May 15, 2026 · #57

Episode 57 — 15 May 2026 1. Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin Source: Bleeping Computer Hackers are leveraging a critical authentication bypass vulnerability in the WordPress plugin Burst Statistics to obtain admin-level access to websites. Burst Statistics is a privacy-focused analytics plugin active on 200,000 WordPress sites and marketed as a lightweight... 2. Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks Source: Bleeping Computer Cisco is warning that a critical Catalyst SD-WAN Controller authentication bypass flaw, tracked as CVE-2026-20182, was actively exploited in zero-day attacks that allowed attackers to gain administrative privileges on compromised devices. CVE-2026-20182 has a maximum severity... 3. 18-year-old NGINX vulnerability allows DoS, potential RCE Source: Bleeping Computer An 18-year-old flaw in the NGINX open-source web server, discovered using an autonomous scanning system, can be exploited for denial of service and, under certain conditions, remote code execution. The vulnerability is tracked as CVE-2026-42945 and received a critical... 4. TeamPCP hackers advertise Mistral AI code repos for sale Source: Bleeping Computer The TeamPCP hacker group is threatening to leak source code from the Mistral AI project unless a buyer is found for the data. In a post on a hacker forum, the threat actor is asking $25,000 for a set of nearly 450 repositories. Mistral AI is a French artificial intelligence... 5. On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email Source: The Hacker News Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that it said has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-42897 (CVSS score: 8.1), has been described as a spoofing bug stemming... 6. Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation Source: The Hacker News An anonymous cybersecurity researcher who disclosed three Microsoft Defender vulnerabilities has returned with two more zero-days involving a BitLocker bypass and a privilege escalation impacting Windows Collaborative Translation Framework (CTFMON). The security defects have... 7. PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure Source: The Hacker News Threat actors have been observed attempting to exploit a recently disclosed security vulnerability in PraisonAI, an open-source multi-agent orchestration framework, within four hours of public disclosure. The vulnerability in question is CVE-2026-44338 (CVSS score: 7.3), a... 8. 18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE Source: The Hacker News Cybersecurity researchers have disclosed multiple security vulnerabilities impacting NGINX Plus and NGINX Open, including a critical flaw that remained undetected for 18 years. The vulnerability, discovered by depthfirst, is a heap buffer overflow issue impacting...