--- title: "Security digest: May 14, 2026" url: https://erroneo.us/security/2026-05-14/ description: "May 14, 2026 vulnerability digest: 1 CISA KEV addition (Cisco); 18 critical advisories (npm, crates.io (Rust)…). What to patch and who can relax." type: security-digest-day section: "Security Digest" date_published: 2026-05-14 date_modified: 2026-05-14 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: May 14, 2026 1 known exploited (cisa kev) addition and 18 critical advisories. ## Take stock - Do you run any of these? Cisco Catalyst SD-WAN. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-05-17. - npm: 11 critical advisories ( deepseek-tui , n8n , @samanhappy/mcphub , sanitize-html , @strapi/strapi , electerm , flowise , vm2 ). Check with npm audit (or: npm ls ) . - Go: 3 critical advisories ( github.com/portainer/portainer , github.com/openclaw/crabbox ). Check with govulncheck ./... . - crates.io (Rust): 2 critical advisories ( deepseek-tui , deepseek-tui-cli ). Check with cargo audit . - Maven: 1 critical advisory ( com.amazon.redshift:redshift-jdbc42 ). Check with mvn dependency:tree -Dincludes=: . - NuGet: 1 critical advisory ( Marten ). Check with dotnet list package --vulnerable --include-transitive . - PyPI: 1 critical advisory ( utcp-cli ). Check with pip-audit (or: pip show ) . - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Known exploited (CISA KEV) - [CVE-2026-20182](https://erroneo.us/security/cve/CVE-2026-20182/index.md) Cisco Catalyst SD-WAN: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability (CISA due 2026-05-17) ## Critical advisories - [CVE-2026-45311](https://erroneo.us/security/cve/CVE-2026-45311/index.md) DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval — crates.io (Rust) deepseek-tui >= 0.3.0, < 0.8.23 → 0.8.23; crates.io (Rust) deepseek-tui-cli >= 0.3.0, < 0.8.23 → 0.8.23; npm deepseek-tui >= 0.3.0, < 0.8.23 → 0.8.23 - [CVE-2026-44791](https://erroneo.us/security/cve/CVE-2026-44791/index.md) n8n Has an XML Node Prototype Pollution Patch Bypass — npm n8n < 1.123.43 → 1.123.43; npm n8n >= 2.21.0, < 2.22.1 → 2.22.1; npm n8n >= 2.0.0-rc.0, < 2.20.7 → 2.20.7 - [CVE-2026-8178](https://erroneo.us/security/cve/CVE-2026-8178/index.md) Amazon Redshift Vulnerable to Remote Code Execution via Unsafe Class Loading — Maven com.amazon.redshift:redshift-jdbc42 < 2.2.2 → 2.2.2 - [GHSA-wf8q-wvv8-p8jf](https://erroneo.us/security/ghsa/GHSA-wf8q-wvv8-p8jf/index.md) @samanhappy/mcphub: SSE Endpoint Accepts Arbitrary Username from URL Path Without Authentication, Enabling User Impersonation — npm @samanhappy/mcphub < 0.12.15 → 0.12.15 - [CVE-2026-45288](https://erroneo.us/security/cve/CVE-2026-45288/index.md) Marten has an injection vulnerability in its full-text search regConfig parameter — NuGet Marten <= 8.36 → 8.37.0 - [CVE-2026-44848](https://erroneo.us/security/cve/CVE-2026-44848/index.md) Portainer missing authorization on Docker plugin endpoints, which allows host RCE — Go github.com/portainer/portainer >= 2.33.0, < 2.33.8 → 2.33.8; Go github.com/portainer/portainer >= 2.39.0, < 2.39.2 → 2.39.2; Go github.com/portainer/portainer >= 2.40.0, < 2.41.0 → 2.41.0 - [CVE-2026-44990](https://erroneo.us/security/cve/CVE-2026-44990/index.md) Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html` — npm sanitize-html = 2.17.3 → 2.17.4 - [CVE-2026-27886](https://erroneo.us/security/cve/CVE-2026-27886/index.md) Strapi may leak sensitive data via relational filtering due to lack of query sanitization — npm @strapi/strapi >= 4.0.0, < 5.37.0 → 5.37.0 - [CVE-2026-45058](https://erroneo.us/security/cve/CVE-2026-45058/index.md) Electerm: Importing unsafe bookmark data could lead to unsafe operation when clicking local type bookmark — npm electerm <= 3.8.8 → no fix - [CVE-2026-8634](https://erroneo.us/security/cve/CVE-2026-8634/index.md) Crabbox: environment variable exposure vulnerability — Go github.com/openclaw/crabbox < 0.12.0 → 0.12.0 - [CVE-2026-44789](https://erroneo.us/security/cve/CVE-2026-44789/index.md) n8n: HTTP Request Node Pagination Prototype Pollution to RCE — npm n8n < 1.123.43 → 1.123.43; npm n8n >= 2.21.0, < 2.22.1 → 2.22.1; npm n8n >= 2.0.0-rc.0, < 2.20.7 → 2.20.7 - [CVE-2026-46442](https://erroneo.us/security/cve/CVE-2026-46442/index.md) FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape — npm flowise <= 3.1.1 → 3.1.2 - [CVE-2026-45353](https://erroneo.us/security/cve/CVE-2026-45353/index.md) Electerm Local code through electerm's single-instance socket — npm electerm >= 3.0.6, <= 3.8.8 → 3.9.0 - [CVE-2026-45374](https://erroneo.us/security/cve/CVE-2026-45374/index.md) DeepSeek TUI: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files — crates.io (Rust) deepseek-tui < 0.8.26 → 0.8.26 - [CVE-2026-44849](https://erroneo.us/security/cve/CVE-2026-44849/index.md) Portainer has an endpoint security bypass via Swarm service create/update — Go github.com/portainer/portainer >= 2.33.0, < 2.33.8 → 2.33.8; Go github.com/portainer/portainer >= 2.39.0, < 2.39.2 → 2.39.2; Go github.com/portainer/portainer >= 2.40.0, < 2.41.0 → 2.41.0 - [CVE-2026-44790](https://erroneo.us/security/cve/CVE-2026-44790/index.md) n8n Has an Arbitrary File Read via Git Node — npm n8n < 1.123.43 → 1.123.43; npm n8n >= 2.21.0, < 2.22.1 → 2.22.1; npm n8n >= 2.0.0-rc.0, < 2.20.7 → 2.20.7 - [CVE-2026-45369](https://erroneo.us/security/cve/CVE-2026-45369/index.md) utcp-cli Vulnerable to Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol — PyPI utcp-cli <= 1.1.1 → 1.1.2 - [CVE-2026-45411](https://erroneo.us/security/cve/CVE-2026-45411/index.md) vm2 Has a Sandbox Breakout Using Async Generator — npm vm2 <= 3.11.2 → 3.11.3 --- Source page: https://erroneo.us/security/2026-05-14/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt