THE week of August 24 to August 30, 2026, saw 2,488 new vulnerabilities logged, with 286 rated as Critical and 795 as High severity. Among them, 18 flaws scored a CVSS of 10.0, particularly impacting cloud-native and AI tools, as well as web applications, with many stemming from WordPress plugins. The CISA added 11 vulnerabilities to its Known Exploited Vulnerabilities catalog, emphasizing the urgency for organizations to patch systems, especially legacy ones.
Notable vulnerabilities include CVE-2026-21962 in Oracle WebLogic (10.0 score) and CVE-2026-60004 in Gitea (9.8 score). Recommendations for defenders include prioritizing vulnerabilities from the CISA KEV list and auditing WordPress sites for patches.