# What your agent missed in September 2026 In September 2026, CISA added 10 actively exploited vulnerabilities in web-stack software to its Known Exploited Vulnerabilities catalog, GitHub published 11 critical advisories for widely used npm and PyPI packages and 1 new release line shipped. The ones to know first: - **Sep 2, 2026**: CVE-2026-48710 added to CISA’s exploited list (Starlette). Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48710) - **Sep 30, 2026**: next: remote code execution in next/og ImageResponse (critical). Fixed in 16.3.6. [GitHub Advisory Database](https://github.com/advisories/GHSA-vcvr-r3jv-pc5j) - **Sep 30, 2026**: MongoDB 9.0 released. Latest version: 9.0.4. [endoflife.date](https://endoflife.date/mongodb) ## Exploited in the wild (10) - **Sep 25, 2026**: CVE-2026-87902 added to CISA’s exploited list (WordPress). WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-87902) - **Sep 24, 2026**: CVE-2026-71362 added to CISA’s exploited list (Magento). Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-71362) - **Sep 11, 2026**: CVE-2026-42016 added to CISA’s exploited list (JFrog Artifactory). JFrog Artifactory contains an incorrect authorization vulnerability that leads to a privilege escalation attack due to a validation check of the token signature/issuer… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42016) - **Sep 11, 2026**: CVE-2026-42018 added to CISA’s exploited list (JFrog Artifactory). JFrog Artifactory contains an improper authentication vulnerability that could return an internal anonymous-user token to an unauthenticated caller when anonymous access… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42018) - **Sep 11, 2026**: CVE-2026-85706 added to CISA’s exploited list (GitLab). GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85706) - **Sep 8, 2026**: CVE-2026-75650 added to CISA’s exploited list (Magento). Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-75650) - **Sep 2, 2026**: CVE-2026-59822 added to CISA’s exploited list (LiteLLM). BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59822) - **Sep 2, 2026**: CVE-2026-48710 added to CISA’s exploited list (Starlette). Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48710) - **Sep 2, 2026**: CVE-2026-49869 added to CISA’s exploited list (Kestra). Kestra OSS contains an OS command injection vulnerability that could allow an unauthenticated remote attacker to create and execute arbitrary workflows without… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-49869) - **Sep 2, 2026**: CVE-2026-82329 added to CISA’s exploited list (JFrog Artifactory). JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-82329) ## Critical advisories (11) - **Sep 30, 2026**: next: remote code execution in next/og ImageResponse (critical). Fixed in 16.3.6. [GitHub Advisory Database](https://github.com/advisories/GHSA-vcvr-r3jv-pc5j) - **Sep 29, 2026**: pyjwt: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public… (critical). Fixed in 2.14.0. [GitHub Advisory Database](https://github.com/advisories/GHSA-ffc3-869f-jxw9) - **Sep 18, 2026**: anyio: TLSStream IDNA 2003 host name encoding enables potential TLS… (critical). Fixed in 4.14.2. [GitHub Advisory Database](https://github.com/advisories/GHSA-82r6-8w77-94w6) - **Sep 8, 2026**: astro: remote code execution through AVIF image optimization (critical). Fixed in 7.2.8. [GitHub Advisory Database](https://github.com/advisories/GHSA-26w7-cxv4-gfx2) - **Sep 8, 2026**: