Rosetta Daily · Sep 7, 2026
The day's most severe entries cluster on one class of device: the machine that manages the other machines. N-able N-central and MikroTik routers are both under attack, and NEC UNIVERGE and Advantech WISE-6610 gateways disclosed alongside them — four internet-reachable network and management devices, two of them already being exploited.
Actively exploited
[Added detail] N-able N-central: emergency hotfix released while attacks continue (CVE-2026-86218, CVSS 10)
N-able has shipped an emergency hotfix for the pre-auth remote code execution flaw in N-central, its remote monitoring and management platform; the fix lands in 2026.3.1.14. An RMM platform holds the management channel to downstream customer endpoints, so the blast radius of one exploitation is not the server itself but every asset that instance manages. The CVE is not in the CISA KEV catalog.
Sources: Bleeping Computer · NVD
MikroTik routers: internet-exposed SSH taken over without authentication
CERT Polska issued an attack warning on September 5: attackers are reaching MikroTik routers through their internet-facing SSH service and gaining full administrative control with no authentication. Successful attacks date to at least September 2. The warning does not name the flaw being exploited, and The Hacker News found no victim count when it reviewed the warning on September 6. Until the gap is identified, the actionable step is pulling the SSH management plane off the public internet.
Sources: The Hacker News
Critical vulnerabilities
NEC UNIVERGE IX-R/IX-V: WebGUI authentication bypass yields arbitrary CLI commands (CVE-2026-16876, CVSS 9.3)
Tampering with WebGUI messages and sending them to the device over the internet bypasses authentication and runs arbitrary CLI commands as the device. These enterprise routers typically terminate both the perimeter and VPN traffic, which raises the cost of leaving the management interface reachable.
Sources: NVD
Advantech WISE-6610 LoRaWAN gateways: two command injections (CVE-2026-79697, CVE-2026-79698, both CVSS 8.6)
nodered_lib_apply in the Node-RED Library component and basicstation_apply in the Basic Station certificate-deletion handler both mishandle the act argument, each leading to command injection. Thirteen models running 1.2.1_20251110 are affected, covering the full WISE-6610 and WISE-6610-EL lines plus three WISE-6610P variants.
Tenda HG10: two remotely reachable flaws, exploit code public for both (CVE-2026-86165, CVSS 8.9; CVE-2026-86167, CVSS 8.6)
The Keywd/urlFQDN arguments to /boaform/admin/formURL overflow a buffer; the fmgpon_loid argument to /boaform/admin/formgponConf allows OS command injection. Public exploit code is available for both, against firmware 300001138.
PostgreSQL Anonymizer: the masking machinery is itself the escalation path (CVE-2026-19633, CVSS 8.8)
A masked, unprivileged user can craft operators, domain casts or view subqueries carrying untrusted expressions; when the extension's masking mechanisms evaluate those objects, the code inside runs with elevated privileges. Two more shipped with it: anon.import_database_rules() and anon.import_roles_rules() take object names from a malicious JSON document into a SQL injection that executes with superuser rights once a superuser calls them (CVE-2026-19634), and anon.anonymize_database_parallel() lets a table owner run code as superuser (CVE-2026-83534). The first two are fixed in 3.1.4, the third in 3.2.0. The reason to install this extension is to let low-privilege accounts touch production data safely; these three invert that premise.
h3: four advisories, one of them an incomplete previous fix (worst CVE-2026-86250, CVSS 8.7)
h3 is the HTTP layer under Nuxt and Nitro. setChunkedCookie() and deleteChunkedCookie() do not validate the chunk count parsed from a cookie, so an extremely large count triggers an O(n²) cleanup loop that hangs the process (CVE-2026-86250). serveStatic() carries two path traversals: on Node.js deployments event.url.pathname is not normalized, so %2e%2e survives decodeURI() as ../ (CVE-2026-86253, CVSS 8.2); the other is a double decode, where %252e%252e resolves to %2e%2e and passes resolveDotSegments() because that function only looks for literal dots (CVE-2026-86251, CVSS 8.2). The fourth leaves carriage returns unsanitized in EventStream data, allowing SSE event injection — the advisory states it bypasses the earlier fix, which handled only newlines (CVE-2026-86252).
OpenMAIC: non-production builds skip SSRF validation, exposing cloud credentials (CVE-2026-86259, CVSS 9)
Versions before 1.0.1 skip server-side request forgery validation in non-production builds, letting an unauthenticated attacker supply an arbitrary provider URL through the x-base-url header or the baseUrl parameter to reach cloud instance metadata services and read the credentials there. A build flag deciding whether a security control is active is the recurring shape of this class of bug.
Sources: NVD
SureCart: a subscriber-level account can take over an administrator (CVE-2026-18480, CVSS 8.8)
Before 4.6.3, a customer update does not verify that the account being changed is the account the permission check authorised. A subscriber-level user can therefore change any user's email address, an administrator's included, and complete the takeover through a password reset.
Sources: NVD
nbviewer: string-prefix comparison standing in for path validation (CVE-2026-86258, CVSS 8.2)
In versions through 1.0.1, LocalFileHandler.can_show() compares string prefixes instead of validating the resolved path. Any request path that textually begins with the configured root reaches sibling directories outside it, disclosing notebooks and the credentials in them.
Sources: NVD
AI security
Bifrost: unauthenticated plugin loading from an HTTP URL in the default configuration (CVE-2026-86242, CVSS 8.1)
In the HTTP transport before 2.0.0, an unauthenticated POST /api/plugins is accepted whenever management authentication is disabled — governance.auth_config.is_enabled=false, which is the default — and the plugin path may be an HTTP URL. The shared-object loader treats an http-prefixed path as a download, writes the response body to a temporary .so, and hands it to Go's plugin.Open, loading remote bytes straight into the process. Authentication off by default and a loader that accepts remote paths are each just a configuration choice; together they are unauthenticated remote code execution.
Sources: NVD