Sep 152026 Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds Attackers exploit Marimo CVE-2026–39987, with one human operator pivoting to an SSH bastion in eight seconds after initial access.