next: unauthenticated remote code execution in image optimization API (critical). Fixed in 15.5.24 and 16.3.3. [GitHub Advisory Database](https://github.com/advisories/GHSA-2xp9-vwfh-vxw4) - **Sep 8, 2026**: next: unauthenticated remote code execution on windows-hosted servers (critical). Fixed in 15.5.24 and 16.3.3. [GitHub Advisory Database](https://github.com/advisories/GHSA-p293-qw3h-jr36) - **Sep 8, 2026**: gitpython: Dormant multi-line git-config values are corrupted into live injected… (critical). Fixed in 3.1.59. [GitHub Advisory Database](https://github.com/advisories/GHSA-284h-m62q-gf8w) - **Sep 8, 2026**: nltk: Allowlisted pickle loaders still permit code execution in current source (critical). Fixed in 3.10.3. [GitHub Advisory Database](https://github.com/advisories/GHSA-x99w-6fgc-pmfw) - **Sep 8, 2026**: nltk: unsafe Pickle deserialization in TransitionParser Allows remote code… (critical). Fixed in 3.10.0. [GitHub Advisory Database](https://github.com/advisories/GHSA-rhp5-r9x4-f5g2) - **Sep 3, 2026**: python-jose: python-jose algorithm confusion guard bypassed (critical). [GitHub Advisory Database](https://github.com/advisories/GHSA-3qf3-8w2g-rqmx) - **Sep 1, 2026**: nltk: JVM argument injection bypass (critical). Fixed in 3.10.3. [GitHub Advisory Database](https://github.com/advisories/GHSA-m4rf-3fr8-xwx3) ## New release lines (1) - **Sep 30, 2026**: MongoDB 9.0 released. Latest version: 9.0.4. [endoflife.date](https://endoflife.date/mongodb) ## Which models can’t know this Every model below has a knowledge cutoff before September 2026, so it can’t know about any of this unless a tool gives it live data. - Claude Fable 5.1 (Anthropic): June 2026 - Claude Haiku 5.5 (Anthropic): June 2026 - Claude Opus 5.5 (Anthropic): June 2026 - Claude Sonnet 5.5 (Anthropic): June 2026 - Claude Opus 5 (Anthropic): May 2026 - Grok 4.7 (xAI): May 2026 - GPT-6 Luna (OpenAI): May 18, 2026 - GPT-6 Astra (OpenAI): April 30, 2026 - GPT-6.1 Sol (OpenAI): April 30, 2026 - GPT-6 Sol (OpenAI): April 20, 2026 - Gemini 3.8 Flash (Google): March 2026 - Gemini 4 Argon (Google): March 2026 - GPT-5.6 Sol (OpenAI): February 16, 2026 - Claude Fable 5 (Anthropic): January 2026 - Claude Opus 4.7 (Anthropic): January 2026 - Claude Opus 4.8 (Anthropic): January 2026 - Claude Sonnet 5 (Anthropic): January 2026 - Grok 4.6 (xAI): January 2026 - MAI-Code-1.1-Flash (Microsoft): December 2025 - GPT-5.5 (OpenAI): December 1, 2025 - Claude Sonnet 4.6 (Anthropic): August 2025 - GPT-5.3-Codex (OpenAI): August 31, 2025 - GPT-5.4 (OpenAI): August 31, 2025 - GPT-5.4 Mini (OpenAI): August 31, 2025 - Claude Opus 4.5 (Anthropic): May 2025 - Claude Opus 4.6 (Anthropic): May 2025 - Claude Haiku 4.5 (Anthropic): February 2025 - Claude Sonnet 4.5 (Anthropic): January 2025 - Gemini 2.5 Flash (Google): January 2025 - Gemini 2.5 Pro (Google): January 2025 - Gemini 3 Flash (Google): January 2025 - Gemini 3.1 Pro (Google): January 2025 - GPT-5 (OpenAI): September 30, 2024 - GPT-5-Codex (OpenAI): September 30, 2024 - GPT-5.1 (OpenAI): September 30, 2024 - Llama 4 Maverick (Meta): August 2024 - GPT-4.1 (OpenAI): June 1, 2024 - o3 (OpenAI): June 1, 2024 - GPT-5 Mini (OpenAI): May 31, 2024 - GPT-4o (OpenAI): October 1, 2023 --- Checked Oct 17, 2026 against [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog), [GitHub Advisory Database](https://github.com/advisories) and [endoflife.date](https://endoflife.date). Full report: https://stackprism.ai/reports/2026-09