Google Fixes Actively Exploited V8 Vulnerability in Chrome 153

Chrome 153 fixes CVE-2026-87491 in V8, which Google knows is being exploited in the wild. Desktop users should update their browser.

Chrome 153 fixes CVE-2026-87491 in V8, which Google knows is being exploited in the wild. Desktop users should update their browser.

CISA added CVE-2026-86218 in the N-able N-central platform to its catalog of actively exploited vulnerabilities. Hotfix 4 is available for on-premises deployments.

Google released a Chrome update fixing the high-severity CVE-2026-85046 vulnerability in V8. CISA has added it to its Known Exploited Vulnerabilities catalog.

Previdian sensors detected requests matching a publicly available proof-of-concept (PoC) for CVE-2026-19490 in NetScaler. Successful compromises have not been confirmed so far.

The CVE-2026-49869 flaw allows attackers to bypass Basic Auth without logging in, create workflows and, under certain conditions, execute commands in the worker. Versions 1.0.45 and 1.3.21 contain fixes.

CISA added CVE-2026-9586 in Sangoma Switchvox SMB to the Known Exploited Vulnerabilities catalog. The unauthenticated SQL injection could lead to remote code execution; a fix has been available since July.

On August 27, 2026, CISA added CVE-2026-66384 in JFrog Artifactory to the KEV catalog. Operators of self-hosted instances should verify the version and deploy available fixes.

CISA added CVE-2026-8452 in NetScaler ADC and NetScaler Gateway to its Known Exploited Vulnerabilities catalog. U.S. federal civilian agencies must update the devices by August 29, 2026.

The U.S. cybersecurity agency CISA added the CVE-2023-49105 vulnerability in ownCloud Server to its Known Exploited Vulnerabilities catalog. Unpatched instances may expose users’ files to unauthorized reading, modification, or deletion.