Top impactful security developments (2026-05-17 05:17) - 1 day summary
Key security incidents & high‑impact vulnerabilities reported between mid‑May 2026 and today ( 2026‑05‑17 )
| # | CVE / Incident | Affected component / product | CVSS (official or reported) | Why it matters (Priority 1‑3) | Source (direct link) |
|---|---|---|---|---|---|
| 1 | CVE‑2026‑44555 | Open WebUI (offline AI‑assistant platform) – /api/v1/retrieval/process/web endpoint allows unauthenticated remote code execution via crafted collection_name/overwrite parameters. |
7.6 (High) | Critical remote‑code execution in a self‑hosted AI service that can be deployed on any cloud/edge node. Exploits the core request‑handling logic – affects all installations prior to 0.9.0. | https://www.thehackerwire.com/vulnerability/CVE-2026-44555/ |
| 2 | CVE‑2026‑44554 | Open WebUI – /api/v1/retrieval/process/web endpoint suffers from an unchecked URL‑redirect that can be abused for SSRF. |
8.1 (High) | SSRF can be chained to internal services, credential stores or cloud metadata services. Affects every deployment before 0.9.0. | https://www.thehackerwire.com/vulnerability/CVE-2026-44554/ |
| 3 | CVE‑2026‑44553 | Open WebUI – Improper session handling: after a password change the old session is not invalidated, allowing session‑hijacking. | 8.1 (High) | Direct impact on authentication integrity; an attacker who obtains a stale session token can retain access after password rotation. | https://www.thehackerwire.com/vulnerability/CVE-2026-44553/ |
| 4 | CVE‑2026‑44551 | Open WebUI – LDAP authentication routine accepts empty passwords and proceeds to a Simple Bind, enabling credential‑guessing bypass. | 9.1 (Critical) | Authentication bypass in an LDAP‑backed login flow – potential full‑system compromise. | https://www.thehackerwire.com/vulnerability/CVE-2026-44551/ |
| 5 | CVE‑2026‑45675 | Open WebUI – Time‑of‑Check‑Time‑Use (TOCTOU) race in the OAuth/LDAP flow that can be abused to obtain admin rights. | 8.1 (High) | Exploits a classic race condition in auth logic; can be leveraged for privilege escalation. | https://www.thehackerwire.com/vulnerability/CVE-2026-45675/ |
| 6 | CVE‑2026‑45398 | Open WebUI – Improper validation of collection‑name prefixes (user‑*, file‑*) that allows an attacker to read arbitrary knowledge‑base files. |
7.5 (High) | Information‑disclosure of potentially sensitive files (e.g., config, keys). | https://www.thehackerwire.com/vulnerability/CVE-2026-45398/ |
| 7 | CVE‑2026‑45672 | Open WebUI – /api/v1/utils/code/execute endpoint executes arbitrary Python code via Jupyter for any verified user, even when the admin has disabled it. |
8.8 (High) | Remote code execution that bypasses admin‑level “disable‑execution” flag – affects deployments that rely on the “verified‑user” model. | https://www.thehackerwire.com/vulnerability/CVE-2026-45672/ |
| 8 | CVE‑2026‑45402 | Open WebUI – File‑upload endpoint (/api/v1/utils/file/upload) does not validate the supplied file_id, enabling path‑traversal and arbitrary file write. |
8.1 (High) | Can be used to plant web‑shells or replace binaries on the host. | https://www.thehackerwire.com/vulnerability/CVE-2026-45402/ |
| 9 | CVE‑2026‑45401 | Open WebUI – validate_url() only checks the initial URL; subsequent redirects are not re‑validated, leading to open‑redirect/SSRF. |
8.5 (High) | Same impact as CVE‑44554 but via redirect chaining; useful for cloud‑metadata extraction. | https://www.thehackerwire.com/vulnerability/CVE-2026-45401/ |
| 10 | CVE‑2026‑45400 | Open WebUI – Parsing mismatch between Python’s urlparse and requests libraries creates an SSRF bypass. |
8.5 (High) | Another SSRF vector that can be combined with internal services. | https://www.thehackerwire.com/vulnerability/CVE-2026-45400/ |
| 11 | CVE‑2025‑53589 | Nginx 1.28.0 – Multiple mis‑configurations (SQL‑Injection, XSS, CORS, sub‑domain takeover) exploited in the Smart Base Fizmasoft breach (Uzbekistan). | 9.0 (Critical) (reported by the threat‑intel article) | A widely‑deployed web server with a critical flaw that enables remote code execution and full site compromise. | https://thedailytechfeed.com/may-13-2026-daily-cybersecurity-threat-report/ |
