Five vulnerabilities entered CISA’s exploited catalog during August 23–29. These Layer8 editorial priorities call for inventory checks, deployment-specific fixes and evidence that maintenance succeeded.
The CISA catalog establishes known exploitation for all five. Addition dates below are not disclosure dates; prioritize exposure and business impact.
| CVE | Applicability and impact | Remediation reviewed October 3 | KEV added |
|---|---|---|---|
| CVE-2026-21962 | Oracle HTTP Server/WebLogic proxy plug-in: unauthenticated data reading or alteration. | Apply the January CPU fix matching the installed release. | Aug 24 |
| CVE-2026-60004 | Gitea ≥1.17, <1.27.1: repository write access required; service-account code execution. | Upgrade to 1.27.1 or a supported successor. | Aug 25 |
| CVE-2026-8452 | NetScaler Gateway/AAA configurations: denial of service. | Standard branches: 14.1-72.61/13.1-63.18 or later. Follow separate FIPS/NDcPP guidance. | Aug 26 |
| CVE-2023-49105 | ownCloud Server: unauthenticated file access, modification or deletion; check deployment and external-storage applicability. | Vendor guidance: 10.13.3 or subscription support patch. Select a currently supported fixed release. | Aug 27 |
| CVE-2019-1068 | Listed SQL Server 2014–2017 branches: authenticated code execution as the Database Engine service account. | Match update to release, service pack and GDR/CU track. | Aug 26 |
Within an agreed Managed IT scope, Layer8 would assign applicable assets to approved maintenance, verify installed fixes and test service functions. Record exceptions and rollback readiness. Patching does not rule out prior compromise; investigate separately where warranted.
Revised source: Remediation reviewed October 3, 2026. The later ownCloud FAQ directs 10.13.3 or a subscription support patch for this issue, superseding the initial fix guidance; 10.13.3 is not presented as today's latest release.