The brief

Tuesday, August 4, 2026

Norwegian government's ID-porten hit by major DDoS; patch immediately: Adobe Campaign (CVSS 10 SSRF), OpenEMR (CVSS 9.4 RCE), Baileys (CVSS 9.3), GL.iNet routers (CVSS 9 RCE), and Misskey (CVSS 9.2). EU AI Act enforcement now active.

12 stories · 3 podcasts · get this by email each weekday

Today's stories

The EU's AI Act enforcement powers take effect, letting it evaluate AI models before regional release, restrict market access, fine model providers, and more (Kai Nicol-Schwarz/CNBC)
CVE-2026-18598: CVE-2026-18598 GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection (CVSS 9)
CVE-2026-39932: CVE-2026-39932 OpenEMR 8.2.0 Remote Code Execution via CategoryTree eval() Injection (CVSS 9.4)
CVE-2026-69083: SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable... (CVSS 10)
DDoS against Norwegian government IT infrastructure – status
CVE-2026-48063: CVE-2026-48063 Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload (CVSS 9.3)
CVE-2026-67598: Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that all... (CVSS 9.1)
CVE-2026-39932: OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component (library/cl... (CVSS 9.4)
CVE-2026-41452: Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated... (CVSS 9.8)
CVE-2026-9487: XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID. _get_signed_xml() in lib/XML/Sig.pm, ... (CVSS 9.1)
CVE-2026-48331: Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in priv... (CVSS 10)
CVE-2026-46713: Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, contain a... (CVSS 9.2)

Worth a listen

How M&T Bank Built a Technology-First Culture with Michael Wisler
Water you waiting for?
What Happens When AI Breakthroughs Outrun Human Understanding

← All editions