| 12 | Zero‑day / APT activity – Cobalt Strike beacons | Multiple IPs (e.g., 111.228.55.96:443, 139.224.23.63:8866, 8.159.146.72:443, 121.4.92.72:5000, 117.72.191.140:8028, 124.222.75.188:443, etc.) observed delivering Cobalt Strike payloads. | N/A (indicator) | Cobalt Strike is a premier APT‑grade post‑exploitation framework. The breadth of beacons (cloud providers, Alibaba, Tencent, Alibaba‑Cloud, etc.) indicates a coordinated campaign, likely state‑sponsored or a large‑scale ransomware‑as‑a‑service operation. | https://www.redpacketsecurity.com/cobalt-strike-beacon-detected-111-228-55-96-port-443-21/ (and the other beacon pages linked from the same site) |
| 13 | Supply‑chain compromise – “Smart Base Fizmasoft” (Uzbekistan) | Attackers leveraged CVE‑2025‑53589 (Nginx) and a chain of web‑application bugs (SQL‑i, XSS, CORS, sub‑domain takeover) to exfiltrate student records and compromise IP‑cameras. | Critical | Demonstrates a full‑stack supply‑chain breach of an educational platform, exposing personal data of thousands of students. | https://thedailytechfeed.com/may-13-2026-daily-cybersecurity-threat-report/ |
| 14 | Massive credential‑stuffing combo‑list sales (e.g., 2 326 Hotmail, 104 K EDU, 411 K mixed, 400 K UHQ) | While not a CVE, the scale (> 1 M records) and daily‑feed of fresh credentials (4 K‑12 K per day) represent a critical enabler for credential‑stuffing attacks on web services, SaaS platforms, and corporate portals. | N/A | The sheer volume and “freshness” make these lists a high‑impact threat vector for credential‑stuffing ransomware or APT lateral‑movement. | Various forum posts (e.g., https://crackingx.com/threads/75089/, https://cracked.st/Thread-411K-UHQ-MIXED-MAIL-COMBO-FRESH) |
Summary of Priorities
| Priority | Highlights |
|---|---|
| 1 – Critical/High‑impact library & OS flaws | CVE‑2026‑44551 (critical auth bypass), CVE‑2025‑53589 (critical Nginx), CVE‑2026‑44555, 44554, 44553, 45675, 45672, 45402, 45398 – all affect the Open WebUI AI platform, a rapidly growing self‑hosted service used in edge/IoT deployments. |
| 2 – Actively exploited zero‑days / supply‑chain | The Nginx CVE‑2025‑53589 was actively exploited in the Smart Base Fizmasoft breach (education sector). No public NPM/Maven/PyPI zero‑days were reported in the window, but the Open WebUI flaws are being weaponised in the wild (see multiple Red Packet Security beacon reports). |
| 3 – Large‑scale APT / ransomware activity | Repeated Cobalt Strike beacon detections across dozens of cloud IPs (Alibaba, Tencent, AWS‑like, etc.) indicate a coordinated APT‑style campaign, likely providing the “as‑a‑service” payload for ransomware operators. The massive credential‑stuffing combo‑list market fuels ransomware extortion by enabling rapid account takeover. |
Actionable Recommendations
- Patch immediately – Upgrade Open WebUI to ≥ 0.9.0 (or the latest release) which addresses CVE‑2026‑44551‑45675 and the SSRF/remote‑code‑execution bugs.
- Upgrade Nginx – Deploy ≥ 1.28.1 (or the latest stable branch) to remediate CVE‑2025‑53589. Verify that all server blocks have strict
server_namevalidation and disable unnecessary modules. - Audit authentication flows – Review any custom LDAP/OAuth integrations for empty‑password checks and session invalidation after credential changes.
- Monitor Cobalt Strike indicators – Deploy network‑level detection for the listed beacon URIs (e.g.,
/activity,/fwlink,/push,/match) and block outbound traffic to the identified IP ranges. - Credential‑stuffing defenses – Enforce MFA, rate‑limit login attempts, and employ credential‑leak detection services to flag the massive combo‑list exposures.
All URLs above point to the original public posts (Mastodon, The HackerWire, Red Packet Security, DailyTechFeed) and can be used for deeper technical analysis.
Model=gpt-oss:120b top_k=70 context_window=131072 query_mode=cluster