Daily Digest
The most urgent item this period is CVE-2026-9586, a CISA KEV-confirmed SQL injection in Sangoma Switchvox with an arbitrary code execution vector and a federal due date of September 5, 2026. While this targets a third-party application (not PostgreSQL directly), any homelab or enterprise environment where Switchvox's backend PostgreSQL database is exposed to untrusted input faces confirmed, active exploitation. Treat this as an emergency patch cycle.
Summary: A flaw in MySQL Cluster's NDB Operator allows an unauthenticated remote attacker over the network to crash the cluster or corrupt data via unauthorized inserts, updates, or deletes. No authentication is required, and the attack surface is exposed via standard cluster protocols.
Affected Features / Interoperability: MySQL Cluster component (NDB Operator) in versions 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. Impacts cluster availability and data integrity; affects replication and failover operations.
Source: https://www.oracle.com/security-alerts/cspuaug2026.html
Actions:
Summary: A vulnerability in MySQL Connector/ODBC version 26.7.0 allows an unauthenticated attacker with local access to the host to crash the connector and read a subset of accessible data.
Affected Features / Interoperability: MySQL Connector/ODBC component; affects applications using ODBC connections to MySQL databases. Data exposure is limited to data accessible through the connector's connection context.
Source: https://www.oracle.com/security-alerts/cspuaug2026.html
Actions:
Summary: An authenticated Grafana user with query permissions can inject a timeGroup macro via a WHERE clause to bypass a prior fix, triggering uncontrolled memory consumption that crashes the Grafana server. This is a denial-of-service against the Grafana instance, not the MySQL server itself, but it impacts dashboards and alerting that depend on MySQL data sources.
Affected Features / Interoperability: Grafana's MySQL (and PostgreSQL/MSSQL) data source query processing. Affects visualization and monitoring workflows; does not directly corrupt database data but disrupts availability of Grafana-linked dashboards.
Source: https://grafana.com/security/security-advisories/cve-2026-19475
Actions:
Summary: A flaw in MySQL Connector/ODBC 26.7.0 allows a low-privileged network attacker to crash the connector, causing denial of service for applications dependent on ODBC connectivity.
Affected Features / Interoperability: MySQL Connector/ODBC; impacts applications using ODBC for MySQL connections. Does not grant data access but disrupts connectivity.
Source: https://www.oracle.com/security-alerts/cspuaug2026.html
Actions:
Summary: This requires human interaction (e.g., tricking a user into interacting with a malicious page) on the host running MySQL Connector/ODBC 26.7.0 to trigger a denial of service. The barrier is higher than the other MySQL connector issues.
Affected Features / Interoperability: MySQL Connector/ODBC; primarily a concern for shared-user workstations running ODBC-based tools.
Source: https://www.oracle.com/security-alerts/cspuaug2026.html
Actions:
---
Summary: An unauthenticated remote SQL injection in Sangoma Switchvox SMB Edition 8.3 allows attackers to execute arbitrary SQL statements on the backend PostgreSQL database—including operating system command execution—via a crafted request to the `/pa` endpoint. This is confirmed actively exploited in the wild and carries a federal remediation deadline of September 5, 2026.
Affected Features / Interoperability: Sangoma Switchvox's `/pa` endpoint that processes XML with the `PhoneIP` parameter. The underlying PostgreSQL database is exposed to unauthorized query execution; any data in that database (call records, credentials, configurations) is at risk. mTLS and Vault PKI infrastructure in the homelab could be indirectly impacted if Switchvox shares credential stores.
Source:
Actions:
Summary: (See MySQL entry above.) Grafana instances with PostgreSQL data sources are vulnerable to a macro injection DoS. While the attacker's impact is against Grafana's availability rather than PostgreSQL directly, it can disrupt monitoring dashboards and alerting tied to PostgreSQL metrics.
Affected Features / Interoperability: Grafana PostgreSQL data source query handling; impacts observability and operational monitoring.
Source: https://grafana.com/security/security-advisories/cve-2026-19475
Actions:
Summary: Baserow 2.3.3, a low-code database application, contains a SQL injection in its formula field `index()` function. A low-privileged authenticated user can exploit this to execute SQL with Baserow's PostgreSQL role privileges, potentially escalating beyond their intended application-level permissions.
Affected Features / Interoperability: Baserow's formula field evaluation, which generates SQL for PostgreSQL. Impacts Baserow instances using formula fields; does not directly affect standalone PostgreSQL deployments unless Baserow shares the database instance with other services.
