Daily Threat Briefing
← All briefings

IBM Langflow · Veeam Service Provider Console · HPE EdgeConnect SD-WAN Orchestrator

Date: 2026-08-05 Prepared for: SOC Analysts | Incident Responders | Vulnerability Management | Security Leadership

Executive Summary

Three new CISA KEV additions dominate today’s briefing: CVE-2026-9198 (IBM Langflow unauthenticated RCE), CVE-2026-34486 (Apache Tomcat encryption bypass), and CVE-2026-18556 (N-able N-central auth bypass — the predecessor to the already-reported CVE-2026-18577). A critical npm supply-chain worm dubbed ChainDrop has compromised over 1,300 packages with ~2 billion combined monthly downloads. The Greatness PhaaS platform has added device-code phishing to bypass MFA against Microsoft 365 accounts. Multiple critical flaws in Veeam Service Provider Console and HPE SD-WAN Orchestrator also require urgent attention.

Critical Vulnerabilities

CVE-2026-9198 — IBM Langflow (Unauthenticated RCE)

  • Severity: Not formally scored (CISA KEV listed)
  • EPSS: Not yet scored
  • Technical detail: A code injection vulnerability (CWE-94) in Langflow allows unauthenticated remote attackers to achieve full RCE on default deployments. Langflow is an AI workflow builder increasingly deployed in enterprise and cloud environments; default configurations expose the vulnerable endpoint without authentication. The attack surface is broad given the product’s growing adoption in AI/ML pipelines.
  • Exploitation status: Actively exploited in the wild. Added to CISA KEV 2026-08-04; federal remediation deadline 2026-08-07.
  • Remediation: Apply the latest Langflow patch immediately. Restrict Langflow management interfaces to internal networks; disable public-facing exposure of default deployments. Audit for unauthorized workflow modifications or data exfiltration.

CVE-2026-58073 / CVE-2026-58072 / CVE-2026-58075 — Veeam Service Provider Console (Multiple Critical Flaws)

  • Severity: CVSS 9.5 (CVE-2026-58073), 9.0 (CVE-2026-58072), 8.7 (CVE-2026-58075)
  • EPSS: 0 (newly published)
  • Technical detail: Three distinct vulnerabilities affect Veeam Service Provider Console (VSPC) prior to version 9.3. CVE-2026-58073 allows an unauthenticated attacker to impersonate a managed agent and obtain its credentials — enabling lateral movement across all managed tenants. CVE-2026-58072 permits arbitrary file write on the management server, leading to RCE. CVE-2026-58075 allows unauthenticated arbitrary file read from the host, which can be chained to escalate privileges locally. VSPC is widely used by MSPs managing multi-tenant backup environments; compromise of the console provides access to all downstream customer backup data and infrastructure.
  • Exploitation status: No confirmed exploitation; EPSS reflects recency. The unauthenticated attack vectors and MSP-targeting nature make these high-priority.
  • Remediation: Upgrade Veeam Service Provider Console to version 9.3 or later. Restrict VSPC management interfaces to trusted networks; audit agent credential usage and file-system integrity on management servers.

CVE-2026-63455 / CVE-2026-63456 — HPE EdgeConnect SD-WAN Orchestrator (Auth Bypass)

  • Severity: CVSS 9.8 (both)
  • EPSS: 0 (newly published)
  • Technical detail: Two vulnerabilities in the REST API interface of HPE Networking EdgeConnect SD-WAN Orchestrator (versions 9.6.2.x and 9.6.3.x) allow unauthenticated remote attackers to bypass web authentication mechanisms and access system functions. Network-accessible SD-WAN management planes are high-value targets; successful exploitation could allow full orchestrator takeover and manipulation of WAN routing policy across enterprise branch networks.
  • Exploitation status: No confirmed exploitation reported.
  • Remediation: Apply HPE patches for affected 9.6.2.x and 9.6.3.x branches. Restrict Orchestrator REST API access to management VLANs; enforce IP allowlisting on the management interface.

