Reported by 6 outlets

August 2026 CVE Landscape: 73 High-Impact Vulnerabilities

hot0.0

Why this score

Breadth: 2.00 / 2.0 · 6 sources
Authority: 1.50 / 2.0 · best outlet weight
Severity: 5.00 / 5.0 · CVSS + KEV signals
Velocity: 0.00 / 2.0 · updates in 48h
Pickup speed: 0.00 / 0.6 · time to second source
Recency: × 0.00 temporal multiplier
Community: + 0.00 / 1.5 · reddit signal
Score: 0.0 / 10 = base × recency + community

malware.newsgithub.comsentinelone.comcve.orgibm.comrecordedfuture.com CVE-2025-62593CVE-2026-3395CVE-2026-59800CVE-2026-72898 CVE-2026-9198 KEV desk first seen 36d ago

Desk analysis

The August 2026 Insikt Group landscape reports 73 high-impact vulnerabilities, 43 at Very Critical risk score and a 14% decrease from July. 31 of these appear in the CISA KEV catalog, 32 were validated from open sources, seven came from vendor telemetry and three were seen only in honeypot data. The exposure spans 45 vendors; Microsoft accounts for roughly 11% of the entries. Among the 73 flaws, 34 enable remote code execution and 53 have public proof-of-concept code or scanners circulating. The oldest vulnerability is approximately 16 years old (CVE-2010-3904), and 17 are at least five years old, confirming that attackers are not chasing only fresh disclosures.

The real signal is not the count but the exploitation pattern. UAT-10147, a Chinese-speaking threat group, combined conventional exploitation with agentic AI: DeepAudit and PentestGPT accelerated vulnerability discovery, payload generation and troubleshooting after initial access. The actor exploited CVE-2019-18935 (Telerik), CVE-2021-23758 (AjaxPro), CVE-2021-29441 and CVE-2021-29442 (Nacos), and CVE-2022-27925 (Zimbra) for entry, then escalated locally with CVE-2022-0847, CVE-2022-0995 and others. A separate actor used Hermes Agent with DeepSeek to automate target enumeration and exploit selection, attempting CVE-2026-33017 (Langflow) against 84 instances, chaining CVE-2026-21858 with CVE-2025-68613 (n8n) across more than 50 targets, exploiting CVE-2026-3055 (NetScaler) against three organizations for cookie exfiltration, and attempting reverse shells against nine Tomcat servers (CVE-2026-34486) and three IKE endpoints (CVE-2026-33824). The landscape is less a vulnerability list than an operational map of how AI-assisted actors scale exploitation across legacy and modern stacks.

Defenders should treat the Nuclei templates Insikt Group released in August as the immediate hunting reference: CVE-2025-62593 (Ray) targets the dashboard on port 8265, CVE-2026-72898 (Metabase) hits the unauthenticated /reset_password SQL injection endpoint, and CVE-2026-9198 (IBM Langflow) chains /api/v1/auto_login with code execution. Patches exist: Ray 2.52.0 or higher, Metabase 0.63 or above, IBM Langflow 1.10.1 or later. For network-level restriction, key endpoints include Ray dashboard port 8265, Metabase reset-password APIs, and Langflow auto-login paths. Hunt telemetry should focus on browser-based DNS rebinding indicators for Ray, unexpected SQL injection payloads in Metabase reset logs, and rogue SUPERUSER token minting in Langflow audit trails. The July-exploited CVEs CVE-2026-3395 (MaxSite CMS) and CVE-2026-59800 (decolua 9Router) also have existing templates and should be included in any retroactive scan.

Watch for two developments that would shift the assessment: first, whether the separate Hermes Agent actor succeeds against Langflow or n8n at scale, which would confirm AI-assisted exploitation crossing from reconnaissance into reliable weaponization; second, whether CISA expands the KEV catalog beyond the 31 already listed, particularly for the NetScaler (CVE-2026-3055) or Tomcat (CVE-2026-34486) entries, as either addition would elevate enterprise exposure beyond the current 73-flaw boundary. The presence of 17 vulnerabilities older than five years also demands a sustained legacy-patching program rather than a monthly sprint.

