Loading story…
CISA warned that PX4 Autopilot contains a critical vulnerability, CVE-2026-1579, that can let an unauthenticated attacker execute arbitrary shell commands through the MAVLink interface. The flaw affects PX4 Autopilot v1.16.0_SITL_latest_stable and stems from MAVLink not requiring cryptographic authentication by default, allowing attackers with interface access to send SERIAL_CONTROL messages that could alter flight paths, crash drones, intercept data, or lock out legitimate operators. CISA rated the issue CVSS 9.8 and mapped it to CWE-306: Missing Authentication for Critical Function.
The advisory said PX4 supports MAVLink 2.0 message signing as its authentication mechanism, and unsigned messages are rejected when signing is enabled. The vulnerability was reported by Dolev Aviv of Cyviation, and CISA said it had no evidence of public exploitation at publication. Because PX4 is used in drones and autonomous vehicles deployed worldwide, the agency said the exposure could affect Transportation Systems, Emergency Services, and the Defense Industrial Base, and urged organizations to reduce network exposure, isolate control systems behind firewalls, use secure remote access such as updated VPNs, assess operational risk before changes, train personnel against phishing, and apply vendor fixes when available.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
On March 31, 2026, CISA issued ICS advisory ICSA-26-090-02 for CVE-2026-1579, rating the flaw critical with a CVSS v3.1 score of 9.8. CISA said the issue could affect drone and autonomous vehicle deployments across transportation, emergency services, and defense sectors, and noted no known public exploitation at publication.
Dolev Aviv of Cyviation identified a vulnerability in PX4 Autopilot v1.16.0_SITL_latest_stable in which MAVLink does not require cryptographic authentication by default, allowing unauthenticated SERIAL_CONTROL messages that can lead to arbitrary shell command execution.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
3 references tracked. Mallory keeps watching after this page renders.
cybersecuritynews.com
Open sourcecisa.gov
Open sourceopennet.me
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Researchers disclosed **CVE-2026-32193**, a Microsoft Copilot hijack that abused an undocumented URL parameter, `?autorun=1`, to bypass the normal user-approval step and automatically run attacker-supplied prompts. By pairing that parameter with crafted input in the `q` field, an attacker could make Copilot operate within a victim’s authenticated session, search connected enterprise data including inbox contents, and send sensitive results to an attacker-controlled server. The attack could be delivered through phishing links, chat messages, webpages, or QR codes, and researchers reported it could continue even if the victim closed the Copilot tab immediately after opening it. Separate reporting tied the issue to a broader attack chain described as moving from an **AKS node root vulnerability** to a Copilot compromise, underscoring how cloud and AI weaknesses can be chained together. Researchers also described a second prompt-injection method that poisoned Copilot’s persistent memory using hidden webpage metadata, allowing later manipulation of Copilot responses and actions. The disclosures highlight risks from undocumented AI features, prompt injection, and trusted-session abuse in enterprise copilots connected to corporate data.
Aug 20, 2026
A critical command injection vulnerability, tracked as CVE-2025-67511, has been identified in the open-source Cybersecurity AI (CAI) framework, which is used for building and deploying AI-powered offensive and defensive automation. The flaw exists in the `run_ssh_command_with_credentials()` function, where only the password and command inputs are properly escaped, leaving the username, host, and port parameters vulnerable to injection. This allows attackers to craft malicious inputs that can execute arbitrary shell commands via AI agents, potentially compromising affected systems remotely. The vulnerability affects all CAI versions up to and including 0.5.9, and no official fix or patch is available as of the latest reports. The issue is classified as critical, with a CVSS v3.1 base score of 9.6 or higher, reflecting the high risk to confidentiality, integrity, and availability. Exploitation requires user interaction, likely through the AI agent's command execution interface, but does not require authentication or elevated privileges. Security advisories recommend that organizations using CAI implement compensating controls and monitor for suspicious activity, as the vulnerability is remotely exploitable and no mitigation has been released. The lack of a patch increases the urgency for defensive measures to prevent potential exploitation in production environments.
Jun 29, 2026
Microsoft disclosed **CVE-2026-48561**, a critical remote code execution flaw in **Microsoft Copilot** caused by **CWE-77 command injection**. The vulnerability carries a **CVSS 3.1 score of 9.6** and can be exploited remotely without privileges, though **user interaction is required**. Microsoft said the issue was **not publicly disclosed** and **not exploited** at the time of publication, and rated exploitation as **less likely**. According to the advisory, an attacker could host a malicious website that causes **Microsoft Edge for Android** to automatically send crafted prompts to Copilot, potentially triggering unintended actions such as accessing or modifying data. Microsoft also warned that successful exploitation could involve a **scope change**, including traversal from a **low-privilege Hyper-V guest** to code execution on the **Hyper-V host**. A security update was available when the advisory was published, and Microsoft credited **Ofek Levin of Enclave** with reporting the bug.
Jul 14, 2026