CISA added three vulnerabilities to its Known Exploited Vulnerabilities Catalog on 27 August 2026 on evidence of active exploitation: CVE-2023-49105 in ownCloud, CVE-2026-53362 in the Linux kernel's IPv6 fragment handling, and CVE-2026-66384 in Docker. The ownCloud flaw is the most serious of the three and the one worth checking against an internet-facing file-sharing estate first: an attacker who knows a victim's username can access, modify or delete any file without authentication when no signing key is configured for that user, because pre-signed URLs are accepted without one. Under BOD 26-04, federal civilian agencies must prioritise KEV-listed flaws on publicly exposed assets that grant total control after exploitation, and must check whether the system was compromised before the patch was applied.

Source

• CISA
• Captured via /raw/digests/Cyber-Digest-2026-08-27.md