Upwind Security MDR

🚨Critical - Chrome 156 Fixes 52 Security Flaws, 4 Critical (CVE-2026-118306, CVE-2026-118331, CVE-2026-118348, CVE-2026-118344) Memory corruption, use-after-free & input validation bugs across V8, Skia, ANGLE, FileSystem & more let a crafted HTML page execute arbitrary code. 👉Affected: Google Chrome < 156.0.8078.73 | Upgrade to 156.0.8078.73+

⚠️High - Multiple curl/libcurl Flaws Enable Credential Leaks, TLS Bypass & DoS Credentials can leak to proxies, redirects or other origins; reused connections can inherit another TLS identity; wolfSSL pinning & SSH host-key checks can be bypassed; IMAP APPEND allows command injection (CVE-2026-87864). 👉Affected: curl < 8.23.0 | Upgrade to 8.23.0

🚨 High - Multiple SQLite Vulnerabilities Disclosed 11 new CVEs landed in SQLite today, including heap buffer overflows in FTS5 and the Session extension, use-after-free in FTS3 and R-Tree, an authorizer bypass, and a command injection in the CLI `.recover` command (CVSS up to 7.8). Most require attacker-supplied SQL or a crafted database file. 👉 Affected: SQLite < 3.54.0 | Upgrade to 3.54.0 (CVE-2026-119586 affects ≤ 3.54.1 with no fix released yet) CVE-2026-119371, CVE-2026-119372, CVE-2026-119373, CVE-2026-119374, CVE-2026-119375, CVE-2026-119376, CVE-2026-119377, CVE-2026-119378, CVE-2026-119379, CVE-2026-119586, CVE-2026-119591

🚨High - MLflow Path Traversal File Read & Untrusted Model Deserialization RCE (CVE-2024-3848, CVE-2024-37052) A '#' fragment in artifact URLs bypasses path validation, letting unauthenticated attackers read arbitrary server files, including SSH and cloud keys. Separately, a maliciously uploaded scikit-learn model executes arbitrary code when a user loads it. CVE-2024-3848 is now reported exploited in the wild. 👉Affected: MLflow < 2.12.1 (file read), >= 1.1.0 (deserialization) | Upgrade to 2.12.1+ & load only trusted models

🚨High - Apache Arrow/pyarrow Parquet KMS URL Exfil via Unvalidated kms_url (CVE-2026-92287) Apache Arrow C++ Parquet/PyArrow passes a file-controlled KMS URL from Parquet decryption config into the pluggable KmsClient without validation. If the KmsClient doesn’t enforce allowed hosts, a crafted Parquet can redirect KMS token requests to an attacker-controlled endpoint. 26.0.0 disables file-controlled KMS URLs by default unless read_kms_url is enabled. 👉Affected: pyarrow < 26.0.0 | Upgrade to 26.0.0

🚨High - AWS Private CA Issuer Incorrect Authorization in issuerRef Resolution (CVE-2026-119115) AWS Private CA Connector for Kubernetes (aws-privateca-issuer) improperly authorizes issuer resolution when issuerRef.kind is missing/mismatched, letting an authenticated user request certs (incl. subordinate CA) signed by a cluster-scoped AWS Private CA issuer outside their approval policy. Workloads with strict issuerRef.kind matching are not impacted. 👉Affected: aws-privateca-issuer < 1.10.1 | Upgrade to 1.10.1

🚨 HIGH - Multiple Algorithmic Complexity DoS Flaws Patched in pyasn1 Multiple high-severity algorithmic complexity vulnerabilities (CWE-407 / CVSS 7.5) in the Python pyasn1 library allow remote attackers to cause CPU exhaustion and Denial of Service (DoS) via crafted ASN.1 BER/CER/DER payloads triggering quadratic-time processing during decoding of schemaless containers, constructed strings/indefinite ANY types, constructed BIT STRINGs, and binary REAL values. 🔍 CVEs: CVE-2026-119194, CVE-2026-119195, CVE-2026-119196, CVE-2026-119197 👉 Affected: pyasn1 prior to 0.6.5 | Upgrade to v0.6.5 or later immediately

🚨 CRITICAL - Multiple Security Vulnerabilities Fixed in curl 8.23.0 Release The curl project has addressed 7 security vulnerabilities across libcurl and the curl CLI, including SSH host verification bypasses on SFTP/SCP redirects, wolfSSL public-key pinning bypasses, unintended SigV4 header leakage, FTP client-certificate context confusion, cookie jar truncation/corruption, and DoS timeout bypasses. 🔍 CVEs: CVE-2026-86409, CVE-2026-86410, CVE-2026-86411, CVE-2026-86412, CVE-2026-87866, CVE-2026-92386, CVE-2026-92387 👉 Affected: curl / libcurl versions prior to 8.23.0 | Upgrade to v8.23.0 (or latest package backports) immediately

🚨High - minimatch DoS via glob preprocessing fixpoint expansion (CVE-2026-118764) minimatch’s glob preprocessing hits a fixpoint loop when optimizationLevel >= 2, where attacker-controlled "**/.." segments are repeatedly expanded then pairwise-compared during pattern compilation. This can spike CPU/memory and hang services compiling untrusted patterns. optimizationLevel < 2 is not affected. 👉Affected: minimatch <= 11.0.0 | Upgrade to 11.0.1 to mitigate

