Daily Digest
The most urgent issue is CVE-2019-1068 in Microsoft SQL Server, a CISA KEV-confirmed remote code execution vulnerability actively exploited in the wild with a due date of August 29, 2026, requiring immediate mitigation or patching to prevent potential compromise of healthcare database systems.
Summary: A remote code execution vulnerability in Microsoft SQL Server allows attackers to execute code in the context of the SQL Server service account. This issue is actively exploited in the wild and was added to CISA's Known Exploited Vulnerabilities (KEV) catalog on August 26, 2026, with a mandatory remediation deadline of August 29, 2026.
Affected Features / Interoperability: The vulnerability impacts the SQL Server Database Engine service. Exploitation could lead to unauthorized access to sensitive healthcare data, disruption of database operations, and potential lateral movement within the enterprise environment.
Source: https://nvd.nist.gov/vuln/detail/CVE-2019-1068
Actions:
Summary: A buffer overflow vulnerability in the MongoDB BI Connector ODBC Driver can lead to memory corruption and arbitrary code execution when an application supplies an unusually long catalog, schema, or object name. This requires an attacker to control or impersonate the database server.
Affected Features / Interoperability: The BI Connector ODBC Driver is used for SQL-based analytics on MongoDB data. Exploitation could compromise applications using the driver, including business intelligence tools and reporting systems integrated with MongoDB.
Source: https://github.com/mongodb/mongo-bi-connector-odbc-driver/releases/tag/v1.4.9
Actions:
Summary: A case-sensitivity bypass in Cloud Foundry UAA's identity zone authorization check allows authenticated attackers with limited privileges to escalate to system-level access when using MySQL as the backend. This affects UAA deployments with MySQL's default collation.
Affected Features / Interoperability: Impacts UAA deployments using MySQL. PostgreSQL and HSQLDB backends are unaffected. Exploitation could lead to forged JWTs and full compromise of Cloud Foundry environments relying on UAA for authentication.
Source: https://www.cloudfoundry.org/blog/cve-2026-59335-uaa-case-insensitive-check-bypass/
Actions:
Summary: A vulnerability in MongoDB Server's intra-cluster connection setup allows attackers with network access to manipulate authentication mechanisms, potentially exposing internal credentials. This could enable unauthorized access to the internal superuser account.
Affected Features / Interoperability: Affects MongoDB replica sets. Exploitation could compromise cluster integrity and allow attackers to access all databases within the deployment.
Source: https://jira.mongodb.org/browse/SERVER-130264
Actions:
Summary: A use-after-free vulnerability in MongoDB Server's timeseries bucket lifecycle allows authenticated users with write privileges to trigger server crashes or arbitrary code execution.
Affected Features / Interoperability: Impacts MongoDB's timeseries collections. Exploitation could disrupt time-sensitive healthcare data logging or IoT device data ingestion pipelines.
Source: https://jira.mongodb.org/browse/SERVER-129887
Actions:
Summary: A privilege escalation flaw allows users with limited database-scoped roles to modify protected system collections, potentially dropping critical system data.
Affected Features / Interoperability: Affects MongoDB's system collections (e.g., `system.users`, `system.roles`). Exploitation could disrupt authentication, authorization, or database availability.
Source: https://jira.mongodb.org/browse/SERVER-130481
Actions:
Summary: A metadata validation flaw in MongoDB's Queryable Encryption allows users with access to one encrypted collection to modify or delete data in other collections.
Affected Features / Interoperability: Impacts MongoDB's Queryable Encryption feature. Exploitation could compromise data confidentiality and integrity in encrypted healthcare records.
Source: https://jira.mongodb.org/browse/SERVER-130633
Actions:
Summary: This vulnerability is specific to MySQL backends in Cloud Foundry UAA and does not affect PostgreSQL deployments. The description is included for completeness but is not applicable to PostgreSQL systems.
Affected Features / Interoperability: Not applicable to PostgreSQL.
Source: https://www.cloudfoundry.org/blog/cve-2026-59335-uaa-case-insensitive-check-bypass/
Actions:
Summary: An authenticated SQL injection vulnerability in Directus when using PostgreSQL with PostGIS allows administrators to create malicious geometry fields that execute arbitrary SQL.
Affected Features / Interoperability: Affects Directus applications using PostgreSQL with PostGIS. Exploitation could compromise database integrity and access to healthcare data managed through Directus.
Source: https://github.com/directus/directus/releases#release-v12.1.0
Actions:
Summary: A flaw in MariaDB Connector/Node.js allows credentials to be sent before certificate validation completes, enabling man-in-the-middle attacks to capture passwords.
Affected Features / Interoperability: Affects Node.js applications using MariaDB Connector to connect to MySQL/MariaDB. Exploitation could compromise database credentials and access to healthcare data.
Source: https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.3.3
Actions:
Summary: A SQL injection vulnerability in WsgiDAV's MySQLBrowserProvider allows attackers to inject SQL via WebDAV requests if the provider is explicitly configured.
Affected Features / Interoperability: Affects WsgiDAV deployments using the non-default MySQLBrowserProvider. Exploitation could compromise data accessed through WebDAV shares.
Source: https://github.com/mar10/wsgidav/releases/tag/v4.3.5
Actions:
User Safety: safe