SECURITY INTEL

Daily supply-chain security intelligence — exclusive CSSA early warnings, CVE deep-dives and npm/PyPI poisoning alerts — powered by Sectrend's proprietary database of 270k+ advisories.

Monthly Reports

Earlier reports 4

Report August 2026 CleanSource Community Monthly Security Intelligence Digest This month’s intelligence mainly presents four risk themes: trust-boundary issues in the MCP / agent toolchain, fail-open risk when security controls hit exception paths, SSRF from server-side URL fetches, and scoped packages, dependency confusion, and on-chain C2 (EtherHiding) in npm supply-chain poisoning. 294 Advisories 82 Critical (CSSA+CVE) 21 Publish days 212 Poisoning samples Read the report → Report July 2026 CleanSource Community Monthly Security Intelligence Digest In July 2026 (1–30 July), the Sectrend CleanSource community monitored and published 197 security advisories, spanning AI agents and developer tooling, web and API services, databases and data infrastructure, browsers and endpoint software, IoT, and the open source supply chain. 197 Advisories 27 CSSA exclusive 37 CVE highlights 133 Poisoning alerts Read the report → Report June 2026 CleanSource SCA Community Security Intelligence Monthly Built on Sectrend's CSSA vulnerability intelligence and open-source registry poisoning monitoring, this report consolidates 138 security advisories from June 2026 across AI applications, web security, enterprise software, developer tools, cloud services, IoT devices and OS kernels — a full-picture view of supply chain risk with actionable guidance. 138 Advisories 32 CSSA Exclusives 35 Curated CVEs 71 Poisoning Events Read the report → Report May 2026 CleanSource SCA Community Security Intelligence Monthly Built on Sectrend's CSSA vulnerability intelligence and open-source registry poisoning monitoring, this report consolidates 165 advisories from Apr 30 – May 31, 2026 across AI applications, web security, developer tools, infrastructure and cloud — a full-picture view of supply chain risk with actionable guidance. 165 Advisories 29 CSSA Exclusives 29 Curated CVEs 107 Poisoning Events Read the report →

Daily briefings

October 2026 This month 8 issues CSSA 14 CVE 18 Poisoning 36

15 CSSA 3 CVE 2 Poisoning 0 10.0 Critical Hard-coded JWT secret in agentscope-java DataAgent lets attackers forge admin tokens and gain highest system privileges → 14 CSSA 2 CVE 2 Poisoning 8 10.0 Critical CVE-2026-65162 Remote code execution in NVIDIA AIStore Kubernetes PodSpec initialization → 13 CSSA 2 CVE 2 Poisoning 2 10.0 Critical Permission parsing logic flaw in the RocketMQ ACL migration component leads to unauthorized access risk → 12 CSSA 2 CVE 2 Poisoning 0 10.0 Critical CVE-2026-108576 Command injection in TOZED X300 IPPingDiagnostics leads to remote code execution → 10–11 CSSA 2 CVE 2 Poisoning 0 10.0 Critical Heap buffer overflow in php-src under specific OPcache optimization settings poses remote code execution risk → 09 CSSA 1 CVE 2 Poisoning 7 9.9 Critical CVE-2026-106126 Command injection in Tenable Identity Exposure allows remote code execution with SYSTEM privileges → 08 CSSA 0 CVE 3 Poisoning 4 10.0 Critical CVE-2026-76482 Improper input validation in Cisco License On-Prem allows remote code execution → 01–07 CSSA 2 CVE 3 Poisoning 15 10.0 Critical Relay workflow dispatch handles untrusted code references, compromising confidentiality and integrity →

