floors include Windows 11 23H2 before 10.0.22631.7517, 24H2 and 25H2 before 10.0.26100.9168, 26H1 before 10.0.28000.2704, Server 2022 before 10.0.20348.5499, and Server 2025 before 10.0.26100.33296.

Fleet area Maintenance action Self-hosted Actions runners Patch the OS, rebuild runner images, replace long-lived agents. Windows Kubernetes nodes Patch node images and schedule controlled drain and reimage cycles. Developer workstations Deploy through managed channels and investigate AFD-related telemetry. Hyper-V and build virtualization hosts Patch ahead of or alongside guest rollout. On-premises SharePoint farms Confirm both the July and August updates are installed.

Defender patch bypass, ShieldBreak

On August 12, the researcher known as Nightmare Eclipse and Chaotic Eclipse published a proof-of-concept named ShieldBreak, claiming a full bypass of Microsoft's July fix for CVE-2026-50656, the RoguePlanet privilege escalation in the Malware Protection Engine. Kevin Beaumont's analysis describes the technique as a user-mode callback hook that alters file contents during a Defender cloud-hydration scan through the Cloud Filter API, a mechanism distinct from RoguePlanet's filesystem race condition. Will Dormann independently verified the exploit and confirmed that Defender must be enabled for it to work.

The researcher claims a 100 percent success rate on fully patched Windows 11 25H2 including Canary, and on Windows Server 2025, with Windows 10 also vulnerable. Microsoft has acknowledged the report and is investigating. No fix exists at time of writing. Beaumont has published Defender for Endpoint detection queries. Verify Malware Protection Engine version 1.1.26060.3008 or later across the estate and add the detection queries to your hunt rotation.

PostgreSQL security release

On August 13 the PostgreSQL Global Development Group shipped 18.6, 17.11, 16.15, 15.19, and 14.24, alongside 19 Beta 3. The release closes 28 security vulnerabilities and more than 110 bugs. That CVE count is the largest in project history, exceeding the previous record of 11 set in May. Seventeen entries score 8.0 or higher, and nine carry "executes arbitrary code" in the title. Version 18.5 was never released due to a regression discovered after wrap, so the 18 line jumps from 18.4 to 18.6.

Selected entries:

CVE-2026-16239 , buffer overrun in to char() with a long time zone abbreviation. Crashes the server readily, and working code-execution exploits have been reported. CVE-2026-6464 , divergent declared row types between outer and inner portals during EXECUTE or FETCH, leading to memory disclosure and arbitrary code execution. CVSS 8.1. CVE-2026-14662 , integer wraparound producing undersized allocations in tsvector and tsquery. CVSS 8.8. CVE-2026-14664 , regexp heap buffer overflow executing arbitrary code. CVSS 8.8. CVE-2026-18408 , psql unrestrict permitting a malicious superuser of the origin server to inject restore-time code execution. This is a follow-on to the CVE-2025-8714 fix that introduced restrict and unrestrict . pg dumpall is affected, and pg restore is affected when generating plain-format dumps. CVE-2026-6471 , logical decoding able to dlopen an arbitrary file. CVSS 7.2. CVE-2026-14663 , pgcrypto silently handling cleartext for OpenSSL-disabled ciphers. CVSS 6.5.

Post-upgrade work is required and easy to miss. Three security entries describe configuration adjustments or data cleanups to perform after updating. Clusters with GIN indexes should review the changelog entry covering possibly corrupt reltuples values on their tables. Indexes built with contrib/btree gist or contrib/ltree may need a REINDEX. Budget a maintenance window rather than treating this as a rolling minor bump.

Software supply chain

npm keyv and cacheable compromise

On August 4 an attacker compromised the GitHub account of the maintainer behind keyv, cacheable, flat-cache, file-entry-cache, and ecto. The method was direct pushes to the main branch followed immediately by a release cut, which meant the poisoned versions published to npm carrying valid provenance signed by GitHub Actions. Every affected package gained two files, setup.mjs and Math Symbol.js , plus a "preinstall": "node setup.mjs" entry in package.json. Anyone running npm install executed the dropper before their install completed.

Scale figures differ by tracker and by observation time. Aikido documented at least 444 packages across 1,381 versions with more than 2 billion combined monthly installs, later revised upward to 1,684 versions across 420 package names and 9 organizations. Microsoft Threat Intelligence, tracking it as ChainDrop, counted more than 400 packages across multiple unrelated publishers. Datadog noted individual affected packages exceeding 150 million weekly downloads. Snyk identified 11 malicious releases carrying the same payload pair, eight of which still held the latest tag hours after publication.

