IT security 2026-08-28

Level Critical — 81/100 — 2026-08-28

Critical day: 10 stories ranked, 3 of the top 10 reported as actively exploited, 3 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: ownCloud Improper Authentication Vulnerability (87/100).

  1. ownCloud Improper Authentication Vulnerability — 87/100 (CVE-2023-49105)
  2. Linux Kernel Unspecified Vulnerability — 62/100 (CVE-2026-53362)
  3. JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability — 60/100 (CVE-2026-66384)
  4. PaperCut NG/MF Unsafe Reflection Vulnerability — 36/100 (CVE-2026-82078)
  5. vmware spring integration: SerializingHttpMessageConverter deserializes the body of incoming HTTP requests with a raw java.io.ObjectInpu… — 34/100 (CVE-2026-47864)
  6. PaperCut NG/MF Missing Authentication for Critical Function Vulnerability — 34/100 (CVE-2026-81578)
  7. broadcom spring batch: Applications that deserialize execution contexts with Jackson2ExecutionContextStringSerializer are vulnerable… — 29/100 (CVE-2026-47875)
  8. CVE-2026-75871 — GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gat… — 28/100 (CVE-2026-75871)
  9. vmware spring security: Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administra… — 27/100 (CVE-2026-59270)
  10. dangerblack n8n-node-sqlite3: n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. — 20/100 (CVE-2026-54687)