Daily Threat Briefing
← All briefings

Gitea · Mass Use-After-Free Update · NVIDIA OpenShell for Linux

Date: 2026-08-26 Prepared for: SOC Analysts | Incident Responders | Vulnerability Management | Security Leadership

Executive Summary

The dominant new development today is CVE-2026-60004, a Gitea code injection vulnerability added to the CISA KEV catalog with a three-day remediation deadline of 2026-08-28. Google Chrome 152 has received a massive security update patching dozens of use-after-free vulnerabilities rated up to CVSS 9.6, several enabling sandbox escape. BSI has issued new critical advisories for vm2 and notable new advisories for Contao, ZScaler Client Connector, and SEPPmail. Norway’s government digital infrastructure is under an ongoing DDoS attack. The Oracle WebLogic KEV deadline (2026-08-27) expires tomorrow.

Critical Vulnerabilities

CVE-2026-60004 — Gitea (Code Injection via diffpatch API)

  • Severity: Not yet published; CISA KEV confirmed
  • EPSS: Not yet scored — newly added
  • Technical detail: An attacker with repository write access can send a malicious patch to Gitea’s diffpatch API endpoint to plant an executable Git hook, which then runs arbitrary shell commands as the Gitea service account. The attack requires repository write access (not unauthenticated), but in multi-tenant or open-registration Gitea instances this bar is low. Gitea is widely self-hosted in enterprise DevOps pipelines; compromise of the service account can pivot to CI/CD infrastructure, source code, and secrets.
  • Exploitation status: Actively exploited — CISA KEV added 2026-08-25.
  • Remediation: Apply the latest Gitea patch immediately. CISA deadline for federal agencies: 2026-08-28. Audit Git hook directories for unauthorized executables. Restrict repository write access to verified users only. Review Gitea service account privileges.

Google Chrome 152 — Mass Use-After-Free Update (Multiple CVEs)

  • Severity: CVSS 9.6 (critical, multiple CVEs); additional high-severity entries at CVSS 8.8
  • EPSS: Not yet scored — newly published
  • Technical detail: Google has released Chrome 152.0.7977.65 patching an exceptionally large batch of use-after-free vulnerabilities across Aura, Views, Chromecast, ANGLE, WebGL, V8, FedCM, ServiceWorker, Audio, Bluetooth, WebRTC, and other subsystems. Multiple CVEs (including CVE-2026-79054, CVE-2026-79290, CVE-2026-79052, CVE-2026-79200, CVE-2026-79150) are rated CVSS 9.6 and allow a remote attacker to execute arbitrary code outside the sandbox via crafted HTML pages. Several additional entries at CVSS 8.8 allow in-sandbox code execution. The sheer volume and breadth of affected components is unusual and suggests a significant internal audit or external research disclosure.
  • Exploitation status: No confirmed in-the-wild exploitation reported at time of writing; the volume and severity of sandbox-escape bugs warrants urgent treatment.
  • Remediation: Update Chrome to 152.0.7977.65 immediately across all managed endpoints. Enforce auto-update policies. Chromium-based browsers (Edge, Brave, etc.) should be monitored for corresponding updates.

CVE-2026-65083 / CVE-2026-65093 — NVIDIA OpenShell for Linux (Sandbox Escape / RCE)

  • Severity: CVSS 9.9 (both)
  • EPSS: 0.0 — newly published
  • Technical detail: Two near-maximum-severity vulnerabilities affect NVIDIA OpenShell for Linux versions up to 0.0.33. CVE-2026-65083 involves incomplete validation of disallowed inputs in the sandbox provisioning API, and CVE-2026-65093 allows a full sandbox escape. Successful exploitation of either can lead to code execution, privilege escalation, and data disclosure. NVIDIA OpenShell is used in GPU-accelerated Linux environments; these flaws are particularly relevant in AI/ML infrastructure and HPC clusters where NVIDIA tooling is prevalent.
  • Exploitation status: No confirmed exploitation.
  • Remediation: Upgrade NVIDIA OpenShell to a version above 0.0.33 per NVIDIA’s advisory. Restrict access to OpenShell provisioning APIs to trusted users.

CVE-2026-49845 — Apache Hive (Authenticated SQL Injection in Metastore)

  • Severity: CVSS 9.8
  • EPSS: 0.0 — newly published
  • Technical detail: A SQL injection vulnerability in Apache Hive’s Metastore direct SQL partition-name resolution affects versions 4.0.0 through 4.2.0 on all platforms. Authenticated users with access to Hive Metastore APIs can read, modify, or affect data beyond their authorization scope. Apache Hive Metastore is a central component in many enterprise data lake and Hadoop-based analytics environments; exploitation could expose or corrupt large volumes of business-critical data.
  • Exploitation status: No confirmed exploitation.
  • Remediation: Upgrade Apache Hive to 4.2.1 or later. Audit Metastore API access controls and restrict to authorized service accounts only.