Source:
Actions:
---
Summary: WWBN AVideo (an open-source video platform) contains a SQL injection in its `get.json.php` endpoint that allows unauthenticated attackers to infer password hashes and recovery tokens via an ordering oracle. Note: this is listed under Oracle Database in the source data, but the vulnerability is in AVideo, not Oracle's database server itself.
Affected Features / Interoperability: AVideo's channels API; exposes user credential data if AVideo uses an Oracle Database backend. Impacts authentication integrity and account recovery mechanisms.
Source: https://github.com/WWBN/AVideo/security/advisories/GHSA-pmmj-6425-gpgh
Actions:
---
Summary: (See MySQL entry above.) Grafana instances with MSSQL data sources are subject to the same macro injection DoS. Impacts Grafana availability for MSSQL-monitored environments.
Affected Features / Interoperability: Grafana MSSQL data source query processing; affects dashboards and alerts depending on MSSQL metrics.
Source: https://grafana.com/security/security-advisories/cve-2026-19475
Actions:
---
Summary: The MongoDB C++ Driver's BSON JSON parsing library can read beyond the supplied buffer, silently truncate large inputs, or crash when processing oversized JSON. An attacker controlling input to the library's public API (no MongoDB server credentials needed) can trigger these behaviors. This affects any application using the driver to parse untrusted JSON.
Affected Features / Interoperability: The C++ driver's JSON parsing interface; affects MongoDB client applications ingesting JSON from external sources. Does not impact the MongoDB server itself.
Source: https://jira.mongodb.org/browse/CXX-3547
Actions:
Summary: A memory-handling flaw in the MongoDB C Driver's BSON-to-JSON conversion can write a few bytes past a heap buffer's boundary when binary fields are encoded with a caller-configured output length limit. This is a minor data integrity issue with limited exploitability.
Affected Features / Interoperability: The C driver's binary encoding path; affects applications using BSON-to-JSON conversion with tight output size constraints.
Source: https://jira.mongodb.org/browse/CDRIVER-6410
Actions:
---
Today's digest carries one confirmed-active, in-the-wild item that demands immediate action: CVE-2026-66384 (JFrog Artifactory path-traversal) is on the CISA KEV catalog with a due date of 2026-09-10, affecting Docker cache path handling under specific remote-repository configurations — anything pulling JFrog Artifactory as a Docker image registry needs to be triaged now. Beyond that KEV hit, the high-CVSS cluster is dominated by Kubernetes control-plane and ingress flaws: an OpenChoreo cross-project exec/wirelogs authorization bypass (CVE-2026-73841, 8.8), an RHACM service-proxy header-injection path to cluster-admin on every managed cluster (CVE-2026-17107, 8.5), and an NGINX Ingress annotation injection control-plane issue (CVE-2026-77180, 8.3) are the highest-impact cluster-side items. In Microsoft Azure land, a Jenkins Entra ID plugin flaw (CVE-2026-84672, 8.8) lets a crafted Entra group display name collide with a privileged group and inherit its role — relevant wherever Azure-hosted Jenkins is used for CI/CD. News chatter (separate from formal advisories) flags AI-coding-agent supply-chain risks via malicious `.git` configs and SonicWall SMA 1000 zero-day chaining, both worth tracking even though no CVE is being claimed from those items here.
Summary: CISA-confirmed active exploitation (added to KEV 2026-08-27, due date 2026-09-10) of an improper path-restriction flaw in JFrog Artifactory that lets an authenticated user write data outside the intended Docker cache path when specific remote-repository conditions are met. Exploitation requires a valid Artifactory account; no unauthenticated path is described in the available data.
Affected Features / Interoperability: Docker image caching paths when Artifactory fronts remote Docker repositories — anything pushing/pulling container images through affected remote-repository configurations. Downstream: cache integrity, image provenance, and potential lateral file writes on the Artifactory host.
Source: https://nvd.nist.gov/vuln/detail/CVE-2026-66384
Actions:
Summary: On the Nuclio local Docker platform, an unvalidated `namespace` value is interpolated into a shell-quoted `docker ps` command run via `/bin/sh -c` on the dashboard host. Default auth is `nop` (unauthenticated), so a remote attacker can inject arbitrary OS commands that execute as root inside the dashboard container — which holds the Docker socket, yielding host-level compromise. Fixed in Nuclio 1.17.4.
