JADEPUFFER: the first agentic ransomware
External Attack Surface Management: reducing your external exposure
Stay ahead of threats to your industry with real-time intelligence.
Your executives are targets. Monitor your leadership's digital exposure.
Threat News
3 min read
Top 10 CVEs of the last 15 days
safe-e Intelligence Team
Cyber Threat Intelligence
The ten most relevant vulnerabilities of the period, ranked by real exploitation risk rather than CVSS score alone.
CISA confirmed 24 new entries in the Known Exploited Vulnerabilities (KEV) catalog over the course of August 2026. Below are the ones that weigh most on the Brazilian technology estate, and what each one demands in response.
The additions that matter
CVE-2026-55040 — Microsoft SharePoint, weak authentication. Public proof of concept and active exploitation since 11 August.
CVE-2026-8452 — Citrix NetScaler ADC and Gateway, buffer overflow. Edge equipment, exposed by definition.
CVE-2026-59310 — Broadcom VMware vCenter, path traversal. Compromising vCenter means compromising the whole virtualization layer.
CVE-2026-20349 — Cisco Secure Firewall ASA and FTD, heap inspection.
CVE-2026-68820 — Windows Ancillary Function Driver for WinSock, use-after-free. A classic local privilege escalation path.
CVE-2026-33824 — Microsoft IKE Service Extensions, double free.
CVE-2026-18577 — N-able N-central, authentication bypass through an alternate path. Remote management tooling is a high-value target.
CVE-2026-72898 — Metabase, SQL injection. Common in data environments and frequently exposed.
CVE-2026-65400 — Apple macOS, improper authentication.
CVE-2026-81578 and CVE-2026-82078 — PaperCut, missing authentication for a critical function and unsafe reflection.
How to prioritize
A CVSS score on its own does not order a work queue. Three criteria settle most decisions: the asset is reachable from the internet, the flaw is in KEV, and a public exploit exists. When all three line up, patching stops being a maintenance window and becomes incident response.
Edge equipment — firewall, VPN, gateway, load balancer — deserves separate treatment. It is the first door and it rarely runs an EDR agent.
