Top 10 Security Stories: WordPress XSS Flaw, PHP Vulnerabilities, and VMware ESX Issues Lead Weekly Roundup
Security NEXT has released its weekly ranking of the ten most-read articles published between August 2 and August 8, 2026. The list reflects reader interest in newly disclosed vulnerabilities and security incidents affecting popular software platforms and enterprise systems.
The top story reported an XSS vulnerability in the WordPress login screen, with a patched version now available. Second place went to multiple vulnerabilities in PHP that prompted a security release from the project maintainers.
Third on the list was a serious flaw in pgAdmin 4, which also exposed shortcomings in a previous fix. The fourth article advised organizations to prepare for the summer holiday period and pay special attention to the Patch Tuesday scheduled during the Obon week.
Fifth place covered critical vulnerabilities in VMware ESX and VMware vCenter, accompanied by the release of official patches. The sixth article described an incident in which an employee at a samgyeopsal restaurant skimmed customer credit card data.
Seventh was a warning from US authorities regarding active exploitation of three vulnerabilities affecting Langflow, Tomcat, and another product. Eighth place reported security updates for Chrome that addressed six critical vulnerabilities.
Ninth on the list detailed a serious flaw in the backup management product Veeam ONE. The tenth article reported a data leak at Kodansha after an employee fell victim to a phishing attack, resulting in the exposure of contact information.
Related articles
CISA Adds Progress Kemp LoadMaster Command Injection Flaw CVE-2026-8037 to KEV Catalog After Confirmed Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency has added a known command injection vulnerability in Progress Software's Kemp LoadMaster application delivery product to its Known Exploited Vulnerabilities catalog. The flaw, tracked as CVE-2026-8037, allows unauthenticated attackers to execute arbitrary commands on affected devices because input values are not properly sanitized. CISA issued the addition on August 7, 2026, and directed federal agencies to apply mitigations by August 10, 2026. The same product was previously targeted through another flaw, CVE-2024-1212, which was also added to the KEV list after exploitation. Security researchers note that the vulnerability poses a broad risk because it requires no authentication and can be leveraged to compromise load balancers and related infrastructure. Organizations using Progress Kemp LoadMaster are urged to review vendor advisories and implement available patches without delay.
RCE Vulnerability in AI Code Editors Cursor, VS Code and Google Antigravity Threatens 50 Million Developers
Researchers at AISLE discovered a critical remote code execution vulnerability affecting the AI-powered code editors Cursor, Microsoft Visual Studio Code and Google Antigravity. The flaw allowed attackers to achieve RCE simply by tricking a developer into opening a specially crafted link embedded in a Git commit message. Successful exploitation granted full access to API keys, local files, and the ability to install persistent malware without any visible indicators. The issue stemmed from shared architectural components inherited from the Visual Studio Code codebase, which Cursor and Google Antigravity both adopted. All three vendors have released patches, yet the incident highlights systemic supply-chain risks in the rapidly growing AI-IDE ecosystem. Approximately 50 million developers were potentially exposed before fixes were deployed.
NEOMSA APIM 4.6.0 Eliminates All Critical and High Vulnerabilities Registered in FSTEC BDU
Neoflex has released NEOMSA APIM 4.6.0 with a primary focus on strengthening the security of the platform's supply chain. The team generated an SBOM in CycloneDX format, scanned components and dependencies using Grype, and cross-referenced findings against the FSTEC BDU database. This process reduced total registered vulnerabilities from 57 to 7, completely removing all 10 Critical and 24 High issues. The platform now meets the formal Security Gate criterion requiring zero Critical or High vulnerabilities from the FSTEC database in the final build. Remaining Medium findings are documented and tracked for future updates. The release provides customers with a verified, transparent component inventory that simplifies compliance and integration reviews.
Cisco Publishes 12 Security Advisories Fixing Critical Flaws in Catalyst SD-WAN and IOS XE
Cisco Systems released 12 new security advisories on August 5, 2026, disclosing a total of 23 vulnerabilities across multiple products. Two advisories covering Cisco Catalyst SD-WAN Software and Cisco IOS XE Software received the highest Critical severity rating. The SD-WAN advisory addresses five issues, including CVE-2026-20303, CVE-2026-20304, and CVE-2026-20310, each scoring 9.9 on CVSSv3.1. The IOS XE advisory details seven vulnerabilities, with CVE-2026-20272 rated 9.8 and CVE-2026-20267 rated 9.0. Additional advisories cover flaws in Integrated Management Controller, RoomOS, and Terminal Services Agent. Organizations are urged to apply the hardening releases immediately to mitigate remote exploitation risks.