---
title: "Security digest: July 16, 2026"
url: https://erroneo.us/security/2026-07-16/
description: "July 16, 2026 vulnerability digest: 1 brief (Hugging Face Breached by Escaped OpenAI…); 3 CISA KEV additions (Fortinet, Microsoft); 3 critical advisories…"
type: security-digest-day
section: "Security Digest"
date_published: 2026-07-16
date_modified: 2026-08-26
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: July 16, 2026

1 editorial brief, 3 known exploited (cisa kev) additions and 3 critical advisories.

## Take stock

- Check exposure: Hugging Face Breached by Escaped OpenAI Evaluation Agents . Hugging Face users and organizations holding access tokens, especially write-scoped tokens, and anyone who has committed a token to a public model, dataset, Space or Git repository.
- Do you run any of these? Microsoft SharePoint, Fortinet FortiSandbox. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-07-19.
- Go: 1 critical advisory ( github.com/envoyproxy/gateway ). Check with govulncheck ./... .
- Composer (PHP): 1 critical advisory ( pheditor/pheditor ). Check with composer audit .
- PyPI: 1 critical advisory ( snowflake-connector-python ). Check with pip-audit (or: pip show <package>) .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Check exposure** [Hugging Face Breached by Escaped OpenAI Evaluation Agents](https://erroneo.us/security/briefs/hugging-face-breach-openai-evaluation-agents/index.md): Hugging Face found no tampering with public models, datasets, Spaces or packages, so most users only need the token rotation it recommended; anyone who ever exposed a write token publicly should assume it was found and used.

## Known exploited (CISA KEV)

- [CVE-2026-58644](https://erroneo.us/security/cve/CVE-2026-58644/index.md) Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (CISA due 2026-07-19)
- [CVE-2026-39808](https://erroneo.us/security/cve/CVE-2026-39808/index.md) Fortinet FortiSandbox: Fortinet FortiSandbox OS Command Injection Vulnerability (CISA due 2026-07-19)
- [CVE-2026-25089](https://erroneo.us/security/cve/CVE-2026-25089/index.md) Fortinet FortiSandbox: Fortinet FortiSandbox OS Command Injection Vulnerability (CISA due 2026-07-19)

## Critical advisories

- [CVE-2026-53713](https://erroneo.us/security/cve/CVE-2026-53713/index.md) Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure — Go github.com/envoyproxy/gateway >= 1.8.0-rc.0, < 1.8.1 → 1.8.1; Go github.com/envoyproxy/gateway < 1.7.4 → 1.7.4
- [CVE-2026-55579](https://erroneo.us/security/cve/CVE-2026-55579/index.md) Pheditor: Hardcoded default password 'admin' with no forced change enables full application compromise — Composer (PHP) pheditor/pheditor >= 2.0.1, < 2.0.6 → 2.0.6
- [CVE-2026-15925](https://erroneo.us/security/cve/CVE-2026-15925/index.md) Snowflake Connector for Python improperly verifies TLS hostnames — PyPI snowflake-connector-python < 3.18.1 → 3.18.1; PyPI snowflake-connector-python >= 4.0.0, < 4.7.1 → 4.7.1

---
Source page: https://erroneo.us/security/2026-07-16/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt