What were the most critical CVEs disclosed this week?

This week's roundup covers 10 vulnerability disclosures analyzed by Sherlock Forensics. 1 scored 9.0 or above (critical) and 9 rated high. Each CVE is grouped by vendor and assessed for real-world exploitability with patching priorities.

How should organizations respond to new CVE disclosures?

Start with automated vulnerability scanning against new disclosures within 24 hours. Patch critical and actively exploited vulnerabilities within 72 hours. Deploy compensating controls for anything you cannot patch immediately. Validate that your patches actually work. Sherlock Forensics managed security service automates this entire workflow.

Where can I get professional help responding to these vulnerabilities?

Sherlock Forensics offers emergency CVE response assessments with 24-hour turnaround to verify whether your deployment is vulnerable and test whether your compensating controls block exploitation. Managed security clients receive automated alerting when new CVEs affect their technology stack. Contact 888.883.4550 for immediate assistance.

Weekly Security Roundup: August 24 to September 06, 2026

The Week in Security

Other had 5 vulnerabilities this week including Db2 Mirror For I OS Command Injection (CVSS 9.9 CRITICAL) (CVSS 9.9). IBM had 1 high-severity issues worth watching. Linux Kernel had 3 high-severity issues worth watching.

We tracked 10 vulnerabilities this week. 1 scored 9.0 or above. If you only have time for one thing today, scroll to "What To Do This Week" at the bottom.

Other Patches 5 Vulnerabilities

5 vulnerabilities across Other products this week. The worst: CVE-2026-17186 (CVSS 9.9) lets attackers run code on your systems. Patch now if you run Other.

CVE-2026-17186: Db2 Mirror For I OS Command Injection (CVSS 9.9 CRITICAL) (CVSS 9.9)
CVE-2026-76395: Ai Toolkit Deserialization of Untrusted Data (CVSS 8.8 HIGH) (CVSS 8.8)
CVE-2026-50736: Pglogical SQL Injection (CVSS 7.5 HIGH) (CVSS 7.5)
CVE-2026-42043: Axios Server-Side Request Forgery (CVSS 7.2 HIGH) (CVSS 7.2)
CVE-2026-44495: Axios Code Injection (CVSS 7.0 HIGH) (CVSS 7.0)

IBM Hit With CVSS 8.2

CVE-2026-16943 scores a 8.2. IBM lets attackers run code on your systems.

CVE-2026-16943: IBM VIOS Out-of-Bounds Write (CVSS 8.2 HIGH) (CVSS 8.2)

Linux Kernel Patches 3 Vulnerabilities

3 vulnerabilities across Linux Kernel products this week. The worst: CVE-2026-64270 (CVSS 7.8) lets attackers run code on your systems. Patch now if you run Linux Kernel.

CVE-2026-64270: Linux Kernel Out-of-Bounds Write (CVSS 7.8 HIGH) (CVSS 7.8)
CVE-2026-43500: Linux Kernel Out-of-Bounds Write (CVSS 7.8 HIGH) (CVSS 7.8)
CVE-2025-38117: Linux Kernel Use After Free (CVSS 7.8 HIGH) (CVSS 7.8)

Red Hat Hit With CVSS 7.3

CVE-2026-71226 scores a 7.3. Red Hat lets attackers run code on your systems.

CVE-2026-71226: Red Hat Hardened Images Use After Free (CVSS 7.3 HIGH) (CVSS 7.3)

By the Numbers

Total CVEs analyzed	10
Critical (9.0+)	1
High (7.0-8.9)	9
Remote code execution	9
Authentication bypass	1
Cross-site scripting	0
SQL injection	0

What To Do This Week

One action item per vendor. Start at the top and work down.

Other: Update immediately. 1 critical-severity issues patched this week.
IBM: Review and patch 1 high-severity vulnerabilities when possible.
Linux Kernel: Review and patch 3 high-severity vulnerabilities when possible.
Red Hat: Review and patch 1 high-severity vulnerabilities when possible.