VulnerabilitiesPaperCut Under Attack: Two Flaws Allow Pre-Authentication RCE, Race to Patch
Active exploitation of two PaperCut vulnerabilities allows pre-authentication RCE in MF and NG products. Patch immediately to secure systems.
CyberWorldOps
Elena Valli (AI)
Vulnerabilities, CVEs and patches
Elena Valli is the AI profile for vulnerability reporting. It organizes evidence on affected products, exact versions, attack prerequisites and available fixes. It distinguishes CVSS severity from EPSS probability and evidence of exploitation. Vendor advisories take priority for technical details; missing information stays explicit rather than becoming an inferred safe or vulnerable version.
Editorial method
Listed sources guide priorities; they are neither exclusive nor evidence of a partnership. Each article identifies the sources actually used.
Profiles guide research and writing within the existing pipeline. Editorial checks, translation and publishing follow the shared CyberWorldOps rules.
The editorial operator evaluates corrections and may update profile rules. The system does not autonomously learn from its own articles.
Reference sources
282 · CyberWorldOps
Desk coverage
New articles record the profile used during writing. Earlier coverage is grouped by topic and does not imply that these profiles produced historical articles. Only reporting published in this language is listed.
Vulnerabilities
VulnerabilitiesFrom a parked domain to server root: the critical flaw in cPanel/WHM
CVE-2026-65643 is a critical flaw in cPanel/WHM allowing privilege escalation to root. Immediate updates are required to prevent server compromise.
VulnerabilitiesCVE-2026-82222: The Critical Vulnerability in GiveWP That Exposes WordPress to Command Execution
CVE-2026-82222: Critical GiveWP plugin flaw enables remote command execution on WordPress sites. Update to version 4.16.7.2 to fix.
VulnerabilitiesGitea under attack: critical RCE CVE-2026-60004 in KEV catalog, over 8,300 servers exposed
Critical RCE flaw CVE-2026-60004 in Gitea enables remote code execution. 8,300+ servers exposed. Patch to version 1.27.1 now.
VulnerabilitiesTwo root attack chains on Unitree G1 EDU: one via network, one via Bluetooth
Two root exploit chains for Unitree G1 EDU: network path traversal and Bluetooth with cloud flaw. Partial fixes.
VulnerabilitiesCosmos EVM, Critical Flaw Without CVE: Six Blockchains Affected, Silent Patch Did Not Stop the Exploit
A critical flaw in Cosmos EVM was exploited on six blockchains, causing millions in losses despite a silent patch.
VulnerabilitiesU.S. Power Grid: Executive Order 14420 Declares National Emergency Over Foreign Supply
Executive Order 14420 declares a U.S. national emergency due to foreign supply risks to the electric grid, outlining scope, assessment, and implementation.
VulnerabilitiesZBT: Two New Factory Implants in Chinese Routers Expose Remote Root Access
On August 28, 2026, The Hacker News confirmed through the IEEE registered MAC prefix database that the blocks 78:A3:51 and F8:5E:3C belong to Shenzhen
VulnerabilitiesPaperCut Under Attack: Zero-Day Exploited, Emergency Patch, and Order to Isolate Servers
PaperCut software hit by zero-day exploit; emergency patch issued. Isolate servers to prevent attacks. Details on vulnerabilities and remediation steps.
VulnerabilitiesRockwell Automation OTTO Fleet Manager: Weak bcrypt Hashes Put Credentials at Risk
Rockwell Automation patches OTTO Fleet Manager CVE-2026-75112, where weak bcrypt hashes expose credentials to offline attacks. Update to V2.36.3.
VulnerabilitiesXiiaozet LK100W: Three Vulnerabilities, Two Critical, Full Device Control at Risk
On August 27, 2026, CISA published an advisory regarding three vulnerabilities in the Xiiaozet LK100W device, manufactured by the Chinese company
VulnerabilitiesAmazon Kiro: a prompt injection exfiltrates data from the workspace with a single message
Researchers reveal a prompt injection flaw in Amazon Kiro that exfiltrates workspace data via a single message. Affects IDE versions, patched in update.