An operator compromised more than 14,000 Dahua IP cameras across Russia, Ukraine, Mexico, and Vietnam in 35 days, then left his working directory open on the web. Hunt.io rebuilt the whole campaign from his recovered files, mapping three parallel exploit paths and a backdoor account now sleeping on nearly 1,900 cameras, one that survives password changes and most factory resets. Offline recovery codes also grant cloud-level admin by serial number alone, a design that looks built for handing access to a buyer.
WABT's wasm2c, which compiles untrusted WebAssembly into C you link into your own binary, never checks the return of a single calloc in its table allocator. A guest can make that allocation fail, turning every table index into an absolute host address and writing files or running shell on the machine. Firefox and a long tail of no-JIT sandbox software ship this toolchain, and the bug goes back to 2018. The memory allocator nearby got a guard last year; the table allocator never did.
NASA/JPL's open-source AIT-GUI console listens on every network interface with no password, so anyone reaching port 8080 can POST arbitrary spacecraft commands, run scripts, and traverse files. The 9.4-CVSS chain (GHSA-p9r8-2q67-fp86) hits versions through 2.5.1, and because browsers treat these requests as CORS-simple, a cross-origin POST can drive the bus even in firewalled setups. Fixed in 2.5.2, which binds the listener to localhost and rejects cross-origin calls.
An audit of seven AI orchestration platforms, NocoBase, Flowise, Langflow, Dify, Activepieces, Kestra and Airflow, turned up 14 critical and high-severity findings rooted in one assumption: anyone who can touch a workflow is trusted to run code. The worst chain needs no account, a prompt injection triggers code execution and data exfiltration before the attacker ever logs in. Several vendors closed reports as working as designed, since executing code is the product, even when that product ships internet-reachable.
A researcher shows the widely used CanHub Image-Cropper ships android:exported="true" on its activity and root-scoped FileProvider paths as manifest defaults, so every app importing it inherits the attack surface without writing a line of vulnerable code. A rogue app can launch the activity and trigger arbitrary file read/write with no signature or caller check. The writeup walks the full chain and the fix: override the manifest at merge time.
CVE-2026-68820, a use-after-free in Windows's afd.sys kernel driver, was already under active attack when Microsoft's fix shipped on August 11, and CISA added it to KEV the same day. Under BOD 26-04, internet-facing systems get just 3 days to remediate; internal fleets have 14. Because the update swaps a kernel driver, installing the patch alone doesn't complete the job: endpoints must reboot before CISA counts remediation done.