14th September – Threat Intelligence Report
Linked advisories
- CVE-2026-67276Mikrotik RouterOS: unzureichende Prüfung kryptografischer Signaturen
- CVE-2026-67276RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulu…
- CVE-2026-67276Mikrotik RouterOS: unzureichende Prüfung kryptografischer Signaturen
- CVE-2026-67276MikroTik RouterOS: Mehrere Schwachstellen
- CVE-2026-72898Metabase Metabase — Metabase SQL Injection Vulnerability
- CVE-2026-72898metabase: SQL-Injection
- CVE-2026-72898Metabase: Schwachstelle ermöglicht SQL-Injection und Privilegieneskalation
- CVE-2026-72898Metabase Metabase: Metabase SQL Injection Vulnerability
- CVE-2026-81963Microsoft Windows — Microsoft Windows Link Following Vulnerability
- CVE-2026-81963Windows Update Stack Elevation of Privilege Vulnerability
- CVE-2026-81963microsoft windows_11_23h2: unzureichende Zugriffskontrolle
- CVE-2026-81963Microsoft Windows: Mehrere Schwachstellen
- CVE-2026-81963Microsoft Windows: Microsoft Windows Link Following Vulnerability
- CVE-2026-85046Google Chromium V8 — Google Chromium V8 Type Confusion Vulnerability
- CVE-2026-85046Google Chrome: Type-Confusion
- CVE-2026-85046Google Chrome / Microsoft Edge: Mehrere Schwachstellen
- CVE-2026-85046Debian chromium: security update
- CVE-2026-85046Chromium: CVE-2026-85046 Type confusion in V8
- CVE-2026-85046Chromium: Monthly Vulnerability Update (October 2026)
- CVE-2026-85046Debian LTS chromium: security update
- CVE-2026-85046Chrome zero-day CVE-2026-85046 (V8 type confusion)
- CVE-2026-85706GitLab: Mehrere Schwachstellen
- CVE-2026-85706GitLab Community Edition and Enterprise Edition — GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
- CVE-2026-85706GitLab: Pfadüberschreitung (Path Traversal)
- CVE-2026-85706Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
- CVE-2026-85706GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
- CVE-2026-85706Active Exploitation of Critical Vulnerability in GitLab
- CVE-2026-85880Microsoft Windows — Microsoft Windows Heap-Based Buffer Overflow Vulnerability
- CVE-2026-85880Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- CVE-2026-85880Microsoft Windows: Heap-basierter Pufferüberlauf
- CVE-2026-86060MikroTik RouterOS — MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
- CVE-2026-86060RouterOS contains an argument-handling flaw in the SSH login
- CVE-2026-86060Mikrotik RouterOS: Argument-Injection
- CVE-2026-86060MikroTik RouterOS: MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
- CVE-2026-72898Active Exploitation of Metabase Vulnerability
Affected vendors and products
- Debian Chromium
- GitLab GitLab
- Google Google Chrome
- Google Google V8
- Metabase Metabase
- Microsoft Microsoft Windows 10 1607
- Microsoft Microsoft Windows 10 1809
- Microsoft Microsoft Windows 10 21H2
- Microsoft Microsoft Windows 10 22h2
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21h2
More on September
Other advisories
- HighCVE-2026-28602Android Patchday September 2026: Mehrere Schwachstellen
- CriticalCVE-2026-20234Cisco Identity Services Engine Hardening Release: September 2026
- HighCVE-2026-20334Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026
- CriticalCVE-2026-20325Cisco Nexus Dashboard Software Security Hardening Release: September 2026
- CriticalCVE-2026-0183Pixel Patchday September 2026: Mehrere Schwachstellen
- CriticalCVE-2026-20353Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026
- CriticalCVE-2026-84348Chromium: Monthly Vulnerability Update (September 2026)
- HighCVE-2026-72959September 2026 Monthly Patch
Other news entries
- Email threat landscape: Q3 2026 trends and insightsNewsMicrosoft Threat Intelligence
- CrowdStrike’s AI SOC vision evolves as agentic uncertainty adds new twistNewsCSO Online
- Microsoft finally fixes VPN issues caused by September updatesNewsBleepingComputer
- Binance says a fake job interview started its $6.3B hack; it has rebuilt the affected wallet system and will cover all lossesBreachpwn.watch
- (g+) Cyber Resilience Act: Die Meldepflicht mit den eingebauten LückenNewsGolem.de — Security
- There's only so much code: the rise in vulnerability numbersNewsCisco Talos
- Microsoft fixes game, app crashes caused by recent Windows updateNewsBleepingComputer
- MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native AddonNewsThe Hacker News
Source: https://research.checkpoint.com/2026/14th-september-threat-intelligence-report/
ID