CVE-2026-45018 — Chainlit (Unauthenticated MCP Server-Side Request Forgery / RCE)

  • Severity: CVSS 9.8
  • EPSS: 0.0 — newly published
  • Technical detail: In Chainlit versions 2.4.0rc0 through 2.11.x, deployments with features.mcp.enabled: true in the configuration are vulnerable to an unauthenticated attack via the Model Context Protocol (MCP) interface. An attacker can exploit this to achieve remote code execution or significant data exposure without authentication. Chainlit is a Python framework for production conversational AI applications; MCP-enabled deployments are increasingly common in enterprise AI pipelines.
  • Exploitation status: No confirmed exploitation.
  • Remediation: Upgrade Chainlit to 2.12.0 or later. If immediate upgrade is not possible, disable features.mcp.enabled in the configuration and restrict Chainlit to internal networks.

ONGOING:

  • CVE-2026-21962 (Oracle HTTP Server / WebLogic): KEV deadline tomorrow 2026-08-27 — patch without further delay; restrict proxy interface exposure.
  • CVE-2026-18963 (Keycloak): CVSS 9.1 unauthenticated account takeover — apply Red Hat/Keycloak patch; enforce MFA.
  • CVE-2026-63520 (Microsoft SharePoint RCE): Apply August 2026 patch; prioritize on-premises instances.
  • CVE-2026-56705 / CVE-2026-56703 (Adminer): Upgrade to ≥ 5.4.3; remove internet-facing instances.
  • CVE-2026-39975 cluster (Combodo iTop): Upgrade to ≥ 3.2.3; restrict to internal networks.
  • CVE-2026-68820 (Windows AFD/Lazarus): KEV deadline passed — apply August Patch Tuesday immediately if not done.
  • CVE-2026-19478 (GitLab): Actively exploited — upgrade to 19.0.6 / 19.1.4 / 19.2.2.
  • CVE-2026-73570 (Zimbra ZCS): KEV deadline passed; 270+ servers confirmed compromised — audit for web shells immediately.
  • CVE-2026-64849 (MLflow SSRF): KEV deadline 2026-09-02 — patch and audit IAM.
  • CVE-2026-69414 (Microsoft Defender ShieldBreak): No patch available — monitor MSRC.

European Advisories

BSI — New advisories (2026-08-25):

WID-SEC-2026-2997 (vm2 — kritisch/NEW): Multiple critical vulnerabilities in the vm2 JavaScript sandbox library allow security bypass, information disclosure, data manipulation, DoS, and arbitrary code execution. vm2 is widely used in Node.js environments to sandbox untrusted code; these flaws are high-risk in any platform relying on vm2 for isolation. Apply available patches or migrate to a maintained alternative immediately.

WID-SEC-2026-2999 (Contao CMS — hoch/NEW): Multiple vulnerabilities in the Contao open-source CMS allow security bypass, privilege escalation to administrator, XSS, information disclosure, and data manipulation. Contao is widely deployed for German-language web presences. Apply the latest Contao security release promptly.

WID-SEC-2026-2998 (ZScaler Client Connector — hoch/NEW): Multiple vulnerabilities allow security bypass, arbitrary code execution, privilege escalation, and DoS. ZScaler Client Connector is deployed as a zero-trust network access agent on enterprise endpoints; privilege escalation on this component is high-impact. Apply ZScaler updates via the management console.

WID-SEC-2026-2992 (SEPPmail Secure E-Mail Gateway — hoch/NEW): Multiple vulnerabilities allow security bypass and arbitrary code execution in the SEPPmail gateway, which is widely used in German enterprise and public sector email security. Apply vendor patches immediately.

WID-SEC-2026-2987 (WebKitGTK — hoch/NEW, UNPATCHED): An unpatched remote code execution vulnerability via memory corruption in WebKitGTK. No patch is currently available. Restrict use of WebKitGTK-based applications where possible and monitor for vendor updates.

BSI — Updated advisories: GeoServer (SQL injection/RCE — kritisch), Oracle Fusion Middleware (kritisch), Linux Kernel (multiple — kritisch/hoch), NGINX/NGINX Plus (multiple — hoch), Mozilla Firefox/ESR/Thunderbird (hoch), PostgreSQL (hoch), CPython (hoch), Golang Go (hoch), IBM WebSphere (hoch), Apache HTTP Server (hoch), Red Hat Enterprise Linux Apicurio Registry (hoch) — apply current vendor patches per prior guidance.

WID-SEC-2026-2995 (Langflow OSS) and WID-SEC-2026-2974 (Rapid7 Velociraptor): covered in yesterday’s report — apply patches per prior guidance.