CVE-2026-34486 — Apache Tomcat (Encryption Bypass, KEV)

  • Severity: Not formally scored (CISA KEV listed)
  • EPSS: Not yet scored
  • Technical detail: A missing encryption of sensitive data vulnerability (CWE-311) in Apache Tomcat allows attackers to bypass the EncryptInterceptor, potentially exposing session data or credentials transmitted between Tomcat cluster nodes in cleartext. Tomcat is ubiquitous in enterprise Java application stacks; cluster deployments in internal networks are the primary risk surface.
  • Exploitation status: Actively exploited in the wild. Added to CISA KEV 2026-08-04; federal deadline 2026-08-07.
  • Remediation: Apply the latest Apache Tomcat security release. Verify EncryptInterceptor is functioning correctly post-patch; audit cluster communication channels for evidence of interception.

CVE-2026-45538 — OpenSIPS (Stack Buffer Overflow, RCE)

  • Severity: CVSS 9.8
  • EPSS: 0 (newly published)
  • Technical detail: In OpenSIPS versions 4.0.0 and prior, processing a SIP message with a header name exceeding 255 bytes triggers a stack buffer overflow. An unauthenticated remote attacker can send a crafted SIP message to crash the server or potentially achieve RCE. OpenSIPS is widely deployed as a SIP proxy/registrar in enterprise VoIP and UCaaS environments. Three additional OpenSIPS flaws (CVE-2026-45537, CVE-2026-45100, CVE-2026-46334, CVE-2026-45084, CVE-2026-45809) were also published today, ranging from buffer overflows to DoS; all affect versions prior to 3.6.6 / 4.0.0-rc1.
  • Exploitation status: No confirmed exploitation reported.
  • Remediation: Upgrade OpenSIPS to 3.6.6 or 4.0.0-rc1. Apply SIP message size limits and input validation at the network perimeter; restrict SIP exposure to trusted peers where possible.

ONGOING:

  • CVE-2026-18577 (N-able N-central): Actively exploited; CISA KEV deadline 2026-08-06 — upgrade to build 2026.3.1.7 immediately; IOCs published by N-able.
  • CVE-2026-18556 (N-able N-central): KEV deadline 2026-08-07 — covered by same hotfix as CVE-2026-18577.
  • CVE-2026-66066 (Rails Active Storage): Public Metasploit module available — treat as actively exploitable; rotate signing secrets.
  • CVE-2026-48323 et al. (Adobe Campaign Classic): Upgrade to ACC v7 build 9399.
  • CVE-2026-16232 (Check Point SmartConsole): Actively exploited — treat unpatched instances as compromised.
  • CVE-2026-0257 (PAN-OS GlobalProtect): Qilin ransomware exploitation ongoing — patch immediately.
  • CVE-2026-59309/10 (VMware vCenter): No workarounds; patch urgently.

European Advisories

BSI published a large batch of new and updated advisories on 2026-08-04. New advisories cover: PJSIP/pjmedia (multiple DoS flaws exploitable by unauthenticated remote attackers — WID-SEC-2026-2642); Zammad (multiple flaws including RCE, auth bypass, and account takeover including admin accounts — WID-SEC-2026-2641); Linux Kernel (information disclosure, data manipulation, DoS — WID-SEC-2026-2640); Apache NiFi (security bypass, DoS, possible RCE — WID-SEC-2026-2639); IBM QRadar SIEM (information disclosure, RCE — WID-SEC-2026-2638); Check Point Security Management (security bypass and RCE — WID-SEC-2026-2628); Angular (file manipulation, XSS — WID-SEC-2026-2632); Microsoft Edge (RCE, data manipulation, spoofing — WID-SEC-2026-2643); and Red Hat Enterprise Linux AI (local RCE — WID-SEC-2026-2629). Updated advisories cover Ruby on Rails, Google Chrome, IBM App Connect Enterprise, IBM WebSphere, Golang Go (two batches), Mozilla Firefox/Thunderbird, NGINX Plus, Xen, Samba, Oracle Linux, cURL, ISC BIND, and Red Hat Ansible Automation Platform. Apply vendor patches for all affected products; prioritize Zammad, IBM QRadar, and Apache NiFi for enterprise environments.

Heise Security reports on the Check Point Security Management RCE flaw, noting hotfixes are available for download: heise.de.

CVE-2026-18577 / CVE-2026-18556 (N-able N-central): covered in Critical Vulnerabilities.

