Cyber Risk Brief: 31 August - 6 September 2026
CRB-247 September 2026Sovereign GRC Intel22 min read
Disclaimer:This brief is governance commentary for leadership and risk teams, not incident notification, public attribution, legal advice, or quantitative risk analysis. Threat prioritization, framework mappings, attribution, and risk-zone groupings are informational only. Validate all technical claims against vendor advisories and internal telemetry before operational response.
Threat Intelligence Summary
Eight CISA KEV-backed threats define the 31 August to 6 September window. SonicWall SMA1000 CVE-2026-83548/83549, JFrog Artifactory CVE-2026-82329, Kestra CVE-2026-49869, and Sangoma Switchvox CVE-2026-9586 all carry deadlines that passed on 5 September. PaperCut CVE-2026-82078/81578 has escalated from reconnaissance to hands-on-keyboard activity and has a 14 September deadline. LiteLLM CVE-2026-59822 and Starlette CVE-2026-48710 have 16 September deadlines. Neither appeared in the Sheet at all; they, along with Kestra and Chrome, were found only by direct CISA reconciliation. Google Chrome CVE-2026-85046 is an actively exploited V8 zero-day with an 18 September deadline. Every item requires immediate owner confirmation of patch or mitigation state; active-exploitation reports require a parallel investigation for prior compromise.
Threat Register
| Threat | |||||
|---|---|---|---|---|---|
T1 | SonicWall SMA1000 Pre-Authentication SSRF Chain (CVE-2026-83548 / CVE-2026-83549) SonicWall reports active exploitation of two SMA1000 Appliance zero-days: CVE-2026-83548, a pre-authentication SSRF in the WorkPlace interface scored CVSS 3.1 10.0, and CVE-2026-83549, an authenticated command injection in the Management Console. CISA added both CVEs to KEV on 2 September with a 5 September deadline, now passed. | Critical | 5 Sep · passed | ||
T2 | JFrog Artifactory Authentication Bypass (CVE-2026-82329) CVE-2026-82329 is a CVSS 3.1 9.8 improper-authentication flaw in self-hosted JFrog Artifactory. SecurityWeek reports watchTowr observed attackers minting administrator tokens and enumerating users, groups, credential sets, and federated access topologies through its Attacker Eye honeypot network; JFrog had not confirmed exploitation and no other reports existed at the time of that article. CISA added the CVE to KEV on 2 September with a 5 September deadline. | Critical | 5 Sep · passed | ||
T3 | PaperCut NG/MF Active-Intrusion Chain (CVE-2026-82078 / CVE-2026-81578) PaperCut exploitation has moved from reconnaissance to hands-on-keyboard activity. CVE-2026-81578 lets an unauthenticated attacker modify configuration, and CVE-2026-82078 then executes Java bytecode already resident on the application classpath under the PaperCut server process; CISA added both to KEV on 31 August with a 14 September deadline. | Critical | 14 Sep | ||
T4 | Sangoma Switchvox SQL Injection (CVE-2026-9586) CVE-2026-9586 is an unauthenticated SQL injection in Sangoma Switchvox that allows remote SQL execution and can lead to remote code execution. Horizon3 observed active exploitation on 30 August, including reverse-shell attempts, and CISA added the CVE to KEV on 2 September with a 5 September deadline. | Critical | 5 Sep · passed | ||
T5 | Kestra OSS Authentication Bypass and Root RCE (CVE-2026-49869) CVE-2026-49869 is a CVSS 3.1 10.0 Kestra OSS authentication bypass that lets an unauthenticated attacker create and execute workflows. CISA added it to KEV on 2 September after Microsoft flagged exploitation, with a 5 September remediation deadline that has passed. | Critical | 5 Sep · passed | ||
T6 | LiteLLM MCP Authentication Bypass (CVE-2026-59822) CVE-2026-59822 is an improper-authentication flaw in LiteLLM's MCP Streamable HTTP endpoint. NVD states that an unauthenticated attacker can use a fabricated Authorization header to reach MCP tooling without a valid LiteLLM key; CISA added it to KEV on 2 September. The exploitation evidence SecurityWeek cites is Wiz honeypot telemetry catching exploit attempts, not a confirmed compromise at a named organization. | Critical | 16 Sep | ||
T7 | Starlette Host Header Request Smuggling (CVE-2026-48710) CVE-2026-48710 is a Starlette request/response-smuggling vulnerability that can bypass controls which rely on reconstructed request URLs. It is not a new discovery: SecurityWeek reports it was publicly disclosed in May, and that Horizon3 said in early June attackers had been exploiting it since May. CISA added it to KEV only on 2 September, with a 16 September deadline. Its EPSS score of 36.26% is the highest in this register and sits in the 98th percentile. | Critical | 16 Sep | ||
T8 | Google Chrome V8 Type Confusion Zero-Day (CVE-2026-85046) Google patched CVE-2026-85046, an actively exploited V8 type-confusion flaw in Chrome, in the 3 September Stable Channel update. CISA added it to KEV on 4 September with a 18 September deadline; NVD states a crafted HTML page can execute code inside Chrome's sandbox. | Critical | 18 Sep | ||
| Select a row for narrative, affected systems, remediation, and sources. | |||||
Strategic context
The Sheet missed four of ten KEV additions inside one weekly window
- The direct CISA catalog reconciliation found LiteLLM, Starlette, Kestra, and Chrome that Hermes did not flag as KEV. Each is in the register because it meets the sourcing and current-threat gates.
