// day
Sep 8, 2026
3 new incidents, 0 with updates.
## started
- highclosedpatchedclosed Sep 8, 2026
Adobe Commerce and Magento: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
› Adobe Commerce and Magento
Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code. Added to CISA KEV on 2026-09-08.
CVE-2026-75650 - highclosedpatchedclosed Sep 8, 2026
Microsoft Windows: Microsoft Windows Link Following Vulnerability
› Microsoft Windows
Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM. CISA added CVE-2026-81963, CVE-2026-85880 to the Known Exploited Vulnerabilities catalog on 2026-09-08 based on evidence of active exploitation.
CVE-2026-81963CVE-2026-85880 - highclosedpatchedclosed Sep 8, 2026
N-able N-central: N-able N-central Static Code Injection Vulnerability
› N-able N-central
N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution. Added to CISA KEV on 2026-09-08.
CVE-2026-86218
