Week 35, 2026

Severity mix (34 articles)

• CRITICAL 2
• HIGH 8
• MEDIUM 8
• LOW 1
• INFO 15

Top stories

1. CRITICAL

   CVE-2026-60004: Gitea Code Injection Under Active Exploitation

   Aug 26, 2026

2. CRITICAL

   CVE-2026-21962: Oracle WebLogic RCE Under Active Attack

   Aug 25, 2026

3. HIGH

   Nutex Health Suffers Data Breach, Sensitive Data Exfiltrated

   Aug 26, 2026

4. HIGH

   U.S. Sanctions Iran-Linked Hackers Targeting Critical Infrastructure

   Aug 26, 2026

5. HIGH

   Massive DDoS Disrupts Norway Government Digital Services

   Aug 25, 2026

6. HIGH

   NVIDIA NemoClaw Weakness Allows AI Model Poisoning via Ollama

   Aug 25, 2026

7. HIGH

   WordlistLoader Evades Detection, Delivers Amatera Infostealer

   Aug 25, 2026

8. HIGH

   miniOrange SAML SSO Auth Bypass Exploited in WordPress Attacks

   Aug 25, 2026

9. HIGH

   Calix CVE-2026-75501: Unauthenticated NAT Bypass Exposes Devices

   Aug 25, 2026

10. HIGH

    Mabna Institute Espionage, BTR.sys Kernel Bypass, & Malware

    Aug 24, 2026

+ 24 more in the archive.

CVEs tracked this week (5)

• CVE-2026-15981
• CVE-2026-21962
• CVE-2026-60004
• CVE-2026-61979
• CVE-2026-75501