Live· 11 threats · Wednesday, Aug 19· last check 2026-11-04 12:52 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

Wednesday, Aug 19

Most severe in everything

CRITICAL9.8

EXPLOITED IN THE WILD

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9,…trueconf server

CRITICAL9.8

EXPLOITED IN THE WILD

Vulnerability in NetScaler ADC and NetScaler GatewayCitrix NetScaler

CRITICAL9.5

EXPLOITED IN THE WILD

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9,…trueconf server

CRITICALNO CVE YET

DigitalOcean: Major Service Interruption in MKC1DigitalOcean

Wednesday, Aug 19

LOWINCIDENTMongoDB Atlas: Issues rotating certificates for projects containing only Atlas Free and Flex clustersMongoDB AtlasVendor2026-08-19 20:45 UTCby status page–WHAT TO DO MEDIUMNOT SCOREDblock_buffer: panic corrupts inline buffer positionblock_bufferPackage2026-06-11 15:44 UTCby GitHub Advisories–FIX 0.12.1 MEDIUM5.9langgraph-api: Incomplete assistant authorization in LangGraph Server run creationlanggraph-apiAI agents & MCP2026-06-11 14:41 UTCby EPSS–FIX 0.10.0 MEDIUM5.9langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authenticationlanggraph-apiAI agents & MCP2026-06-11 14:40 UTCby EPSS–FIX 0.10.0 CRITICAL9.5EXPLOITEDA remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9,…trueconf serverVendor2026-08-19 17:21 UTCby CISA KEV–FIX 5.3.9.10013 CRITICAL9.8EXPLOITEDA remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9,…trueconf serverVendor2026-08-19 17:21 UTCby CISA KEV–FIX 5.3.9.10013 MEDIUMINCIDENTLinear: Delayed actions for Linear agent and loops automationsLinearVendor2026-08-19 15:26 UTCby status page–WHAT TO DO HIGH7.7Vikunja: Link-share principal-type confusion enables cross-account team removal, bot takeover, and roster disclosurecode.vikunja.io/apiPackage2026-08-04 12:56 UTCby InfraStack Analyst–FIX 2.5.0 CRITICAL9.8EXPLOITEDVulnerability in NetScaler ADC and NetScaler GatewayCitrix NetScalerInfrastructure2026-08-19 13:17 UTCby InfraStack Analyst–FIX 14.1-73.32 CRITICALINCIDENTDigitalOcean: Major Service Interruption in MKC1DigitalOceanVendor2026-08-19 11:10 UTCby status page–WHAT TO DO MEDIUMINCIDENTAnthropic: Degraded performance for Claude Opus 5 and Claude Haiku 4.5AnthropicVendor2026-08-19 09:42 UTCby status page–WHAT TO DO