The payload is self-propagating. It harvests npm publish tokens, GitHub OIDC tokens, and SSH keys from CI environments, then republishes poisoned versions of packages the compromised account maintains. C2 domains are retrieved dynamically through an Ethereum smart contract, which complicates takedown. The Bun/1.3.13 user agent appeared in malicious calls tied to the campaign.

Remediation: reconstruct install activity across the August 4 window from lockfiles and CI logs, rotate npm tokens and GitHub PATs, review OIDC trust relationships and repository publish permissions, enable --ignore-scripts in CI where feasible, and reimage developer endpoints where install-time execution is confirmed. GitHub has separately expanded supply-chain malware detection from npm to eight package registries.

Docker CopyEscape, CVE-2026-17106

Imperva Red Team disclosed a destination-escape flaw in docker cp affecting container-to-host copies, and Docker confirmed the same CVE affects sbx cp in Docker Sandboxes. The mechanism sits in the archive pipeline. The daemon walks the requested container path, builds a tar archive, and hands it to the CLI for host-side extraction. Two weaknesses combine: an attacker can mutate the live container filesystem between the archiving routine's repeated path inspections, and the extraction logic validates a constructed path when deciding whether a symlink is safe while creating the link from the original archive value. The mismatch lets an attacker plant a symlink resolving outside the chosen output directory, after which a later child entry writes attacker-controlled content to an arbitrary host path.

The result is arbitrary host file write with the authority of the account running the command. On Linux with elevated privileges, overwriting the runc binary yields root code execution immediately after the copy completes. On macOS, the daemon runs inside a Linux VM and the CLI extracts on the host, so shell startup files, SSH configuration, source trees, cloud settings, and LaunchAgent persistence files are all reachable.

The exposure surface is exactly where docker cp lives: CI artifact retrieval, test-result collection, privileged automation, incident-response evidence gathering from a compromised container, and artifact retrieval from AI coding-agent sandboxes. Fixed in Docker Engine and CLI 29.7.2, Docker Desktop 4.86.0, and Docker Sandboxes 0.38.0, released August 6. Where upgrade is deferred, stop containers before copying, remove sudo docker cp from runbooks, and retrieve suspicious data only inside disposable environments.

Agentic infrastructure exposure

Tenet Threat Labs presented Ghostjacking on the DEF CON 34 main track on August 9. The technique is indirect prompt injection delivered through observability and security telemetry. An attacker sends a request designed to be blocked, the platform logs the request text verbatim, and an agent later reads that log when a developer asks it to investigate errors. The agent treats the planted text as instruction.

Demonstrated platforms are Cloudflare, Datadog, and Sentry. Demonstrated outcomes include DNS record changes, arbitrary code execution on developer machines, cloud credential exposure, sandbox escape, and a backdoor persisted inside the agent's own memory. Tenet reports a 90 percent success rate against Claude Code under Cloudflare's recommended configuration. Every action in the chain was authorized, so EDR, WAF, and IAM produced zero detections end to end.

Two related items landed the same week. Researchers disclosed RovoBlast in Atlassian's Rovo AI assistant, demonstrating extraction of Jira and Confluence data. Cursor fixed an issue in its CLI coding agent where a cloned repository could execute arbitrary commands before the trust prompt appeared, and outside the sandbox even when the sandbox was explicitly enabled.

The control set follows from the mechanism. Treat all tool output as untrusted input regardless of the trust level of the platform producing it. Scope agent credentials per task rather than per session. Require human approval for DNS, IAM, deployment, and repository-permission actions. Log and diff every infrastructure change an agent initiates, and retain the initiating prompt alongside the change record.

React Server Components status

The draft item requires correction. CVE-2026-23864 was disclosed January 26, 2026, and closed by 19.0.4, 19.1.5, and 19.2.4. It is a denial-of-service issue in react-server-dom-webpack , react-server-dom-parcel , and react-server-dom-turbopack , mapped to CWE-400 and CWE-502, arising from incomplete fixes for the December CVE-2025-55184 round.

Two further rounds followed. CVE-2026-23869 landed April 8 with Next.js advisory GHSA-q4gf-8mx6-v5v3 and a narrower patch path. CVE-2026-23870 landed May 6 alongside eleven Next.js CVEs covering middleware and proxy bypass, cross-site scripting, server-side request forgery, and cache poisoning.

