Actively Exploited Vulnerabilities Target AI Compute Engines and Cloud Platforms

A weekly threat intelligence report highlights active exploitation of vulnerabilities in the Ray AI compute engine (CVE-2025-62593) and MLflow, an open-source machine learning platform (CVE-2026-64849). The report also notes a directory traversal flaw in Syslog servers and a double free flaw allowing remote code execution. Additionally, Zimbra Collaboration servers are vulnerable to arbitrary command execution via SNMP notification handling (CVE-2026-73570).