Live· 13 threats · Wednesday, Sep 9· last check 2026-11-04 11:07 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

Wednesday, Sep 9

Most severe in everything

CRITICAL9.8

EXPLOITED IN THE WILD

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an…Check Point Multiple Products

HIGH8.8

EXPLOITED IN THE WILD

Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary…Google Chromium V8

CRITICAL9.6

AWS Postgres MCP server: read-only bypass allows OS commands on host

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in bq-sdist-probe-vrp (PyPI)bq-sdist-probe-vrp

Wednesday, Sep 9

HIGH7.8functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Importfunctype-mcp-serverAI agents & MCP2026-06-20 17:12 UTCby EPSS–FIX 1.4.4 MEDIUMINCIDENTRender: Elevated Build and Deploy Times in the Oregon RegionRenderVendor2026-09-09 21:26 UTCby status page–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in bq-sdist-probe-vrp (PyPI)bq-sdist-probe-vrpPackage2026-09-09 19:01 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in bq-build-probe-vrp-2026 (PyPI)bq-build-probe-vrp-2026Package2026-09-09 19:01 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in websetup (PyPI)websetupPackage2026-09-09 14:00 UTCby osv-malicious–UNINSTALL CRITICAL9.8EXPLOITEDImproper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an…Check Point Multiple ProductsVendor2026-09-09 13:20 UTCby CISA KEV–FIX r81.10.17 MEDIUMINCIDENTDigitalOcean: Power Degradation impacting GPU Performance in ATL1DigitalOceanVendor2026-09-09 10:47 UTCby status page–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in databricks-webapp-navigation-homepage (PyPI)databricks-webapp-navigation-homepagePackage2026-09-09 06:56 UTCby osv-malicious–UNINSTALL MEDIUMNOT SCOREDCVE-2026-85788 - Issue with awslabs mysql-mcp-serverAI agents & MCP2026-09-09by Vendor & lab pages–WHAT TO DO HIGHNOT SCOREDCVE-2026-87911 - Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-serverAI agents & MCP2026-09-09by Vendor & lab pages–WHAT TO DO CRITICAL9.6AWS Postgres MCP server: read-only bypass allows OS commands on hostAI agents & MCP2026-09-09by EPSS–WHAT TO DO MEDIUM5.7AWS mysql-mcp-server: SQL inline comments bypass read-only mode checksAI agents & MCP2026-09-09by EPSS–WHAT TO DO HIGH8.8EXPLOITEDOut of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary…Google Chromium V8Vendor2026-09-09by CISA KEV–FIX 153.0.8010.36