Current version floors are 19.0.6, 19.1.7, or 19.2.6 for the react-server-dom-* packages matching your React minor, and 15.5.18 or 16.2.6 for Next.js. The exposure population is RSC-enabled deployments, which includes Next.js App Router applications on 13.x through 16.x by default. Standing controls remain worthwhile given the disclosure cadence on this deserialization surface: enforce request-size and rate limits on Server Function routes, and monitor per-route heap usage and restart frequency.

Kubernetes 1.37 readiness

Release lands Wednesday, August 26. Validate the following against pre-production clusters this week.

containerd 2.0 or later is required. Kubernetes 1.35 was the last release supporting containerd 1.x, and the kubelet flag removal aligns with the end of containerd 1.7 support. The failure mode is asymmetric: control planes upgrade cleanly and worker nodes do not. Check the kubelet cri losing support metric on 1.36 to find non-compliant nodes. cgroup v1 nodes will not start. failCgroupV1 has defaulted to true since 1.35 and the remaining code is untested. Move nodes to cgroup v2-compatible operating system and runtime configurations. Static Pods can no longer reference Secrets or ConfigMaps. The PreventStaticPodAPIReferences opt-out gate has been removed. Audit /etc/kubernetes/manifests , bootstrap manifests, and node-local static workloads for secretRef , configMapRef , envFrom , and projected volumes. Replace them with node-provisioned files or a redesigned workload. ** kubectl run --filename and -f are deprecated.** The generated pod always derives from CLI arguments, so the flag never had effect. Move manifest-based usage to kubectl apply -f and update scripts and runbooks. kube-proxy IPVS enters stage two of removal. The KubeProxyIPVS feature gate arrives in 1.37, defaults off in 1.40, and the codebase is removed in 1.43. Inventory IPVS dependencies now and validate nftables in representative clusters. Graduations worth planning around. The metrics.k8s.io API reaches GA after nearly nine years in beta, with v1 and v1beta1 both usable during transition. Rootless kubelet in UserNS mode reaches beta. DRA gains device taints and tolerations. Per-container ulimits arrive. etcd v3.7.0 RangeStream is exposed through the EtcdRangeStream gate and reduces etcd CPU for high-frequency LIST workloads. SELinux volume label changes that went GA in 1.36 carry forward, so pods relying on implicit recursive relabeling may surface permission errors.

Red Hat ACM privilege escalation, CVE-2026-10090

Published August 5, CVSS 9.9, affecting the Application Subscription controller multicluster-operators-subscription in Red Hat Advanced Cluster Management for Kubernetes 2. A user holding namespace-scoped edit permissions on an ACM hub creates a Channel resource pointing at a Helm repository under their control, then a Subscription referencing that Channel. The controller fetches and deploys the chart using its own elevated service account without verifying that the requester holds open-cluster-management:subscription-admin and without enforcing namespace boundaries on delivered resources. A namespace editor can therefore deploy cluster-scoped objects including ClusterRoleBinding and reach cluster-admin.

Red Hat states no mitigation meets its product-security criteria, and offers a targeted RBAC step: delete the ClusterRole open-cluster-management:multicloud-operators-subscription:rbac-aggregate-edit . Verify with oc auth can-i create subscriptions.apps.open-cluster-management.io . The ClusterRole is recreated by the multiclusterhub-operator during reconciliation, so re-apply after every operator upgrade, operator pod restart, and MultiClusterHub CR modification until a fixed release ships. Related entries CVE-2026-72508 and CVE-2026-72526 cover the managed-cluster ServiceAccount wildcard grant and the pull-model propagation path.

GitHub platform deadlines

GHES support-bundle floor, August 18

GitHub begins rejecting command-line support-bundle uploads from appliances below the patch floor: 3.21.3, 3.20.5, 3.19.9, 3.18.12, or 3.17.18. This affects ghe-support-bundle , ghe-cluster-support-bundle , and ghe-support-upload . The consequence is supportability during an incident.

One planning note on 3.17: that release line is discontinued August 25, so 3.17.18 buys seven days. Teams on 3.17 should plan a line upgrade rather than a patch bump. Recent GHES patch releases also carry CVE-2026-5512 and CVE-2026-8034, the latter permitting an attacker with code execution inside the Dependabot updater container to write arbitrary files into updated repositories, including Actions workflow files. Upgrade before the cutoff, then exercise a non-production upload path to confirm the route works.