- A weekly report that relies on its intake enrichment can omit active exploitation even when the primary feed contains the story. The mandatory direct catalog query is a control, not a duplicate research step.
Control-plane and identity boundaries dominate this week's register
- SonicWall, JFrog, PaperCut, Switchvox, Kestra, and LiteLLM each expose a platform that routes access, software, workflows, communications, or tools for other systems.
- The response is not patching alone. It requires evidence that the exposed control plane is identified, the fix is active, and existing misuse is investigated.
Threat Actor Profiling
No source identifies a named threat group for these eight threats. The actor rows therefore describe only the observed exploitation pattern and source attribution. MITRE ATT&CK codes are informational mappings to the reported behavior, not forensic attribution.
| Threats | Actor | Sectors | MITRE tradecraft | Kill chain |
|---|---|---|---|---|
| T1 | Unattributed threat actors | Government, Critical Infrastructure, Enterprise | Initial Access → Execution → Actions on Objectives | |
| T2 | Unattributed actors in watchTowr honeypot telemetry | Software Development, Cloud, Enterprise | Initial Access → Privilege Escalation → Discovery | |
| T3 | Unattributed hands-on-keyboard actors | Education, Enterprise, Print Management | Initial Access → Execution → Remote Access | |
| T4 | Unattributed actors observed by Horizon3 | Enterprise Communications, VoIP | Initial Access → Execution → Command and Control | |
| T5T6T7T8 | Unattributed actors | AI Infrastructure, Application Development, Endpoints | Initial Access → Execution → Actions on Objectives |
▶Table methodology & sourcing notes
- All actor labels remain unattributed unless the cited reporting names a group. The PaperCut, JFrog, and Switchvox rows describe reporting that observed human-operated activity, administrator-token abuse, and reverse-shell attempts respectively.
Control Deficiency & Framework Mapping
| Threat | Control gaps | ISO 27001 | NIST CSF 2.0 | CIS Controls | Privacy Act / PIPEDA | ITSG-33 | OSFI B-13 | ISO 42001 |
|---|---|---|---|---|---|---|---|---|
T1SonicWall SMA1000 Pre-Authentication SSRF Chain (CVE-2026-83548 / CVE-2026-83549) |
| — | — | |||||
T2JFrog Artifactory Authentication Bypass (CVE-2026-82329) |
| — | — | |||||
T3PaperCut NG/MF Active-Intrusion Chain (CVE-2026-82078 / CVE-2026-81578) |
| — | — | |||||
T4Sangoma Switchvox SQL Injection (CVE-2026-9586) |
| — | — | |||||
T5Kestra OSS Authentication Bypass and Root RCE (CVE-2026-49869) |
| — | ||||||
T6LiteLLM MCP Authentication Bypass (CVE-2026-59822) |
| — | ||||||
T7Starlette Host Header Request Smuggling (CVE-2026-48710) |
| — | ||||||
T8Google Chrome V8 Type Confusion Zero-Day (CVE-2026-85046) |
| — | — |
Privacy Act / PIPEDA & OSFI: These rows are vulnerability disclosures and do not independently establish a Canadian privacy breach or a PIPEDA notification obligation. Assess any incident evidence against the organization's own data map, regulatory footprint, and contractual notification duties.
Risk Triage
Threats are assigned to primary zones based on their dominant organizational risk characteristic. A threat may appear in a secondary zone when it presents a materially distinct compounding risk dimension.
Active exploitation or weaponized capability with immediate organizational exposure if unaddressed.
- T1SonicWall CVE-2026-83548 — pre-auth SSRF on the remote-access boundary, KEV deadline passed
CVSS 10.0 on an appliance that is itself an access-control boundary. Upgrade to 12.4.3-03526 or 12.5.0-02952 and verify the build per appliance; where indicators appear, re-image and rotate the credentials that depend on it.
