This report highlights a range of cyber threats and vulnerabilities discovered or exploited in early September 2026. Among these, CVE-2026-72898 is a SQL injection vulnerability in the self-hosted Metabase tool that was exploited to access an internal reporting database at Mathspace, exposing personal information such as names, email addresses, usernames, and locations. The report also covers Microsoft’s extensive Patch Tuesday addressing 974 vulnerabilities including two privilege escalation zero-days, GitLab’s critical path traversal vulnerability CVE-2026-85706 with a CVSS score of 10.0 affecting versions 18.7 through 19.3.1, and MikroTik RouterOS vulnerabilities that allow passwordless SSH access and privilege escalation. AI-related threats include prompt evasion techniques and sandbox escapes in large language models. Check Point IPS offers protection signatures for several of these threats. The report does not provide patch or affected version details for CVE-2026-72898.

Exploitation of CVE-2026-72898 enabled attackers to access internal reporting databases at Mathspace, exposing personal data including names, email addresses, usernames, and locations. Passwords and academic records were not compromised. Other vulnerabilities mentioned pose risks of privilege escalation, arbitrary file read, and full router compromise, potentially allowing attackers to control affected systems, manipulate network traffic, and access sensitive data. The AI threats could enable unauthorized execution of hidden instructions and data exfiltration across accounts. The report indicates active exploitation of some Microsoft vulnerabilities and public data breaches involving identity documents and financial data.

For CVE-2026-72898, no explicit patch information is provided; however, Check Point IPS offers protection signatures against this SQL injection threat. Users of Metabase should monitor vendor advisories for patches and apply them promptly once available. For other vulnerabilities, Microsoft and GitLab have released official fixes, which should be applied immediately. MikroTik has issued patches for RouterOS vulnerabilities. Organizations should deploy IPS protections where available and follow vendor guidance. No indication that the Metabase vulnerability is already mitigated or that no action is required.