GitHub Spark retirement, August 31

Spark stopped accepting new users and new app creation on August 4. Existing user access ends August 31. Deployed apps continue to operate after that date. Export app code before the deadline through the Spark workbench options menu and the Create repository action, which is the only path to retaining edit capability.

A dependency has already broken. GitHub Models retired July 30, so llm() calls inside Spark apps stopped working on that date. Grep app code for llm() and substitute an inference provider where it appears. Apps without llm() calls need no inference work. Confirm ownership, repository location, CI/CD path, production hosting, and rollback procedure exist outside the retiring service.

Copilot model retirement, September 10

MAI-Code-1-Flash retires across all Copilot experiences, with MAI-Code-1.1-Flash as the suggested alternative. Search for hard-coded model identifiers in IDE policy, Copilot extensions, API clients, internal developer portals, and prompt-routing services. Copilot Enterprise administrators may need to enable the replacement through model policy settings before it appears in the Copilot Chat model selector in VS Code and on github.com. Test output quality, latency, tool-calling behavior, and policy enforcement before cutover, particularly where agents execute repository, issue, workflow, or deployment actions.

Actions Node 20 removal, September 16

Node 24 has been the forced runner default since mid-June, with ACTIONS ALLOW USE UNSECURE NODE VERSION=true available as a temporary opt-out. That escape hatch stops working at removal, and actions declaring runs.using: node20 will fail outright.

Two compatibility constraints deserve attention. Node 24 is incompatible with macOS 13.4 and earlier. Node 24 has no official ARM32 support, so self-hosted ARM32 runners fall out of support entirely at removal. Inventory action.yml runs.using values across custom and composite actions, run the full CI matrix under Node 24 now, and focus testing on native addons, OpenSSL and TLS behavior, ESM and CommonJS boundaries, deprecated runtime APIs, and artifact tooling. Pin actions to deterministic SHAs so runner-image changes do not silently alter execution.

SaaS configuration exposure

Reco disclosed a campaign it tracks as City-Forum, in which a single rented server in Germany has been extracting records from Salesforce Experience Cloud sites and ServiceNow Service Portals since at least March 2025. Passive DNS establishes the seventeen-month window. The busiest single Salesforce target logged more than 560,000 events from the attacker IP. Targets span telecom operators, banks, financial-services firms, enterprise-software vendors including security and privacy companies, and public-sector portals. The default Go-http-client/1.1 user agent appears throughout.

The toolset is the notable element. It represents the first observed in-the-wild exploitation of Salesforce's UI API guest surface on Lightning Web Runtime sites, integrated in a single tool with Aura-targeted collection and an undocumented ServiceNow portal search endpoint.

Both vendors characterize the underlying condition as customer configuration. Every Experience Cloud site carries its own guest user and every ServiceNow instance carries an unauthenticated guest identity. Neither can be deleted, and requiring login leaves the profile, its permissions, its sharing rules, and any code running in its context in place. Anything the guest can read is readable from the internet. Audit guest sharing rules, LWR UI-API exposure, and ServiceNow portal search access as a scheduled control rather than a one-time cleanup.

Broader vendor patch cycle

Four enterprise vendors shipped material updates alongside Microsoft this week.

SAP published 28 new and two updated security notes, including four critical items. The headline is CVE-2026-58231 in Commerce Cloud Data Hub Adapter, CVSS 10.0, where insufficient authorization checks and input validation permit an unauthenticated attacker abusing a default authentication client to reach arbitrary code execution. Upgrade to Commerce Cloud 2211.55 or 2211-jdk21.17, and restrict /datahubadapter/import/** to trusted Data Hub server addresses through an IP Filter Set as interim mitigation. Also critical: CVE-2026-44772 code injection in Manufacturing Integration and Intelligence at 9.9, and CVE-2026-34265 memory corruption in NetWeaver AS ABAP DIAG protocol parsing at 9.8, which requires a kernel patch level update.

Adobe released five advisories covering 51 vulnerabilities, 33 of them critical, all rated Priority 1. ColdFusion 2025 Update 11 and ColdFusion 2023 Update 22 resolve eight critical issues spanning path traversal, code injection, improper input validation, missing authentication, and SQL injection. Commerce, Campaign Classic, Lightroom Classic, and the Content Credentials SDK also received updates. Given the July precedent where a ColdFusion flaw saw exploitation within hours of disclosure, verify no unauthorized files exist in ColdFusion-accessible directories.

