cybr.cx Daily Digest — August 20, 2026

Critical Vulnerabilities

⚠️ Actively exploited — CVE-2026-59310 | Broadcom VMware vCenter | CVSS: Not yet scored
A path traversal vulnerability in VMware vCenter allows any network-adjacent attacker to execute arbitrary code without authentication. This is as bad as it sounds — vCenter is the crown jewel of most enterprise VMware environments, and code execution here means lateral movement across every virtualised workload it manages. CISA's remediation deadline was August 21; if you haven't patched, you're already behind threat actors who are.

⚠️ Actively exploited — CVE-2026-33824 | Microsoft IKE Service Extensions | CVSS: Not yet scored
A double-free vulnerability in Microsoft's Internet Key Exchange service can be triggered remotely to achieve code execution — on the very component responsible for negotiating VPN and IPsec tunnels. Active exploitation against network infrastructure components is a red flag for targeted intrusion campaigns. Patch immediately; CISA's deadline was August 21.

⚠️ Actively exploited — CVE-2026-55040 | Microsoft SharePoint | CVSS: Not yet scored
Attackers are actively bypassing SharePoint authentication via a weak authentication flaw, gaining unauthorised network access to document stores and collaboration environments. SharePoint breaches are high-value for data exfiltration and internal phishing pivots. August 21 CISA deadline applies here too.

⚠️ Actively exploited — CVE-2026-65400 | Apple macOS Screen Sharing | CVSS: Not yet scored
An improper authentication vulnerability in macOS allows a network attacker to authenticate to Screen Sharing without valid credentials — essentially handing over remote desktop access to any reachable Mac. Particularly concerning in remote-work environments where Screen Sharing is enabled for IT support. Patch now; CISA deadline was August 21.

⚠️ Actively exploited — CVE-2026-64849 | MLflow | CVSS: Not yet scored
An SSRF flaw in MLflow lets attackers pivot to internal services and cloud instance metadata endpoints — a classic stepping stone to credential theft in AWS, GCP, or Azure environments. Given how many ML pipelines run with over-privileged IAM roles, the blast radius here can extend well beyond the MLflow instance itself. CISA remediation deadline is September 2.

⚠️ Actively exploited — CVE-2025-62593 | Anyscale Ray | CVSS: Not yet scored
A code injection vulnerability in the Ray distributed computing framework enables remote code execution, with exploitation reportedly triggered through Firefox and Safari — meaning developer workstations browsing to a malicious page while Ray is running locally are a viable attack surface. Ray clusters are common in AI/ML infrastructure, often with broad internal network access. August 20 is the CISA remediation deadline — today.

CVE-2026-60716 / CVE-2026-60722 | Oracle Identity Manager | CVSS: 8.8
Two closely related HIGH-severity vulnerabilities in Oracle Identity Manager's legacy UI allow low-privileged attackers with network access via T3 or IIOP protocols to fully take over the system. Oracle IAM is a sensitive target — full compromise means attacker control over user provisioning and access across connected enterprise systems. Apply Oracle's patches from the latest CPU without delay.

CVE-2026-60879 | PeopleSoft Enterprise PeopleTools (Configuration Manager) | CVSS: 8.8
A SQL-accessible vulnerability in PeopleSoft's Configuration Manager component allows low-privileged remote attackers to take over the PeopleTools platform. PeopleSoft deployments commonly hold HR, finance, and payroll data, making this a high-value target. Versions 8.61–8.63 are affected.

CVE-2026-60967 | PeopleSoft Enterprise PeopleTools (nVision) | CVSS: 8.8
This one is unauthenticated — a network attacker can compromise PeopleTools nVision over HTTP with only a single click required from a victim user. The social engineering bar here is low. Treat this as a high priority alongside CVE-2026-60879.

CVE-2026-60751 / CVE-2026-60767 | Oracle Siebel CRM (Marketing) | CVSS: 8.8
Two parallel takeover vulnerabilities in Oracle Siebel CRM's Marketing component affect all versions from 17.0 through 26.6 — an unusually wide version range. Low-privileged HTTP access is sufficient. Organisations still running Siebel, particularly in telco and financial services, should prioritise patching.

Headline News

Supply-Chain Attackers Are Coming for Your AI Stack

In March 2026, malicious versions of the LiteLLM Python library (1.82.7 and 1.82.8) were live on PyPI for approximately 40 minutes before removal — long enough to pose a credible threat to any automated build pipeline that pulled dependencies during that window. The attack was attributed to a threat actor tracked as TeamPCP, the same group that separately attempted to compromise Australia's National Disability Insurance Agency infrastructure before being detected and repelled. What's significant here isn't the duration of exposure but the targeting: LiteLLM is a core abstraction layer used by AI agent frameworks, meaning a successful poisoning could propagate backdoors across entire fleets of LLM-backed applications. This attack pattern — brief, surgical PyPI compromise aimed at AI/ML infrastructure rather than traditional software — represents a deliberate evolution in supply-chain tradecraft. Practitioners building or maintaining agent infrastructure should audit dependency pinning, verify hashes at install time, and treat any unpinned pip install in a CI pipeline as a liability.

Proactive SIM Cards Are an Underappreciated Attack Surface

Security researchers have demonstrated that so-called "proactive SIM" cards — a feature baked into the GSM standard since the modem era — can be weaponised to execute commands inside the host device, including smartphones, IoT endpoints, and EV charging stations. The attack leverages SIM Toolkit (STK) commands that the SIM card issues directly to the modem, a trust relationship the device has no mechanism to refuse. In practice, a malicious or compromised SIM can instruct the host device to send SMS messages, initiate calls, open URLs, or interact with local interfaces — all without user awareness. EV chargers are a particularly striking example: a SIM embedded for remote management can be used to manipulate charging sessions or pivot to connected grid infrastructure. Researchers were explicit that their published findings are a conservative lower bound on what's achievable. For security teams managing IoT fleets or vehicle infrastructure, this is a reminder that the SIM itself is a trusted execution environment that rarely features in threat models.

Schrödinger's Feed

MIT researchers have developed a new fabrication technique for air-stable, ultrathin superconductors — materials that maintain superconducting properties without requiring exotic vacuum environments. The practical implication is that quantum devices built on these materials could be far more scalable and manufacturable than current qubit architectures, which typically demand near-absolute-zero isolation from the environment. This is the kind of unglamorous materials-science work that determines whether quantum hardware stays in the lab or reaches the scale where it becomes relevant to cryptographic assumptions. Practitioners tracking the post-quantum migration timeline should note: advances in hardware manufacturability are what close the gap between theoretical quantum advantage and operational threat.

/dev/random

What started as someone registering a throwaway joke domain for a high-altitude balloon tracking project — SondeHub, which maps radiosonde weather balloon trajectories — apparently escalated into an unexpected entanglement with geopolitical infrastructure disputes. The domain in question ended up caught in the crossfire of conflicting DNS policies and regional internet governance decisions in ways its original owner spectacularly did not intend. It's a useful reminder that internet infrastructure has a nasty habit of making your whimsical side project load-bearing the moment someone with more lawyers than you notices it exists. Balloon tracking: surprisingly contentious.