Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits
2026-09-07T19:24:00Z•6aaf0ae6a1b623ebbd5526e20507e037516905247718f19c2ea26051b2731bd2
CVE-2026-32475CVE-2026-73749CVE-2026-9586AI-agent-abuseAdobe-CommerceElementor-ProLinux-malwareMagentoNorth-KoreaSQL-injectionScreenConnectWordPressarbitrary-file-uploadcritical-infrastructureespionagepatchingremote-code-executionvulnerability-exploitationwebshellzero-day
What happened
SecurityWeek RSS roundup covering actively exploited vulnerabilities, zero-day exploitation, malware and espionage campaigns, compromised remote-management infrastructure, AI-agent abuse, and major security patches. Notable items include exploited Elementor Pro arbitrary file upload (CVE-2026-32475, CVSS 9.8), HPE AOS-CX critical RCE issues (including CVE-2026-73749, CVSS 9.8), and Sangoma Switchvox unauthenticated SQL injection enabling remote code execution (CVE-2026-9586).
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 6aaf0ae6a1b623ebbd5526e20507e037516905247718f19c2ea26051b2731bd2
- Enrichment time
- 2026-09-07T19:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.