HIGH/ SEPTEMBER 19, 2026TODAY’S BRIEFING — #183
Azure AI, Cisco ISE, WordPress flaws under active exploitation; 23M Gyazo breach
Microsoft patches CVSS 10.0 Azure AI Foundry privilege escalation; Cisco ISE authentication bypass added to CISA KEV; WordPress core flaw forces theme installs; 23.6M Gyazo user records stolen via server vulnerability.
CVE-2026-85889Microsoft Azure AI Foundry — CVSS 10.0 privilege escalation; missing authentication for critical function; patchedCVE-2026-76460Cisco Identity Services Engine — Authentication bypass (CVSS 10.0); unauthenticated remote access; added to CISA KEV; requires federal remediation by 2026-09-19CVE-2026-58704Google Android — Improper authorization in cellular modem; privilege escalation; added to CISA KEV; requires federal remediation by 2026-09-19CVE-2026-87886Acronis Backup (cPanel & WHM, Plesk) — Incorrect default permissions; privilege escalation; added to CISA KEV; requires federal remediation by 2026-09-19
Read the full briefing →