Affected Features / Interoperability: Nuclio dashboard on the local Docker platform — Docker socket access, container lifecycle, host shell. Downstream: any workloads running on a Nuclio-managed local Docker host.
Source: https://github.com/nuclio/nuclio/security/advisories/GHSA-2893-rq73-w22x
Actions:
Summary: Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions using both the group's unique object ID and its display name. An attacker able to create an Entra group with a display name that collides with a privileged group can inherit that group's configured Jenkins permissions. Exploitation requires Entra tenant write access (i.e., ability to create groups in the tenant); the auth surface is therefore "who can create groups in your Entra directory."
Affected Features / Interoperability: Jenkins authorization integrations where Entra group → Jenkins role mapping is configured via the Microsoft Entra ID plugin on Jenkins instances hosted in or federated to Azure. Downstream: Jenkins job execution, pipeline secrets, build artifact stores, deployment credentials reachable from a compromised Jenkins node.
Source: https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3935
Actions:
Summary: OpenChoreo (an open-source Kubernetes developer platform) prior to 1.1.6 / 1.2.3 authorizes `component:exec` and `wirelogs:view` against the caller-supplied `project` query parameter rather than the component's actual owning project (`comp.Spec.Owner.ProjectName`). A user with a project-scoped grant in one project can therefore execute commands in and read wirelogs from components owned by other projects in the same namespace. Exploitation requires an authenticated principal with any project-scoped OpenChoreo grant.
Affected Features / Interoperability: OpenChoreo `component:exec` (in-cluster command execution against component pods) and `wirelogs:view` (reading wire logs). Downstream: any tenant isolation guarantees for OpenChoreo projects sharing a namespace; cross-tenant debug/log access.
Source: https://github.com/openchoreo/openchoreo/commit/4d372eaf1f07525663dcca5257062f4b051b9820 ; https://github.com/openchoreo/openchoreo/commit/9d77b64f747eba89247c47ebfeffec591c4cd2d8 ; https://github.com/openchoreo/openchoreo/commit/c9390e4fcb9953f43b07cb48197576182301593d ; https://github.com/openchoreo/openchoreo/pull/4251 ; https://github.com/openchoreo/openchoreo/pull/4516
Actions:
Summary: In Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE), the cluster-proxy `service-proxy` component appends impersonation-group headers to proxied requests without first stripping caller-supplied values, and the spoke ServiceAccount holds unrestricted impersonation rights. An authenticated hub principal can inject an `Impersonate-Group` header and escalate to `cluster-admin` on every managed cluster reachable via the proxy. Exploitation requires any authenticated principal on the hub cluster.
Affected Features / Multi-cluster Interoperability: RHACM/MCE service-proxy across hub → spoke communication; ultimately every managed cluster that the hub can reach via service-proxy. Downstream: cluster-admin on all spokes — total Kubernetes control-plane compromise of the fleet.
Source: https://access.redhat.com/errata/RHSA-2026:46885 ; https://access.redhat.com/errata/RHSA-2026:47388 ; https://access.redhat.com/errata/RHSA-2026:47735 ; https://access.redhat.com/errata/RHSA-2026:47949 ; https://access.redhat.com/errata/RHSA-2026:47953
Actions:
Summary: NGINX Ingress Controller's configuration generator writes multiple user-controllable Ingress annotation fields directly into the generated NGINX config without sanitization. An authenticated user with permission to create/modify Ingress annotations can inject arbitrary NGINX configuration directives, create/delete files, or disable services. Control-plane only — no data-plane exposure described.
Affected Features / Interoperability: NGINX Ingress Controller configuration generation; downstream any service fronted by NGINX Ingress whose annotations can be written by untrusted users.
Source: https://my.f5.com/manage/s/article/K000162601
Actions:
Summary: Nuclio controller (serverless framework) prior to 1.16.4 builds a `curl` invocation string for each cron trigger and stores it as args of a Kubernetes CronJob container (`/bin/sh`, `-c`, `<command>`). The `event.headers` keys and `event.body` fields from the trigger spec flow into that shell command without adequate sanitization, enabling cron-level command injection. Fixed in 1.16.4.
Affected Features / Interoperability: Nuclio cron triggers and their resulting Kubernetes CronJob workloads; downstream: any service scheduled via Nuclio cron, plus the namespace where the CronJob executes.