ONGOING: WID-SEC-2026-2962 (Apache CloudStack), WID-SEC-2026-2964 (TP-Link Omada), WID-SEC-2026-2963 (PTC Windchill), WID-SEC-2026-2951 (Microsoft Azure/Entra/Exchange) — no change; apply vendor patches.

Active Threats and Campaigns

Norway Government DDoS (NEW): A large-scale DDoS attack has disrupted Norway’s shared government digital infrastructure since Monday 2026-08-25, affecting public-sector services. Heise Security reports Russian attribution is being investigated. European SOC teams should review DDoS resilience posture for public-sector-adjacent infrastructure.

Mirage2FA PhaaS — Microsoft 365 Targeting (NEW): The Mirage2FA phishing-as-a-service toolkit has targeted 4,500 US and EU companies, abusing legitimate Microsoft 365 login flows to bypass MFA. ANY.RUN research indicates 48% of targeted email addresses were potentially compromised. The Hacker News — hunt for anomalous OAuth token issuance and conditional access policy bypasses.

AnonyMousKIT PhaaS — Apple Device Passcode Phishing (NEW): A newly identified PhaaS platform uses AI voice agents to socially engineer iPhone passcodes from victims of device theft, enabling Activation Lock bypass. Bleeping Computer — relevant for organizations with BYOD iPhone policies; brief end users on this technique.

npm Phishing Infrastructure Abuse (NEW): 24 npm packages are abusing unpkg CDN mirrors to host fake Cloudflare CAPTCHA pages redirecting to ClickFix-style lures. Bleeping Computer — audit npm dependencies and block unpkg-hosted redirect chains at proxy.

ONGOING:

  • Zimbra ZCS active exploitation: 270+ servers confirmed compromised — audit for web shells immediately.
  • miniOrange SAML WordPress plugin: Active exploitation ongoing — update and audit admin accounts.
  • UAT-10147 / SPECTRE: AI-assisted server attacks with EDR bypass — review detection rules.
  • ToxicPanda 2.0, RedC2 4.0 npm supply chain, SynkLoader/Teams phishing, FTP Banner RAT (E4del/PINHOLE): No new developments; maintain prior mitigations.

Security News and Context

  • Norway DDoS: Large-scale attack disrupting Norwegian government digital services since Monday; Russian involvement under investigation. (Heise Security)
  • US sanctions Iran-linked hackers: The US Treasury has sanctioned Iranian cyber actors linked to critical infrastructure breaches as part of a broader economic campaign against Iran. (The Hacker News)
  • NVIDIA NemoClaw: Oasis Security disclosed a weakness allowing attacker-controlled webpages to poison local Ollama AI model instances via unauthenticated control. (The Hacker News)
  • Cyber Resilience Act readiness: Heise Security reports significant gaps in German industry compliance ahead of the December 2027 CRA deadline, particularly around SBOM and incident reporting obligations. (Heise Security)
  1. Gitea (CVE-2026-60004): Apply latest Gitea patch immediately — CISA KEV deadline 2026-08-28; audit Git hook directories for unauthorized executables; restrict repository write access.
  2. Oracle HTTP Server / WebLogic (CVE-2026-21962): KEV deadline tomorrow 2026-08-27 — patch without further delay if not yet done.
  3. Google Chrome 152: Deploy update to 152.0.7977.65 across all managed endpoints immediately; enforce auto-update policies for Chromium-based browsers.
  4. NVIDIA OpenShell (CVE-2026-65083 / CVE-2026-65093): Upgrade beyond 0.0.33; restrict provisioning API access — critical for AI/ML and HPC environments.
  5. Apache Hive (CVE-2026-49845): Upgrade to 4.2.1; audit Metastore API access controls.
  6. Chainlit (CVE-2026-45018): Upgrade to 2.12.0 or disable MCP feature; restrict to internal networks.
  7. vm2 (BSI WID-SEC-2026-2997): Apply patches or migrate to a maintained sandbox alternative; treat as critical in Node.js environments.
  8. Contao / ZScaler Client Connector / SEPPmail: Apply vendor patches per BSI advisories WID-SEC-2026-2999, WID-SEC-2026-2998, WID-SEC-2026-2992.
  9. Mirage2FA / Microsoft 365: Hunt for anomalous OAuth token issuance; review conditional access policies and MFA bypass indicators.
  10. Continue remediation of previously reported items: CVE-2026-73570 (Zimbra — deadline passed, 270+ compromised), CVE-2026-68820 (Windows AFD — deadline passed), CVE-2026-64849 (MLflow — deadline 2026-09-02), CVE-2026-18963 (Keycloak), CVE-2026-19478 (GitLab), CVE-2026-69414 (Defender ShieldBreak — no patch).