- T2JFrog Artifactory CVE-2026-82329 — administrator tokens minted on a supply-chain trust point, KEV deadline passed
Unauthenticated administrative access to the artifact repository alters the trust layer engineering teams use to build and ship software. Upgrade to the patched release for each branch, then review token issuance, credential-set access, and federated topology for misuse.
- T4Sangoma Switchvox CVE-2026-9586 — unauthenticated SQL injection, reverse shells observed, KEV deadline passed
EPSS 11.85%, the second highest in this register, with Horizon3 observing exploitation from 30 August. Upgrade to 8.4.0.2, then read db-quirks.log and outbound traffic to port 39323 before remediation removes the evidence.
- T5Kestra CVE-2026-49869 — authentication bypass into an execution-capable control plane, KEV deadline passed
CVSS 10.0, and the script plugins are enabled by default, so the bypass turns a web-exposed orchestrator into code execution inside its worker container. Upgrade to 1.0.45 or 1.3.21 and review workflow creation history for unauthorized runs.
- T8Google Chrome CVE-2026-85046 — actively exploited V8 zero-day reaching users through ordinary web content
The latest deadline in this register at 18 September, but the widest exposure surface. The control is not update availability: it is the share of managed endpoints that installed 152.0.7977.82 and restarted the browser.
Confirmed campaign or large-scale exposure with direct impact on organizations or their data.
- T3PaperCut CVE-2026-82078 / CVE-2026-81578 — hands-on-keyboard intrusion, no longer only probing
SecurityWeek reports human operators exploring compromised servers and preparing external-to-internal pivots. Apply Emergency Patch Release 3, which supersedes Release 2, then hunt pc-app.exe activity, truncated server.log files, and unexpected AnyDesk or SimpleHelp installs.
Structural control deficiencies revealed by the day's threats, independent of any single exploit.
- T6LiteLLM CVE-2026-59822 — an AI gateway is an authorization boundary
A fabricated Authorization header reaches MCP tooling without a valid LiteLLM key, so the impact is set by the permissions of the tools behind the gateway rather than by the gateway itself. Upgrade to 1.84.0, then establish an owner and a least-privilege scope for every tool route.
- T7Starlette CVE-2026-48710 — a four-month exposure window that surfaced only when CISA catalogued it
Disclosed publicly in May and, per Horizon3, exploited since May, yet KEV-listed only on 2 September. EPSS 36.26% is the highest here. The work is software-composition inventory: which services depend on Starlette, and which authorization checks read the reconstructed request URL.
Cross-cutting pattern requiring board-level awareness and programme-level response.
- T1T2T3T4T5T6T7T8Direct KEV reconciliation found four Sheet misses
The catalog reconciliation is a required verification control. It found LiteLLM, Starlette, Kestra, and Chrome, none of which the Sheet surfaced at all.
Remediation Actions
Consolidated actions across all eight threats, organized by time horizon. T-badges indicate which threat each action addresses.
0 – 24 hours
Immediate response
- T1T2T4T5Confirm the vendor-fixed version on every exposed SonicWall SMA1000, self-hosted Artifactory, Switchvox, and Kestra instance. The 5 September KEV deadline has passed for each row.
- T3Install PaperCut Emergency Patch Release 3, restrict public Application Server access, and start investigation for the published compromise indicators.
- T8Deploy Chrome 152.0.7977.82 or later and require a restart to activate CVE-2026-85046 protection.
7 days
Short-term hardening
- T6Upgrade LiteLLM to 1.84.0 or later, or block MCP routes until the gateway rejects fabricated bearer tokens.
- T7Upgrade Starlette to 1.0.1 or later and identify applications whose authorization relies on request.url path reconstruction.
- T1T2T3T4T5Review logs and configuration changes for the source-reported exploitation behavior before closing remediation.
14 – 30 days
Programme remediation
- T1T2T3T4T5Classify remote-access, artifact, print, telephony, and workflow services as execution-capable control planes in the asset inventory and emergency-patch SLA.
- T6T7Map AI gateways, MCP tools, and ASGI dependencies to named application owners and test their authentication and header-validation controls.
Ongoing
Structural controls
- T1T2T3T4T5Measure emergency remediation by verified deployed version and investigation evidence, not by the existence of a patch ticket.
- T6T7T8Keep direct CISA KEV reconciliation, framework dependency inventory, and browser restart compliance in the recurring control-review cadence.
Provenance
Intelligence Sources
Cadence
Published weekly. Each issue distills the week's most material threats from primary security reporting and vendor advisories, cross-referenced against authoritative sources (CVE/NVD, CISA KEV, and MITRE ATT&CK) and mapped to the compliance obligations that govern your response. Use Subscribe or Share on any issue to join the distribution list.
See how this week's threats map to your control gaps.
Book a briefing →