Source: https://github.com/nuclio/nuclio/security/advisories/GHSA-v5px-423j-pf7p ; https://github.com/nuclio/nuclio/releases/tag/1.16.4
Actions:
Summary: The Submariner operator stores the IPsec pre-shared key (PSK) used to secure cross-cluster mesh traffic in plaintext within the Submariner Custom Resource. Anyone able to read the CR can passively decrypt traffic between any two clusters in the mesh. Disclosure requires read access to the Submariner CR — typically cluster-admin or namespace-scoped operator access.
Affected Features / Interoperability: Submariner IPsec tunnels between Kubernetes clusters in a mesh; downstream: confidentiality of all cross-cluster traffic carried over those tunnels.
Source: https://access.redhat.com/errata/RHSA-2026:60386 ; https://access.redhat.com/errata/RHSA-2026:60387 ; https://access.redhat.com/errata/RHSA-2026:60388 ; https://access.redhat.com/errata/RHSA-2026:60389 ; https://access.redhat.com/errata/RHSA-2026:60390
Actions:
Summary: The RHACM `lighthouse` component insufficiently validates advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can craft EndpointSlices with attacker-controlled IPs, causing other clusters' lighthouse DNS to redirect legitimate cross-cluster service traffic to malicious endpoints — enabling transparent MITM.
Affected Features / Multi-cluster Interoperability: RHACM `lighthouse` cross-cluster service discovery DNS; downstream: any service discovered via lighthouse is at risk of MITM and data manipulation.
Source: https://access.redhat.com/errata/RHSA-2026:63016 ; https://access.redhat.com/security/cve/CVE-2026-66787 ; https://bugzilla.redhat.com/show_bug.cgi?id=2507532
Actions:
Summary: Elastic Cloud on Kubernetes (ECK) has an incorrect-authorization flaw (CWE-863) where a principal with limited Kubernetes permissions confined to a single namespace can cause attacker-controlled certificate material to be included in the Elasticsearch client trust bundle managed by ECK in a separate namespace — i.e., a metadata-spoofing / trust-bundle poisoning issue (CAPEC-690).
Affected Features / Interoperability: ECK-managed Elasticsearch trust bundles across namespaces; downstream: any Elasticsearch client that trusts the ECK-managed bundle will trust attacker-supplied certificates.
Source: https://discuss.elastic.co/t/elastic-cloud-on-kubernetes-3-5-0-security-update-esa-2026-145/390105
Actions:
Summary: The `submariner-operator` in RHACM allows a user with permission to modify the Submariner Custom Resource to specify an unvalidated image path. Deploying a malicious image via that path yields arbitrary code execution with elevated privileges across the cluster, including control-plane nodes. Exploitation requires CR write access (cluster-admin or delegated submariner-admin).
Affected Features / Interoperability: Submariner operator deployment path; downstream: any workload (including control-plane components) started from an attacker-chosen image.
Source: https://access.redhat.com/errata/RHSA-2026:63016 ; https://access.redhat.com/security/cve/CVE-2026-66783 ; https://bugzilla.redhat.com/show_bug.cgi?id=2507528
Actions:
Summary: ECK has an incomplete-cleanup flaw (CWE-459): authentication credentials persist after a cross-namespace association has been denied by RBAC enforcement, allowing a low-privileged tenant to retain unauthorized read access to the associated Elasticsearch cluster (privilege abuse, CAPEC-122).
Affected Features / Interoperability: ECK cross-namespace Elasticsearch associations and any retained credentials issued for them; downstream: read-only data exposure to a tenant whose association should have been revoked.
Source: https://discuss.elastic.co/t/elastic-cloud-on-kubernetes-3-5-0-security-update-esa-2026-146/390106
Actions:
Summary: Nuclio Dashboard's build pipeline does not sanitize `spec.build.tempDir` before using it to construct a shell command. With the Kaniko container builder enabled, a user with function-create permission can inject shell metacharacters into `tempDir` and achieve arbitrary command execution inside the Dashboard container — which runs with a Kubernetes service account holding wildcard access to Secrets, Pods, Jobs, and Deployments in its namespace. Affects Nuclio 1.6.19 through 1.17.1; fixed in 1.17.2.
Affected Features / Interoperability: Nuclio Dashboard + Kaniko builder pipeline; downstream: full namespace-level access to Secrets, Pods, Jobs, and Deployments for any user with function-create.
Source: https://github.com/nuclio/nuclio/security/advisories/GHSA-x44h-qmrv-mh72 ; https://github.com/nuclio/nuclio/releases/tag/1.17.2
Actions:
(Unverified chatter — not formal advisories; no CVEs claimed from these items.)