September 2026 19 issues CSSA 30 CVE 36 Poisoning 100

29 CSSA 0 CVE 2 Poisoning 9 10.0 Critical CVE-2026-73640 Dayforce Payroll password recovery time-based blind SQL injection vulnerability leads to unauthorized data disclosure → 28 CSSA 0 CVE 2 Poisoning 10 10.0 Critical CVE-2026-88771 Citrix NetScaler ADC/Gateway improper input validation vulnerability leading to remote command execution → 23 CSSA 1 CVE 2 Poisoning 10 9.8 Critical CVE-2026-93088 SGLang DiffusionServer unauthenticated arbitrary code execution vulnerability leading to remote code execution → 21 CSSA 1 CVE 1 Poisoning 0 10.0 Critical CVE-2026-88856 OrdaSoft Joomla Gallery remote code execution vulnerability leading to full server control → 20 CSSA 1 CVE 2 Poisoning 0 9.9 Critical CVE-2026-93742 Totolink A3002MU formWsc command injection leading to remote code execution → 19 CSSA 2 CVE 0 Poisoning 0 9.8 Critical agno intelligent-agent orchestration layer lacks dynamic code-execution controls by default, allowing arbitrary code execution → 18 CSSA 2 CVE 0 Poisoning 0 9.8 Critical agno intelligent-agent orchestration layer lacks dynamic code-execution controls by default, allowing arbitrary code execution → 17 CSSA 2 CVE 2 Poisoning 3 10.0 Critical Corsair MCP component lacks code-execution sandbox isolation, allowing remote arbitrary code execution and host-environment disclosure → 16 CSSA 2 CVE 2 Poisoning 3 10.0 Critical happy component uses a hard-coded key leading to remote identity forgery and account takeover → 15 CSSA 2 CVE 2 Poisoning 4 10.0 Critical Aim tracking server permanently deletes experiment data at arbitrary paths due to missing authorization checks → 14 CSSA 2 CVE 2 Poisoning 0 10.0 Critical kohya_ss Kontext manual annotation module allows arbitrary file deletion via path traversal → 11–13 CSSA 2 CVE 2 Poisoning 2 10.0 Critical CVE-2026-13745 Gemini CLI .env overwrite of GEMINI_CLI_HOME leading to arbitrary code execution → 10 CSSA 1 CVE 2 Poisoning 7 10.0 Critical 9router Search Proxy SSRF Protection Bypass Leading to Internal Network Probing and Authentication Failure → 09 CSSA 2 CVE 2 Poisoning 9 10.0 Critical R2R Retrieval Service SQL Injection via Search Endpoint Leading to Unauthorized Data Disclosure → 08 CSSA 2 CVE 2 Poisoning 8 10.0 Critical hermes-agent Approval Mechanism Failure Allows Path Rewrite Bypass of Denylist to Obtain Root Privileges → 04–07 CSSA 2 CVE 5 Poisoning 13 10.0 Critical KiroCrew incorrect authorization allowing attackers to achieve remote code execution via forged titles → 03 CSSA 2 CVE 2 Poisoning 10 10.0 Critical openclaw multi-agent platform authorization check failure allowing attackers to perform unauthorized high-risk operations and lose control of system privileges → 02 CSSA 2 CVE 2 Poisoning 2 10.0 Critical Drogon ORM component SQL injection leading to WHERE clause bypass and data disclosure → 01 CSSA 2 CVE 2 Poisoning 10 10.0 Critical AgentScope Bash tool permission bypass from incomplete command-separator validation damaging system integrity and availability →

August 2026 21 issues CSSA 36 CVE 46 Poisoning 212

28–31 CSSA 4 CVE 5 Poisoning 37 10.0 Critical lmdeploy P2P connector remote code execution via deserialization of untrusted data → 27 CSSA 2 CVE 2 Poisoning 9 10.0 Critical Zephyr RTOS USB Bluetooth HCI module out-of-bounds write due to missing bounds checks leading to system crash or memory corruption → 26 CSSA 2 CVE 2 Poisoning 10 10.0 Critical OpenSSL QUIC listener object lifecycle management defect leading to denial of service → 25 CSSA 2 CVE 3 Poisoning 10 10.0 Critical hermes-agent gateway authorization defect and code injection leading to permission bypass and remote code execution → 24 CSSA 2 CVE 3 Poisoning 8 10.0 Critical sub2api proxy trusts forged HTTP headers, rendering IP access control and rate limiting ineffective → 21–23 CSSA 2 CVE 3 Poisoning 20 10.0 Critical TencentDB-Agent-Memory SSRF validation bypass leading to internal network resource disclosure and loss of system integrity → 20 CSSA 2 CVE 2 Poisoning 5 10.0 Critical hermes-agent incorrect interaction mode setting disables the security approval mechanism, letting the model bypass restrictions and execute dangerous commands → 19 CSSA 2 CVE 2 Poisoning 9 10.0 Critical CubeSandbox CubeOps weak credential configuration allows forged administrator tokens leading to authentication bypass → 18 CSSA 2 CVE 2 Poisoning 8 9.8 Critical CVE-2026-74901 openssl_encrypt Authentication Bypass Leading to Loss of Data Integrity → 17 CSSA 1 CVE 1 Poisoning 10 10.0 Critical ToolHive token delegation bypasses authorization checks enabling privilege-exceeding access and loss of permission integrity → 14–16 CSSA 1 CVE 2 Poisoning 17 9.8 Critical CVE-2026-61967 miniorange otp verification Unauthenticated Privilege Escalation Leading to Remote Code Execution → 13 CSSA 2 CVE 2 Poisoning 5 10.0 Critical modelcontextprotocol prompt injection through unfiltered instructions leading to hijacking of the model context → 12 CSSA 1 CVE 2 Poisoning 10 10.0 Critical Hermes Agent forcibly disables the sandbox in container deployments leading to privilege escalation and data leakage → 11 CSSA 2 CVE 2 Poisoning 9 10.0 Critical CVE-2026-72899 Metabase Unauthenticated SQL Injection Leading to Remote Code Execution → 10 CSSA 2 CVE 1 Poisoning 0 9.8 Critical QuickJS out-of-bounds write triggered by malformed bytecode leading to heap corruption and service disruption → 07–09 CSSA 1 CVE 2 Poisoning 13 10.0 Critical hermes-agent prompt injection forging privileged instructions leading to loss of control over model behavior → 06 CSSA 1 CVE 1 Poisoning 6 10.0 Critical OneUptime SAML component XML instruction injection leading to identity forgery and unauthorized access → 05 CSSA 2 CVE 2 Poisoning 8 10.0 Critical TencentDB-Agent-Memory unauthorized access and argument injection leading to privilege abuse and internal network probing → 04 CSSA 1 CVE 3 Poisoning 3 10.0 Critical browser-use code injection through the Model Context Protocol leading to host privilege takeover → 03 CSSA 1 CVE 1 Poisoning 5 9.8 Critical Redis blocking list traversal triggers heap use-after-free leading to remote code execution → 31–02 CSSA 1 CVE 3 Poisoning 10 10.0 Critical Twisted HTTP request smuggling leading to access control bypass and cache poisoning →

