StackPrism

Monthly report

What your agent missed in September 2026

In September 2026, CISA added 10 actively exploited vulnerabilities in web-stack software to its Known Exploited Vulnerabilities catalog, GitHub published 11 critical advisories for widely used npm and PyPI packages and 1 new release line shipped.

  • 10Exploited in the wild
  • 11Critical advisories
  • 0Reached end of life
  • 1New release lines

The ones to know first

The most widely used software among this month’s items, one of each kind.

  • CVE-2026-48710 added to CISA’s exploited list (Starlette)

    Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path…

    , CISA KEV

  • next: remote code execution in next/og ImageResponse (critical)

    Fixed in 16.3.6.

    , GitHub Advisory Database

  • MongoDB 9.0 released

    Latest version: 9.0.4.

    , endoflife.date

Everything in September 2026

Exploited in the wild10

  • CVE-2026-87902 added to CISA’s exploited list (WordPress)

    WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable…

    , CISA KEV

  • CVE-2026-71362 added to CISA’s exploited list (Magento)

    Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to…

    , CISA KEV

  • CVE-2026-42016 added to CISA’s exploited list (JFrog Artifactory)

    JFrog Artifactory contains an incorrect authorization vulnerability that leads to a privilege escalation attack due to a validation check of the token signature/issuer…

    , CISA KEV

  • CVE-2026-42018 added to CISA’s exploited list (JFrog Artifactory)

    JFrog Artifactory contains an improper authentication vulnerability that could return an internal anonymous-user token to an unauthenticated caller when anonymous access…

    , CISA KEV

  • CVE-2026-85706 added to CISA’s exploited list (GitLab)

    GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper…

    , CISA KEV

  • CVE-2026-75650 added to CISA’s exploited list (Magento)

    Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to…

    , CISA KEV

  • CVE-2026-59822 added to CISA’s exploited list (LiteLLM)

    BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an…

    , CISA KEV

  • CVE-2026-48710 added to CISA’s exploited list (Starlette)

    Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path…

    , CISA KEV

  • CVE-2026-49869 added to CISA’s exploited list (Kestra)

    Kestra OSS contains an OS command injection vulnerability that could allow an unauthenticated remote attacker to create and execute arbitrary workflows without…

    , CISA KEV

  • CVE-2026-82329 added to CISA’s exploited list (JFrog Artifactory)

    JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain…

    , CISA KEV

Critical advisories11

  • next: remote code execution in next/og ImageResponse (critical)

    Fixed in 16.3.6.

    , GitHub Advisory Database

  • pyjwt: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public… (critical)

    Fixed in 2.14.0.

    , GitHub Advisory Database

  • anyio: TLSStream IDNA 2003 host name encoding enables potential TLS… (critical)

    Fixed in 4.14.2.

    , GitHub Advisory Database

  • astro: remote code execution through AVIF image optimization (critical)

    Fixed in 7.2.8.

    , GitHub Advisory Database

  • next: unauthenticated remote code execution in image optimization API (critical)

    Fixed in 15.5.24 and 16.3.3.

    , GitHub Advisory Database

  • next: unauthenticated remote code execution on windows-hosted servers (critical)

    Fixed in 15.5.24 and 16.3.3.

    , GitHub Advisory Database

  • gitpython: Dormant multi-line git-config values are corrupted into live injected… (critical)

    Fixed in 3.1.59.

    , GitHub Advisory Database

  • nltk: Allowlisted pickle loaders still permit code execution in current source (critical)

    Fixed in 3.10.3.

    , GitHub Advisory Database

  • nltk: unsafe Pickle deserialization in TransitionParser Allows remote code… (critical)

    Fixed in 3.10.0.

    , GitHub Advisory Database

  • python-jose: python-jose algorithm confusion guard bypassed (critical)

    , GitHub Advisory Database

  • nltk: JVM argument injection bypass (critical)

    Fixed in 3.10.3.

    , GitHub Advisory Database

New release lines1

  • MongoDB 9.0 released

    Latest version: 9.0.4.

    , endoflife.date

Which models can’t know this

Every model in our cutoff table has a knowledge cutoff before September 2026, so none of them knows about any of this unless a tool gives it live data.

Anthropic

xAI

OpenAI

Google

Microsoft

Meta

Last checked against CISA KEV, GitHub Advisory Database and endoflife.date.

What counts: vulnerabilities CISA confirms are exploited, in software web apps commonly run; critical GitHub advisories on widely used npm and PyPI packages; and release lines of popular runtimes, frameworks and databases reaching end of life or shipping. Also as Markdown.