Zoom patched CVE-2026-53413, a zero-click memory corruption issue named Zoomsday that lets one meeting participant execute code on another participant's machine. The attack abuses the direct channel the annotator protocol opens between viewer and sharer, and requires no action from the target. VDI clients and plugins received a separate fix for CVE-2026-53416, a path traversal information disclosure.

Fortinet patched authentication flaws in FortiWeb and FortiManager permitting login with arbitrary credentials or impersonation of a FortiGate appliance, along with medium and low-severity issues in FortiWeb WAF, FortiOS, and FortiSIEM. Fortinet reports no in-the-wild exploitation.

Forward maintenance queue

PostgreSQL 14 end of life, November 12. Version 14.24 shipped this week, and one further minor release is expected before support ends. Managed-service economics push the real deadline earlier than the community date. Azure Database for PostgreSQL flexible server ends standard support for 14 on December 11, 2026 and begins mandatory paid Extended Support on December 12, running through November 11, 2029. Cloud SQL enrolls remaining 14 instances in extended support on February 1, 2027 with per-vCPU-hour charges on dedicated-core instances. One upgrade constraint worth testing early: page checksums default on in PostgreSQL 18, which affects pg upgrade from clusters created without them. Inventory versions and extensions, test the migration approach, validate query plans against the target major release, rehearse rollback boundaries, and reserve production windows ahead of the Q4 freeze.

GHES 3.17 discontinued, August 25. No patch releases follow, including for critical security issues.

Kubernetes IPVS default off in 1.40, removed in 1.43. Treat 1.37 as the inventory point.

Ten-day operating plan

August 15 through 17. Close the Metabase, Cisco, and LoadMaster KEV exceptions. Confirm N-central Hotfix 2. Deploy the August Microsoft release to Windows-hosted build capacity. Produce an evidence-backed list of vulnerable and remediated assets. August 15 through 18. Reconstruct npm install activity across the August 4 window, rotate publish tokens and PATs, and upgrade Docker Engine and CLI to 29.7.2 or later. By August 18. Upgrade GHES appliances to their patch floors and verify support-bundle upload readiness against a non-production path. By August 20. Stage the PostgreSQL update in pre-production and script the post-upgrade REINDEX and cleanup steps. By August 25. Finish Windows AFD remediation and validate runner image replacement. Complete the GHES 3.17 line upgrade. Before August 26. Run Kubernetes 1.37 preflight against containerd version, cgroup v2 posture, static Pod manifests, kubectl run scripts, and IPVS dependencies. Apply the ACM RBAC mitigation where applicable. Before August 31. Export and transition GitHub Spark workloads and replace llm() calls. Before September 10 and 16. Migrate Copilot model references and complete Node 24 compatibility validation across workflows and custom actions.

Maintenance Radar Sources

CISA Known Exploited Vulnerabilities Catalog and August 11 alert; CISA BOD 26-04 and implementation guidance Cisco Security Advisory cisco-sa-asaftd-vpn-dos-dzv4mQFF Microsoft Security Update Guide, August 2026 release Check Point Research, Operation Dream Job reporting Tenable, CrowdStrike, Rapid7, Qualys, SANS Internet Storm Center, and Cisco Talos August 2026 Patch Tuesday analyses SecurityWeek, BleepingComputer, The Hacker News, Dark Reading, The Register, Help Net Security Metabase security advisory GHSA-vwf4-m7j8-wcjf Wiz Research, Dataminr Threat Research, Horizon3, runZero, IONIX N-able N-central security updates of August 6 and August 10; Sophos, Huntress, and Microsoft Threat Intelligence reporting PostgreSQL Global Development Group release announcement and security pages for 18.6, 17.11, 16.15, 15.19, and 14.24 Aikido Security, Snyk Security Research, Datadog Security Labs, Microsoft Security Blog, Wiz, Unit 42 Imperva Red Team, CopyEscape disclosure; Docker release notes Tenet Threat Labs, DEF CON 34 presentation React security advisories and Next.js advisory database; Netlify and Cloudflare changelogs Kubernetes v1.37 sneak peek and release information; Cloudsmith and PerfectScale release analyses Red Hat Customer Portal, CVE-2026-10090 GitHub Changelog, GitHub Enterprise Server release notes, GitHub Enterprise downloads Reco threat research, City-Forum campaign Onapsis, Layer Seven Security, Pathlock, SAP Security Patch Day August 2026 Adobe Security Bulletins, Zoom Security Bulletins, Fortinet PSIRT advisories Arctic Wolf, Kevin Beaumont, Will Dormann