The CVE Watchtower: Weekly Threat Intelligence Briefing (May 4 – May 10, 2026)

Weekly vulnerability digest reporting 1,928 new disclosures (173 Critical) and active exploitation of high-impact flaws: Palo Alto PAN-OS captive portal RCE, LiteLLM AI gateway data compromise, Ivanti EPMM privilege bypass, Linux kernel local privilege escalations, MetInfo CMS remote code execution, and multiple CVSS 10.0 vm2 sandbox escapes. Immediate actions recommended: restrict exposed portals, apply emergency patches for listed products, audit AI gateways and CMS instances, and move untrusted code execution to stronger isolation.