Timeline

original reporting

August 2026 CVE Landscape

malware.news · 34d ago · September 9th, 2026

In August 2026, Insikt Group® identified 73 high-impact vulnerabilities that should be prioritized for remediation , 43 of which had a Very Critical Recorded Future Risk Score. This represents a 14% decrease from last month. 31 of these vulnerabilities were surfaced through the US Cybersecurity and Infrastructure Security Agency (CISA)’s Known Exploited Vulnerabilities (KEV) catalog, 32 were reported in open sources and validated by Insikt Group, seven were sourced through security vendor telemetry, and three were exclusively surfaced through honeypot data. The 73 vulnerabilities in this blog affected products from 45 vendors, with Microsoft accounting for approximately 11% of the vulnerabilities. The remaining exposure spanned remote monitoring and management, virtualization, application delivery, collaboration, artificial intelligence, developer, analytics, identity, operational technology, content management, network edge, video surveillance, and endpoint technologies. In August, Insikt Group created Nuclei templates to detect CVE-2025-62593 (Ray), CVE-2026-72898 (Metabase), and CVE-2026-9198 (IBM Langflow). Each of these vulnerabilities is featured in this blog. Additionally, Insikt Group had previ
update from github.com

GitHub Advisory: Ray Critical RCE via DNS Rebinding (CVE-2025-62593)

github.com · 322d ago · November 26th, 2025

GitHub published a critical advisory on Nov 26, 2025 for CVE-2025-62593 in Ray (< 2.52.0), describing a browser-driven RCE exploitable through Firefox and Safari via DNS rebinding against port 8265. The advisory credits researchers at Socket and Oligo and references fix commit 70e7c72. Updated Dec 1, 2025.
update from sentinelone.com

SentinelOne Vulnerability Database: MaxSite CMS RCE (CVE-2026-3395)

sentinelone.com · 222d ago · March 6th, 2026

SentinelOne documented CVE-2026-3395 on Mar 6, 2026 as a remote code execution vulnerability in MaxSite CMS. The event notes Insikt Group had previously created Nuclei templates for this CVE but its exploitation was reported in July, not August.
update from github.com

GitHub Advisory: 9Router OS Command Injection (CVE-2026-59800)

github.com · 138d ago · May 29th, 2026

GitHub published an advisory on May 29, 2026 for CVE-2026-59800 in 9Router (decolua/9router). It details an unauthenticated OS command injection through POST /api/tunnel/tailscale-install allowing remote code execution. Affected versions before 0.4.44.
update from cve.org

CVE Record: IBM Langflow Unauthenticated RCE (CVE-2026-9198)

cve.org · 89d ago · July 17th, 2026

MITRE's CVE record for CVE-2026-9198 was published on Jul 17, 2026. It describes an unauthenticated remote code execution vulnerability in IBM Langflow OSS versions 1.0.0 through 1.10.0 via an auto-login bypass combined with insufficient code validation.
mentioned by github.com

GitHub Security Advisory: Metabase Unauthenticated SQL Injection (CVE-2026-72898)

github.com · 69d ago · August 6th, 2026
update from ibm.com

IBM Security Bulletin: Unauthenticated RCE in IBM Langflow (CVE-2026-9198)

ibm.com · 58d ago · August 17th, 2026

IBM released a security bulletin on Aug 17, 2026 for CVE-2026-9198 affecting IBM Langflow OSS 1.0.0 through 1.10.0. The flaw allows unauthenticated attackers to chain /api/v1/auto_login to mint SUPERUSER tokens and achieve remote code execution on default configurations.
mentioned by recordedfuture.com

August 2026 CVE Landscape

recordedfuture.com · 36d ago · September 8th, 2026