July 2026 22 issues CSSA 26 CVE 39 Poisoning 133

30 CSSA 1 CVE 2 Poisoning 10 10.0 Critical Claude for Chrome extension session non-revocation flaw leading to unauthorized access and quota exhaustion → 29 CSSA 1 CVE 2 Poisoning 8 10.0 Critical crewAI framework deserialization of untrusted data enabling attackers to achieve remote code execution → 28 CSSA 2 CVE 2 Poisoning 10 10.0 Critical HummingBot framework malicious data injection enabling remote code execution and privilege takeover → 27 CSSA 2 CVE 1 Poisoning 0 10.0 Critical zeroclaw brute-forced due to missing rate-limit validation leading to node compromise → 24–26 CSSA 2 CVE 2 Poisoning 2 10.0 Critical DeepSeek-Reasonix command substitution bypasses permission checks enabling arbitrary execution and system compromise → 23 CSSA 1 CVE 1 Poisoning 1 10.0 Critical LocalAI service code injection bypassing sandbox protection leading to remote command execution → 22 CSSA 2 CVE 2 Poisoning 0 10.0 Critical DB-GPT voice component command injection triggered by malicious input leading to loss of host control → 21–21 CSSA 0 CVE 2 Poisoning 9 9.8 Critical CVE-2026-63767 ktransformers Unauthenticated Pickle Deserialization Vulnerability Leading to Remote Code Execution → 20–20 CSSA 0 CVE 1 Poisoning 0 10.0 Critical CVE-2026-44359 Meshtastic CI Workflow Fork Code Execution Vulnerability Leading to Repository Takeover → 17–19 CSSA 2 CVE 4 Poisoning 11 10.0 Critical QwenPaw Console Malicious Plugin Upload Leading to Remote Code Execution → 16 CSSA 1 CVE 2 Poisoning 3 10.0 Critical QwenPaw Console Malicious Plugin Upload Leading to Remote Code Execution → 15 CSSA 1 CVE 2 Poisoning 6 10.0 Critical Remote Code Execution via Deserialization of Unvalidated Data in the sglang Framework → 14 CSSA 1 CVE 2 Poisoning 9 10.0 Critical Envoy Gateway Route Hijacking and Directory Traversal via Unescaped Path Variable Injection → 13 CSSA 1 CVE 1 Poisoning 10 10.0 Critical browser-use domain restriction bypass via non-standard protocols leading to internal state disclosure and unauthorized navigation → 10–12 CSSA 1 CVE 2 Poisoning 17 10.0 Critical elizaOS Authentication Mechanism Flaws Enable Remote Unauthorized Access to Sensitive Endpoints Leading to Data Exposure → 09 CSSA 2 CVE 1 Poisoning 9 10.0 Critical Kotaemon deserialization flaw leading to unauthenticated remote code execution and system compromise → 08 CSSA 1 CVE 2 Poisoning 2 10.0 Critical arthas tunnel service missing endpoint authentication exploited to execute OGNL expressions and take control of the JVM → 07 CSSA 1 CVE 2 Poisoning 1 10.0 Critical CVE-2026-57572 Crawl4AI Docker API Argument Injection Leading to Arbitrary Command Execution → 06 CSSA 1 CVE 0 Poisoning 3 9.1 Critical AndroidAsync parsing malicious XML external entities leading to sensitive data disclosure and service disruption → 03–05 CSSA 1 CVE 2 Poisoning 11 9.9 Critical CVE-2026-57100 Microsoft Entra Provisioning Service Server-Side Request Forgery Leading to Privilege Escalation → 02 CSSA 1 CVE 2 Poisoning 8 10.0 Critical Marzban panel missing authorization checks leading to unauthorized operations and privilege-exceeding data disclosure → 01 CSSA 1 CVE 2 Poisoning 3 9.8 Critical CVE-2026-58138 Orkes Conductor Unauthenticated Remote Code Execution Leading to Arbitrary System Command Execution →

For continuous enterprise monitoring, see CleanSource SCA.