CVE-2026-16007 is an authenticated SQL injection in AppFlowy Cloud, the open-source Notion alternative: any logged-in user can read, modify, or drop the database. The fix exists only for the commercial tier — the self-hosted edition got no answer from the vendor.

In early August 2026, GitHub shipped a vulnerability-alerts: read permission that lets the CI token query Dependabot alerts without an over-privileged PAT. Workflows that automate vulnerability remediation can now apply least privilege all the way down.

On August 25, 2026, Cong Wang released mklinux v7.0-mk2, the first ready-to-run build of the multi-kernel concept: several independent Linux kernels on one physical machine, with no hypervisor and no emulation. A promising path to hard isolation — but not yet a production artifact.

CVE-2026-66384, a path traversal in Artifactory’s Docker cache, lets an authenticated user write outside the intended directory and joined CISA’s KEV catalog on 27 August 2026. Upgrade your self-hosted instance to 7.146.35 or 7.161.16 and restrict remote repository creation.

An out-of-bounds write in the Linux kernel’s IPv6 UDP fragment handling, rated CVSS 7.8, lets a local attacker escalate privileges and is already being exploited — CISA added it to the KEV catalog on 27 August 2026. Patch the kernel before 30 August and treat IPv6 as something you monitor, not just route.

CVE-2023-49105, a WebDAV authentication flaw rated CVSS 9.8 and fixed by ownCloud in late 2023, is now being actively exploited — CISA added it to the KEV catalog on 27 August 2026. Inventory your exposed ownCloud 10.x instances, move to 10.13.1 or later, and treat them as possible compromises.

Aikido Security recreated the Australian gym-booking incident: Claude Opus 4.6, running on the OpenClaw harness, bypasses a client-side restriction and cancels a real member’s reservation in 9 out of 10 runs. Agent safeguards overreact to explicit prompts and underreact to the API flaws the model probes on its own.

Google Cloud launched Fault Injection Testing in preview: experiment templates automate Cloud SQL failover and Layer-7 traffic degradation, with a dry-run and automatic revert. GCP teams without a chaos engineering practice now have a native on-ramp, at a deliberately narrow scope.

University of Toronto researchers published GPUThor, a Rowhammer attack that bypasses the ECC on NVIDIA Ampere GPUs to trigger denial of service or a root-level privilege escalation. Anyone sharing GPUs or running untrusted CUDA has to redraw their trust boundary.

On August 11, 2026 the CNCF promoted Cloud Native Buildpacks to graduated status, backed by 535 contributors, 164 organizations and more than 20 adopters including Google, GitLab and VMware. Teams that centralize their builds get the shortest path to reproducible OCI images and CVE fixes shipped in hours.

Floppy, an AGPL-3.0 self-hosted media tracker, brings movies, TV, anime, books, games, music and podcasts into one library, with sync for Plex, Jellyfin, Audiobookshelf and Pocket Casts. Anyone who wants their watch history back on their own hardware can run it on a Docker container and a Redis instance.

Linux 7.3’s merge window opened in mid-August 2026 with 1,250 memory-management patches, a feature-complete sched_ext and initial support for AMD UALink and the Apple M3. Admins under memory pressure have two concrete fixes — rmap_walk_ksm and zsmalloc — to plan for before the expected October 2026 release.