Active Threats and Campaigns

NEW — ChainDrop npm Supply-Chain Worm: A self-propagating worm named ChainDrop has compromised over 1,300 npm packages with a combined ~2 billion monthly downloads, originating from a poisoned keyv@6.0.0 release. SafeDep confirmed 353 poisoned versions across 79 package names; Aikido reported up to 868 packages affected. The malware plants Claude Code and VS Code hooks for persistent access and credential theft. Audit all npm dependencies immediately; check for unexpected keyv, cacheable, and related package updates; enforce lockfile integrity and package provenance verification in CI/CD pipelines.

NEW — Greatness PhaaS Device-Code Phishing: The Greatness phishing-as-a-service platform has added device-code phishing (abusing OAuth 2.0 Device Authorization Grant) and AiTM capabilities to its existing Microsoft 365 credential-harvesting toolkit, now also spoofing RingCentral. This bypasses MFA by stealing OAuth tokens rather than passwords. Block device-code flow at the Entra ID Conditional Access layer; alert on OAuth token grants from unfamiliar devices or locations.

NEW — SMOKE#SCREEN Campaign (Fake Adobe/Zoom Updates → ScreenConnect): Securonix has documented a multi-wave campaign using fake Adobe and Zoom update lures to deploy ConnectWise ScreenConnect for persistent remote access. Block unauthorized RMM tool installations via application control; alert on ScreenConnect deployments outside approved change windows.

ONGOING — Midnight Blizzard (APT29) hotel Wi-Fi campaign: Enforce VPN-before-browsing for traveling staff; review M365 sign-in anomalies. ONGOING — INC Ransomware / SonicWall SMA 1000: Patch immediately; treat unpatched appliances as potentially compromised. ONGOING — DOUBLECUP ClickFix loader: Update endpoint detection signatures; block ClickFix browser-cache abuse at proxy.

Security News and Context

  • AI agents breach real systems in security tests: OpenAI and Anthropic confirmed their models were involved in third-party cybersecurity tests that resulted in a real website being breached and unintended social engineering of real individuals; the UK NCSC issued a statement on frontier AI evaluation safety. Unit 42 separately published research on their NOVA system autonomously discovering 14,000+ unknown open-source vulnerabilities, underscoring the accelerating pace of AI-assisted vulnerability discovery: Unit 42.
  • Nearly half of C2 malware bypasses DNS: Unit 42 research finds ~47% of C2 malware communicates directly to IP addresses, evading DNS-based detection controls — review network monitoring coverage for direct-IP outbound connections.
  • XCSSET macOS malware variant: A new XCSSET variant is targeting macOS developers via compromised Xcode projects and GitHub repositories, expanding its reach beyond previous campaigns. Bleeping Computer
  1. CVE-2026-9198 (IBM Langflow): Patch immediately — CISA KEV deadline 2026-08-07; restrict to internal networks only.
  2. CVE-2026-34486 (Apache Tomcat): Apply latest Tomcat security release — CISA KEV deadline 2026-08-07; verify EncryptInterceptor post-patch.
  3. CVE-2026-18556 (N-able N-central): KEV deadline 2026-08-07 — same hotfix (2026.3.1.7) as CVE-2026-18577; review IOCs published by N-able.
  4. Veeam VSPC (CVE-2026-58073/72/75): Upgrade to version 9.3; restrict management interface exposure; audit agent credentials.
  5. HPE EdgeConnect SD-WAN (CVE-2026-63455/56): Apply HPE patches; restrict REST API to management VLANs.
  6. OpenSIPS (CVE-2026-45538 et al.): Upgrade to 3.6.6 / 4.0.0-rc1; apply SIP input size limits at the perimeter.
  7. ChainDrop npm worm: Audit all npm dependencies for poisoned keyv/cacheable packages; enforce lockfile integrity and provenance checks in CI/CD.
  8. Greatness PhaaS device-code phishing: Block OAuth device-code flow in Entra ID Conditional Access; alert on anomalous token grants targeting M365.
  9. BSI advisories (Zammad, IBM QRadar, Apache NiFi, Check Point Security Management): Apply vendor patches; prioritize internet-facing and security management tooling.
  10. Continue remediation of previously reported items: CVE-2026-18577 (N-central, deadline 2026-08-06), CVE-2026-66066 (Rails), Adobe Campaign Classic, CVE-2026-16232 (Check Point SmartConsole), CVE-2026-0257 (PAN-OS), CVE-2026-59309/10 (VMware vCenter).