🛡️ Cyber Times — CISO Intelligence Update
Thursday, 27 August 2026 · Coverage: 26 Aug 2026 08:00 IST → 27 Aug 2026 08:00 IST
The high-confidence sweep produced 38 publishable records. This edition presents 7 source-linked updates across 1 security domains; 7 are marked for priority review.
🛡️ Vulnerabilities Worth Attention
CVE-2026-60004 — Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
CRITICAL — NVD CVSS 9.8 (critical). Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
Defender action: Confirm affected versions in the asset inventory, review the vendor advisory, and prioritize remediation by exposure.
Validation: primary source · Published: 27 Aug 2026 08:04 IST Sources: NVD · The Hacker News · Help Net Security · Security Affairs
CVE-2026-65956 — KubePi is a Kubernetes multi-cluster management panel
CRITICAL — NVD CVSS 10.0 (critical). KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 1.6.15, the SSO configuration API endpoints are exposed on the same public routing boundary as the SSO login and callback endpoints, so SSO, OIDC, and SAML management operations can be reached without administrator authorization. Because reading, creating, and updating the global SSO configuration is not…
Defender action: Confirm affected versions in the asset inventory, review the vendor advisory, and prioritize remediation by exposure.
Validation: primary source · Published: 27 Aug 2026 04:47 IST Sources: NVD
CVE-2026-77554 — A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command…
CRITICAL — NVD CVSS 10.0 (critical). A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device.
Defender action: Confirm affected versions in the asset inventory, review the vendor advisory, and prioritize remediation by exposure.
Validation: primary source · Published: 26 Aug 2026 16:46 IST Sources: NVD
CVE-2026-77550 — A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS…
CRITICAL — NVD CVSS 10.0 (critical). A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.
Defender action: Confirm affected versions in the asset inventory, review the vendor advisory, and prioritize remediation by exposure.
Validation: primary source · Published: 26 Aug 2026 16:46 IST Sources: NVD
CVE-2026-77537 — A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command…
CRITICAL — NVD CVSS 10.0 (critical). A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.
Defender action: Confirm affected versions in the asset inventory, review the vendor advisory, and prioritize remediation by exposure.
Validation: primary source · Published: 26 Aug 2026 15:46 IST Sources: NVD
CVE-2026-77553 — A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to…
CRITICAL — NVD CVSS 9.9 (critical). A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.
Defender action: Confirm affected versions in the asset inventory, review the vendor advisory, and prioritize remediation by exposure.
Validation: primary source · Published: 26 Aug 2026 16:46 IST Sources: NVD
CVE-2026-77548 — A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to…
CRITICAL — NVD CVSS 9.9 (critical). A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.
Defender action: Confirm affected versions in the asset inventory, review the vendor advisory, and prioritize remediation by exposure.
Validation: primary source · Published: 26 Aug 2026 16:46 IST Sources: NVD
💡 Defensive Priority
Open the linked primary or corroborating evidence before changing production systems. Confirm asset exposure, use vendor guidance for remediation, and retain the source links with the operational change record.
Collection: 2,727 records inspected · 134 passed collection filters · 38 passed the high-confidence evidence gate · 27/28 source endpoints available. Automated intelligence is a triage aid; verify exposure and remediation against the linked primary advisory.