🚨Critical - Adobe Experience Manager Misconfiguration Auth Bypass to RCE (CVE-2025-54253) Adobe Experience Manager (AEM) <= 6.5.23 contains a security misconfiguration that enables a network-accessible bypass of security mechanisms, allowing unauthenticated attackers to reach code execution paths and achieve arbitrary code execution with scope change. 👉Affected: Adobe Experience Manager <= 6.5.23

🚨HIGH - Cisco ASA/FTD SSL VPN Unauth DoS via Secondary Auth Logic Bug (CVE-2026-76418) Cisco Secure Firewall ASA/FTD Remote Access SSL VPN mishandles a crafted connection request when secondary authentication is configured on a tunnel-group, triggering a logic error that forces an unexpected reload. Remote, unauthenticated attackers can repeatedly crash/reload the device, causing denial of service. 👉Affected: Cisco Secure Firewall ASA & Cisco Secure Firewall Threat Defense (FTD) Remote Access SSL VPN (tunnel-group with secondary authentication enabled)

🚨 CRITICAL - Linux Kernel IPv4 TCP Stack Use-After-Free (CVE-2026-98432) A CVSS 9.8 vulnerability in the Linux kernel IPv4 networking subsystem allows remote attackers to trigger a Use-After-Free (UAF) in ip_options_build(). The flaw stems from tcp_v4_syn_recv_sock() transferring ireq->ireq_opt ownership without copying it, enabling concurrent SYN retransmits to free the child socket options via kfree() before SYNACK processing completes. 👉 Affected: Linux kernel across Ubuntu releases (26.10, 26.04 LTS, 24.04 LTS, 22.04 LTS, 20.04 LTS) | Apply upstream stable patches replacing kfree() with kfree_rcu() or update distro packages as fixes land

🚨HIGH - Authlib OAuth/OIDC Dynamic Client Registration Takeover (CVE-2026-116672) Authlib’s documented reference impls for OAuth/OIDC client config endpoints use request-controlled client_id to select the target client and only check “editable” without verifying the registration_access_token belongs to that client. Any client with a valid registration access token can read/modify/delete other clients’ registrations, enabling redirect_uri swaps to steal codes/tokens or DoS via deletion. 👉Affected: Authlib/authlib < 1.9.1 | Upgrade to 1.9.1

ℹ️Low - VMware ESX Insufficient Logging Enables Audit Evasion (CVE-2026-41709) VMware ESX contains an insufficient logging flaw where certain administrative operations are not written to audit logs, allowing a malicious admin to perform actions without generating expected events. Impact is reduced auditability and delayed detection/forensics; no external attacker path is implied. 👉Affected: VMware Cloud Foundation; VMware vSphere Foundation (ESX)

🚨HIGH - OAuthLib client_id/request.client Mixup Token Scope Confusion (CVE-2026-118669) In OAuthLib <4.0.0, the client_credentials and password grant handlers can authenticate a confidential client into request.client but keep an attacker-controlled request.client_id from validate_grant_type/validate_scopes. A lower-privileged client can trigger authorization decisions using another client’s identity, leading to tokens issued with unauthorized grants/scopes. 👉Affected: oauthlib < 4.0.0 | Upgrade to 4.0.0

🚨High - Chrome V8 Memory Corruption RCE in Browser Sandbox (CVE-2026-118320) A memory corruption bug in Chromium's V8 JavaScript engine in Google Chrome < 156.0.8078.73 can be triggered by a crafted HTML page to corrupt JS execution state and potentially achieve arbitrary code execution within the browser sandbox. Non-V8 engines are not affected. 👉Affected: Google Chrome < 156.0.8078.73 | Upgrade to 156.0.8078.73

🚨High - Happy DOM Server-Side Request Forgery via Default External Resource Loading (CVE-2026-118660) Happy DOM enables external loading by default and will perform real network fetches for <iframe src> and <link rel="stylesheet" href> while parsing untrusted HTML server-side. Attacker-controlled HTML can trigger SSRF to internal/cloud metadata endpoints, potentially leaking sensitive responses/credentials. 👉Affected: happy-dom < 21.0.0 | Upgrade to 21.0.0

🚨Critical - Dell PowerProtect DDMC Auth Bypass via Spoofed Identity (CVE-2026-90717) Dell PowerProtect Data Domain Management Center (DDMC) contains an authentication bypass where spoofed identity data is accepted by the management interface, allowing a low-privileged remote attacker to bypass auth checks and elevate privileges. This can also cascade to compromise of managed Data Domain systems via DDMC-issued actions. 👉Affected: Dell PowerProtect Data Domain Management Center (multiple Feature & LTS release trains)

🚨Critical - Dell PowerProtect Data Domain Unauthenticated Root Command Execution (CVE-2026-86400) Dell PowerProtect Data Domain has an improper authentication flaw allowing remote unauthenticated access to reach privileged command execution paths and run arbitrary commands as root. Exploitation yields full system takeover. Configurations not exposing the management/service interface to untrusted networks are not impacted. 👉Affected: Dell PowerProtect Data Domain (multiple Feature Release and LTS ranges)

🚨Critical - NVIDIA NeMo Agent Toolkit Missing Auth to Critical Function Access (CVE-2026-65145) NVIDIA NeMo Agent Toolkit exposes a critical function without authentication, allowing unauthenticated attackers to invoke privileged agent operations remotely. Successful exploitation can lead to code execution, privilege escalation, data tampering, DoS, and information disclosure. 👉Affected: NVIDIA NeMo Agent Toolkit 1.0 - 1.8.0