{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 31 August to 6 September 2026 (week 36)","summary":"In the week of 31 August to 6 September 2026, 10 vulnerabilities were newly recorded as exploited in the wild, 10 of them critical. The technology hit most was PaperCut MF (2), followed by PaperCut NG (2) and SonicWall SMA1000 (2).","url":"https://junglewise.ai/threats/exploited/2026-08-31","json_url":"https://junglewise.ai/threats/exploited/2026-08-31.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-08-31","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":10,"period":{"end":"2026-09-06","start":"2026-08-31"},"critical":10,"generated_at":"2026-10-02T19:23:09.012711+00:00","technologies":[{"hub":true,"name":"PaperCut MF","slug":"mf","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/mf"},{"hub":true,"name":"PaperCut NG","slug":"ng","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/ng"},{"hub":false,"name":"SonicWall SMA1000","slug":"sma1000","vulnerabilities":2},{"hub":true,"name":"SonicWall SMA1000 Appliances","slug":"sma1000-appliances","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/sma1000-appliances"},{"hub":true,"name":"Berriai LiteLLM","slug":"litellm","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/litellm"},{"hub":true,"name":"Google Chrome","slug":"chrome","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/chrome"},{"hub":true,"name":"Google Chromium","slug":"chromium","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/chromium"},{"hub":true,"name":"Google Chromium V8","slug":"chromium-v8","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/chromium-v8"},{"hub":false,"name":"Google V8","slug":"v8","vulnerabilities":1},{"hub":true,"name":"JFrog Artifactory","slug":"artifactory","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/artifactory"},{"hub":false,"name":"Kestra OSS","slug":"kestra-oss","vulnerabilities":1},{"hub":true,"name":"Kludex Starlette","slug":"starlette","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/starlette"},{"hub":false,"name":"Kludex Starlette-Context","slug":"starlette-context","vulnerabilities":1},{"hub":true,"name":"litellm (PyPI)","slug":"pypi-litellm","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/pypi-litellm"},{"hub":true,"name":"Microsoft Edge","slug":"edge-chromium-based","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/edge-chromium-based"}],"vulnerabilities":[{"cve":"CVE-2026-85046","cvss":8.8,"epss":0.4888,"slug":"cve-2026-85046-google-chromium-v8-type-confusion-vulnerability","title":"Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr","severity":"critical","exploited":true,"published_at":"2026-09-03T20:17:24.21+00:00","technologies":[{"hub":true,"name":"Google Chrome","slug":"chrome","vendor":{"name":"Google","slug":"google"}},{"hub":true,"name":"Google Chromium","slug":"chromium","vendor":{"name":"Google","slug":"google"}},{"hub":true,"name":"Google Chromium V8","slug":"chromium-v8","vendor":{"name":"Google","slug":"google"}},{"hub":true,"name":"Microsoft Edge","slug":"edge-chromium-based","vendor":{"name":"Microsoft","slug":"microsoft"}},{"hub":true,"name":"Opera Browser","slug":"opera-browser","vendor":{"name":"Opera","slug":"opera"}},{"hub":false,"name":"Google V8","slug":"v8","vendor":{"name":"Google","slug":"google"}}],"exploited_since":"2026-09-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-85046-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2026-83549","cvss":7.8,"epss":0.1076,"slug":"cve-2026-83549-sonicwall-sma1000-os-command-injection","title":"Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identi","severity":"critical","exploited":true,"published_at":"2026-09-01T22:17:13.29+00:00","technologies":[{"hub":false,"name":"SonicWall SMA1000","slug":"sma1000","vendor":{"name":"SonicWall","slug":"sonicwall"}},{"hub":true,"name":"SonicWall SMA1000 Appliances","slug":"sma1000-appliances","vendor":{"name":"SonicWall","slug":"sonicwall"}}],"exploited_since":"2026-09-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-83549-sonicwall-sma1000-os-command-injection"},{"cve":"CVE-2026-83548","cvss":10,"epss":0.0876,"slug":"cve-2026-83548-sonicwall-sma1000-server-side-request-forgery","title":"A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A r","severity":"critical","exploited":true,"published_at":"2026-09-01T22:17:13.17+00:00","technologies":[{"hub":false,"name":"SonicWall SMA1000","slug":"sma1000","vendor":{"name":"SonicWall","slug":"sonicwall"}},{"hub":true,"name":"SonicWall SMA1000 Appliances","slug":"sma1000-appliances","vendor":{"name":"SonicWall","slug":"sonicwall"}}],"exploited_since":"2026-09-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-83548-sonicwall-sma1000-server-side-request-forgery"},{"cve":"CVE-2026-82329","cvss":9.8,"epss":0.1412,"slug":"cve-2026-82329-jfrog-artifactory-improper-authentication-vulnerability","title":"JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network","severity":"critical","exploited":true,"published_at":"2026-08-28T20:20:21.293+00:00","technologies":[{"hub":true,"name":"JFrog