Digest · Thursday
Security digest: May 14, 2026
1 known exploited (cisa kev) addition and 18 critical advisories.
All digests · RSS · Markdown
Take stock
- Do you run any of these? Cisco Catalyst SD-WAN. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-05-17.
- npm: 11 critical advisories (
deepseek-tui,n8n,@samanhappy/mcphub,sanitize-html,@strapi/strapi,electerm,flowise,vm2). Check withnpm audit (or: npm ls <package>). - Go: 3 critical advisories (
github.com/portainer/portainer,github.com/openclaw/crabbox). Check withgovulncheck ./.... - crates.io (Rust): 2 critical advisories (
deepseek-tui,deepseek-tui-cli). Check withcargo audit. - Maven: 1 critical advisory (
com.amazon.redshift:redshift-jdbc42). Check withmvn dependency:tree -Dincludes=<groupId>:<artifactId>. - NuGet: 1 critical advisory (
Marten). Check withdotnet list package --vulnerable --include-transitive. - PyPI: 1 critical advisory (
utcp-cli). Check withpip-audit (or: pip show <package>). - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.
Known exploited (CISA KEV) 1
Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.
| CVE | Product and flaw | CISA due |
|---|---|---|
| CVE-2026-20182 | Cisco Catalyst SD-WAN Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | 2026-05-17 |
Critical advisories by ecosystem 18
GitHub-reviewed advisories rated critical, published this day (Pacific time).
npm 11
Check: npm audit (or: npm ls <package>)
- DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval CVE-2026-45311 CVSS 9.6 Critical
deepseek-tui>= 0.3.0, < 0.8.23 → fixed in 0.8.23;deepseek-tui-cli>= 0.3.0, < 0.8.23 → fixed in 0.8.23;deepseek-tui>= 0.3.0, < 0.8.23 → fixed in 0.8.23 - n8n Has an XML Node Prototype Pollution Patch Bypass CVE-2026-44791 CVSS 9.4 Critical
n8n< 1.123.43 → fixed in 1.123.43;n8n>= 2.21.0, < 2.22.1 → fixed in 2.22.1;n8n>= 2.0.0-rc.0, < 2.20.7 → fixed in 2.20.7 - @samanhappy/mcphub: SSE Endpoint Accepts Arbitrary Username from URL Path Without Authentication, Enabling User Impersonation GHSA-wf8q-wvv8-p8jf CVSS 9.1 Critical
@samanhappy/mcphub< 0.12.15 → fixed in 0.12.15 - Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html` CVE-2026-44990 CVSS 9.3 Critical
sanitize-html= 2.17.3 → fixed in 2.17.4 - Strapi may leak sensitive data via relational filtering due to lack of query sanitization CVE-2026-27886 CVSS 9.2 Critical
@strapi/strapi>= 4.0.0, < 5.37.0 → fixed in 5.37.0 - Electerm: Importing unsafe bookmark data could lead to unsafe operation when clicking local type bookmark CVE-2026-45058 CVSS 9.4 Critical
electerm<= 3.8.8 → no fix listed - n8n: HTTP Request Node Pagination Prototype Pollution to RCE CVE-2026-44789 CVSS 9.4 Critical
n8n< 1.123.43 → fixed in 1.123.43;n8n>= 2.21.0, < 2.22.1 → fixed in 2.22.1;n8n>= 2.0.0-rc.0, < 2.20.7 → fixed in 2.20.7 - FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape CVE-2026-46442 CVSS 9.4 Critical
flowise<= 3.1.1 → fixed in 3.1.2 - Electerm Local code through electerm's single-instance socket CVE-2026-45353 CVSS 9.3 Critical
electerm>= 3.0.6, <= 3.8.8 → fixed in 3.9.0 - n8n Has an Arbitrary File Read via Git Node CVE-2026-44790 CVSS 9.4 Critical
n8n< 1.123.43 → fixed in 1.123.43;n8n>= 2.21.0, < 2.22.1 → fixed in 2.22.1;n8n>= 2.0.0-rc.0, < 2.20.7 → fixed in 2.20.7 - vm2 Has a Sandbox Breakout Using Async Generator CVE-2026-45411 CVSS 9.8 Critical
vm2<= 3.11.2 → fixed in 3.11.3
Go 3
Check: govulncheck ./...
- Portainer missing authorization on Docker plugin endpoints, which allows host RCE CVE-2026-44848 CVSS 9.4 Critical
github.com/portainer/portainer>= 2.33.0, < 2.33.8 → fixed in 2.33.8;github.com/portainer/portainer>= 2.39.0, < 2.39.2 → fixed in 2.39.2;github.com/portainer/portainer>= 2.40.0, < 2.41.0 → fixed in 2.41.0 - Crabbox: environment variable exposure vulnerability CVE-2026-8634 CVSS 9.3 Critical
github.com/openclaw/crabbox< 0.12.0 → fixed in 0.12.0 - Portainer has an endpoint security bypass via Swarm service create/update CVE-2026-44849 CVSS 9.4 Critical
github.com/portainer/portainer>= 2.33.0, < 2.33.8 → fixed in 2.33.8;github.com/portainer/portainer>= 2.39.0, < 2.39.2 → fixed in 2.39.2;github.com/portainer/portainer>= 2.40.0, < 2.41.0 → fixed in 2.41.0
crates.io (Rust) 2
Check: cargo audit
- DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval CVE-2026-45311 CVSS 9.6 Critical
deepseek-tui>= 0.3.0, < 0.8.23 → fixed in 0.8.23;deepseek-tui-cli>= 0.3.0, < 0.8.23 → fixed in 0.8.23;deepseek-tui>= 0.3.0, < 0.8.23 → fixed in 0.8.23 - DeepSeek TUI: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files CVE-2026-45374 CVSS 9.6 Critical
deepseek-tui< 0.8.26 → fixed in 0.8.26
Maven 1
Check: mvn dependency:tree -Dincludes=<groupId>:<artifactId>
- Amazon Redshift Vulnerable to Remote Code Execution via Unsafe Class Loading CVE-2026-8178 CVSS 9.2 Critical
com.amazon.redshift:redshift-jdbc42< 2.2.2 → fixed in 2.2.2
NuGet 1
Check: dotnet list package --vulnerable --include-transitive
- Marten has an injection vulnerability in its full-text search regConfig parameter CVE-2026-45288 CVSS 9.8 Critical
Marten<= 8.36 → fixed in 8.37.0
PyPI 1
Check: pip-audit (or: pip show <package>)
- utcp-cli Vulnerable to Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol CVE-2026-45369 CVSS 10.0 Critical
utcp-cli<= 1.1.1 → fixed in 1.1.2