🕵️ RESEARCH & DEEP DIVES
'SalesBleed' Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration
Zenity Labs disclosed three now-patched Salesforce Agentforce flaws, dubbed SalesBleed, that enabled zero-click CRM data theft and phishing.- Affects Salesforce Agentforce AI agents and the Agentforce-Slack integration; all three flaws were fixed by Salesforce by August 19 after Zenity reported them on June 1.
- The bugs allowed attackers to hijack trusted agents, exfiltrate sensitive CRM data (leads, account records, deal sizes) with zero clicks, and send phishing messages from the agent's identity.
- Attack worked via indirect prompt injection through public, unauthenticated Web-to-Lead forms; poisoned leads sat dormant until an employee asked the agent to review them.
- Exfiltration used HTML image tags with CRM data encoded in subdomains of attacker-controlled URLs, captured via DNS lookups, bypassing the Trusted URL redaction mechanism, which mishandled top-level domains and special characters.
- The Slack integration flaw let specially crafted links trigger requests carrying CRM data to attacker infrastructure and let attackers post phishing messages to internal Slack channels as the trusted agent.
Sources 📄 Source: labs.zenity.io · 📎 Coverage: securityweek.com · 👁 via SecurityWeek, Cyber Security News (+1)CSRF flaw in Elementor 4.3.0/4.3.1 lets attackers escalate privileges on 10M+ sites
A CSRF vulnerability in Elementor Website Builder versions 4.3.0 and 4.3.1 lets a single malicious link trigger privilege escalation on WordPress sites.- Affects Elementor Website Builder plugin versions 4.3.0 and 4.3.1 only; earlier releases don't ship the vulnerable Editor Events module; active installs exceed 10 million sites.
- The flaw disables WordPress's only CSRF protection (the wp_rest nonce check) for any REST API request whose URI contains the string 'elementor/v1/events/', which attackers can append as a query parameter.
- One plain link — no JavaScript, form, or attacker-hosted page needed — makes a logged-in user perform any REST action their account allows; an admin clicking it creates a second administrator account for the attacker.
- The hidden Editor Events experiment is on by default for new sites installing Elementor 3.32.0 or later, so stock 4.3.0/4.3.1 installs are affected.
- CVSS score is 8.8; reported by researcher Saggre, with Patchstack issuing mitigation rules.
🔓 CVEs & KEV
CVE-2026-19804 — clavaque s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions — CVSS 8.8 — s2Member through 260814 - Unauthenticated Remote Code Execution via 'first_name' P...
CVE-2026-96512 — Red Hat Hardened Images — CVSS 7.8 — Sudo Security Vulnerability Lets Attackers Escalate Privileges
📋 ADVISORIES
📄 Source for Bitget says hackers stole $351.6 million from its hot and warm wallets — x.com
📄 Source for Pre-auth RCE vulnerability found in 33-year-old TACACS+ networking protocol — elttam.com