Artifactory","slug":"artifactory","vendor":{"name":"JFrog","slug":"jfrog"}}],"exploited_since":"2026-09-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-82329-jfrog-artifactory-improper-authentication-vulnerability"},{"cve":"CVE-2026-9586","cvss":9.3,"epss":0.1898,"slug":"cve-2026-9586-sangoma-switchvox-smb-sql-injection-in-pa-endpoint","title":"Sangoma Switchvox SMB SQL injection in /pa endpoint","severity":"critical","exploited":true,"published_at":"2026-07-17T17:17:18.15+00:00","technologies":[{"hub":false,"name":"Sangoma Switchvox","slug":"switchvox","vendor":{"name":"Sangoma","slug":"sangoma"}},{"hub":true,"name":"Sangoma Switchvox SMB Edition","slug":"switchvox-smb-edition","vendor":{"name":"Sangoma","slug":"sangoma"}}],"exploited_since":"2026-09-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-9586-sangoma-switchvox-smb-sql-injection-in-pa-endpoint"},{"cve":"CVE-2026-59822","cvss":4,"epss":0.0084,"slug":"cve-2026-59822-berriai-litellm-authentication-bypass-in-mcp-endpoint","title":"BerriAI LiteLLM authentication bypass in MCP endpoint","severity":"critical","exploited":true,"published_at":"2026-07-08T20:16:57.683+00:00","technologies":[{"hub":true,"name":"Berriai LiteLLM","slug":"litellm","vendor":{"name":"Berriai","slug":"berriai"}},{"hub":true,"name":"litellm (PyPI)","slug":"pypi-litellm","vendor":{"name":"PyPI","slug":"pypi"}}],"exploited_since":"2026-09-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-59822-berriai-litellm-authentication-bypass-in-mcp-endpoint"},{"cve":"CVE-2026-49869","cvss":10,"epss":0.021,"slug":"cve-2026-49869-kestra-oss-authentication-bypass-in-authenticationfilter","title":"Kestra OSS authentication bypass in AuthenticationFilter","severity":"critical","exploited":true,"published_at":"2026-06-26T22:16:32.113+00:00","technologies":[{"hub":false,"name":"Kestra OSS","slug":"kestra-oss","vendor":{"name":"Kestra","slug":"kestra"}}],"exploited_since":"2026-09-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-49869-kestra-oss-authentication-bypass-in-authenticationfilter"},{"cve":"CVE-2026-48710","cvss":6.5,"epss":0.0706,"slug":"cve-2026-48710-starlette-auth-bypass-via-malformed-host-header","title":"Starlette auth bypass via malformed Host header","severity":"critical","exploited":true,"published_at":"2026-05-26T22:16:44.02+00:00","technologies":[{"hub":true,"name":"starlette (PyPI)","slug":"pypi-starlette","vendor":{"name":"PyPI","slug":"pypi"}},{"hub":true,"name":"Kludex Starlette","slug":"starlette","vendor":{"name":"Kludex","slug":"kludex"}},{"hub":false,"name":"Kludex Starlette-Context","slug":"starlette-context","vendor":{"name":"Kludex","slug":"kludex"}}],"exploited_since":"2026-09-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-48710-starlette-auth-bypass-via-malformed-host-header"},{"cve":"CVE-2026-82078","cvss":9.1,"epss":0.0384,"slug":"cve-2026-82078-papercut-ng-mf-unsafe-reflection-vulnerability","title":"An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application in","severity":"critical","exploited":true,"published_at":"2026-08-28T16:18:31.24+00:00","technologies":[{"hub":true,"name":"PaperCut MF","slug":"mf","vendor":{"name":"PaperCut","slug":"papercut"}},{"hub":true,"name":"PaperCut NG","slug":"ng","vendor":{"name":"PaperCut","slug":"papercut"}},{"hub":true,"name":"PaperCut MF","slug":"mf","vendor":{"name":"PaperCut","slug":"papercut"}},{"hub":true,"name":"PaperCut NG","slug":"ng","vendor":{"name":"PaperCut","slug":"papercut"}}],"exploited_since":"2026-08-31T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-82078-papercut-ng-mf-unsafe-reflection-vulnerability"},{"cve":"CVE-2026-81578","cvss":9.8,"epss":0.0448,"slug":"cve-2026-81578-papercut-ng-mf-missing-authentication-for-critical-function","title":"An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, u","severity":"critical","exploited":true,"published_at":"2026-08-28T16:18:29.6+00:00","technologies":[{"hub":true,"name":"PaperCut MF","slug":"mf","vendor":{"name":"PaperCut","slug":"papercut"}},{"hub":true,"name":"PaperCut NG","slug":"ng","vendor":{"name":"PaperCut","slug":"papercut"}},{"hub":true,"name":"PaperCut MF","slug":"mf","vendor":{"name":"PaperCut","slug":"papercut"}},{"hub":true,"name":"PaperCut NG","slug":"ng","vendor":{"name":"PaperCut","slug":"papercut"}}],"exploited_since":"2026-08-31T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-81578-papercut-ng-mf-missing-authentication-for-critical-function"}],"previous":{"key":"2026-08-24","top":"Linux Kernel","total":11,"period":{"end":"2026-08-30","start":"2026-08-24"},"critical":11,"url":"https://junglewise.ai/threats/exploited/2026-08-24"},"next":{"key":"2026-09-07","top":"JFrog Artifactory","total":14,"period":{"end":"2026-09-13","start":"2026-09-07"},"critical":14,"url":"https://junglewise.ai/threats/exploited/2026-09-07"}}