Daily brief, Tuesday, August 18, 2026

Breaking

Nothing spreading fast in technology large companies run.

Newly exploited in the wild

• 9.8CVE-2026-65400 Apple macOSCISA KEVAn attacker gains unauthorized access to Screen Sharing on Apple macOS without authentication.
• 9.8CVE-2026-59310 Broadcom VMware vCenterCISA KEVAn attacker gains remote code execution and unauthorized access to sensitive data on Broadcom VMware vCenter without authentication.
• 9.8CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service ExtensionsCISA KEVDetectionAn attacker gains remote code execution on Microsoft Internet Key Exchange (IKE) Service Extensions without authentication.
• 9.1CVE-2026-55040 Microsoft SharePointCISA KEVDetectionAn attacker gains unauthorized access to sensitive information and potentially executes arbitrary code on Microsoft SharePoint.

New public exploit code

No new Nuclei templates, Metasploit modules, Exploit-DB or VulnCheck XDB entries.

New critical CVEs

• 9.1CVE-2026-55040 Microsoft SharePointKEVexploit codeDetectionAn attacker gains unauthorized access to sensitive information and potentially executes arbitrary code on Microsoft SharePoint.
• 9.8CVE-2026-59310 Broadcom VMware vCenterKEVexploit codeAn attacker gains remote code execution and unauthorized access to sensitive data on Broadcom VMware vCenter without authentication.
• 9.8CVE-2026-65400 Apple macOSKEVexploit codeAn attacker gains unauthorized access to Screen Sharing on Apple macOS without authentication.
• 9.8CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service ExtensionsKEVexploit codeDetectionAn attacker gains remote code execution on Microsoft Internet Key Exchange (IKE) Service Extensions without authentication.
• 9.1CVE-2026-18963 Red Hat Red Hat build of Keycloak 26.4exploit codeDetectionAffected: Red Hat Build of Keycloak, specifically the keycloak-services component. Attacker gains: Ability to force password reset for any user without authentication. Recommended action: Immediately update to the latest version of Red Hat Build of Keycloak th
• 9.8CVE-2026-74987 Mozilla firefoxInternally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited.
• 9.8CVE-2026-74990 Mozilla firefoxInternally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could h
• 9.8CVE-2026-74988 Mozilla firefoxInternally found bugs present in Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability w
• 9.8CVE-2026-74989 Mozilla firefoxInternally found bugs present in Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 15
• 10.0CVE-2026-75874 Mozilla firefoxSandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 140.15, and Thunderbird 153.2.
• 10.0CVE-2026-61241 Oracle internet directory+2 more CVEs in the same releaseVulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network a
• 10.0CVE-2026-70880 Oracle hyperion data relationship management+6 more CVEs in the same releaseVulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with networ
• 10.0CVE-2026-70921 Oracle hyperion financial management+3 more CVEs in the same releaseVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to
• 9.9CVE-2026-60702 Oracle weblogic server+3 more CVEs in the same releaseVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with
• 9.9CVE-2026-60720 Oracle identity manager+3 more CVEs in the same releaseVulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access
• 9.9CVE-2026-60730 Oracle webcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via
• 9.9CVE-2026-60916 Oracle webcenter enterprise capture+6 more CVEs in the same releaseVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with n
• 9.9CVE-2026-60990 Oracle identity manager connector+1 more CVEs in the same releaseVulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network acces
• 9.9CVE-2026-61003 Oracle managed file transferVulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with netw
• 9.9CVE-2026-61021 Oracle webcenter sites+4 more CVEs in the same releaseVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces

178 more critical CVEs in this window: see them on the dashboard.

Ransomware

No leak-site posts collected.

New data breaches

No new breaches published.