Carahsoft 5G Summit, Cloudera Spark GPU, and security flaw disclosures - Week of August 17, 2026

Overview of Recent Activity

Recent reporting covered enterprise 5G and AI infrastructure planning, including a Carahsoft and FedInsider 5G Summit focused on open source Open RAN, integrated sensing and communication, and AI for 5G and 6G. In security, CISA-related reporting described remotely exploitable UPnP exposure in a Calix residential gateway firmware and multiple authentication and memory corruption issues in an RDK-B WebUI. In data and AI operations, Cloudera added GPU acceleration to Apache Spark 4.1, while Netskope described AI red-team testing methods and governance frictions in financial services. Network and data center coverage included optical transport revenue growth and a forecast for data center physical infrastructure reaching $120 billion by 2030.

Key Themes and Developments

H3: Technology Releases & Product Enhancements

Cloudera enabled native GPU acceleration for Apache Spark 4.1 in Cloudera Data Engineering, using NVIDIA CUDA-X libraries and a cuDF plug-in, with the stated goal of shortening Spark processing time without code changes. Cloudera said the capability would be available as part of Cloudera Anywhere Cloud announced at EVOLVE Singapore on August 20, 2026.

Teleport added Linux Desktop support to its Infrastructure Identity Platform, described as operating as a protected resource type. Teleport said Linux desktops would use cryptographic identity, just-in-time access request workflows, live session monitoring, and audit logs, and it said the update was available in August.

H3: Partnerships & Ecosystem Engagement

RegScale collaborated with Microsoft to support FedRAMP readiness on Microsoft Azure, framing FedRAMP 20x as shifting security assurance toward continuous, automated validation. RegScale said it mapped FedRAMP 20x principles to continuous controls validation and reporting in real time against FedRAMP’s Key Security Indicators.

Carahsoft said it co-hosted its fourth annual 5G Summit with FedInsider at the Carahsoft Conference & Collaboration Center in Reston, with speakers including representatives from NTIA, Ericsson, GSA, OCUDU, Dell Technologies, USCG, the U.S. Army, and T-Mobile. Carahsoft also cited sponsor participation from Dell, Ericsson, Tiami Networks, and T-Mobile.

H3: Infrastructure, Platform, or Deployment Updates

Reporting on AI infrastructure economics highlighted memory cost constraints for AI systems. Dell’Oro Group projected server DRAM average selling prices reaching about $10/GB in 2026 and moderating toward the $5/GB range by 2030, while it projected high-end accelerator HBM capacity to exceed 500 GB by 2030.

Dell’Oro Group reported that optical transport equipment revenue grew 15% year-over-year in 2Q 2026, and it said data center interconnect revenue from IPoDWDM ZR/ZR+ and WDM systems rose 45% year-over-year. It also projected worldwide data center physical infrastructure manufacturer revenue to reach $120 billion by 2030, with a 22% CAGR from 2025.

H3: Additional Updates from Other Organizations

Netskope described two sandbox experiments where frontier AI models tested its product code, including memory corruption hunting. The company said one approach used isolated sandbox laboratories to look for crashes, while a second approach provided more AI control and described verification by a separate AI system.

Netskope also cited survey findings from 100 North American financial services IT leaders, reporting 62% adopted managed third-party AI applications and stating that only 1 in 100 respondents believed they could accelerate AI adoption without compromising security or operational integrity. Rapid7’s Q2 2026 report said newly exploited vulnerabilities increased by up to 40% and reported that 62% of newly exploited vulnerabilities were categorized as “holy grail” flaws.

Full Update Index

Included sources: FedInsider and Carahsoft co-host Carahsoft’s fourth annual 5G Summit in Reston, Va., on Aug. 25, 2026; CISA says Calix EXOS 6.6.47 exposes UPnP WANIPConnection on TCP 5000; The Growing Memory Tax on AI Infrastructure; Optical Transport Equipment Market Grew 15 Percent Year-over-Year in 2Q 2026, According to Dell’Oro Group; Cloudera Adds NVIDIA CUDA-X GPU Acceleration to Apache Spark 4.1; ABI Research Reports Industrial AI Activity Rose in 2025; Carahsoft Technology Corp. Receives NightDragon 2025 Partner Award; Netskope details two experiments using frontier AI to test its code; Netskope details survey findings on balancing AI speed and security; VU#874418: RDK-B WebUI contains multiple vulnerabilities; Cribl acquires Radiant Security technology assets for AI SOC operations center; RegScale Collaborates with Microsoft to Support FedRAMP Readiness on Azure; Pindrop Receives Third Circuit Ruling on Illinois BIPA Financial-Institution Exemption; Cloudera Introduces Cloudera Anywhere Cloud for Production Data and AI Apps; Dell’Oro Group forecasts data center physical infrastructure revenue to reach $120 billion by 2030; Allot chairs post-quantum communications consortium supported by Israel’s Innovation Authority; Teleport Adds Linux Desktop Support in Infrastructure Identity Platform; Rapid7 Quarterly Threat Landscape Report Cites Faster Q2 2026 Exploitation; Illumio Inc. named Leader and “Customer Favorite” in Forrester Wave; Space raises $2.4 million pre-seed led by a16z Speedrun; Dell’Oro Group Reports Worldwide RAN Revenue Growth Continues in 2Q 2026; Concentric AI launches vision-model feature for sensitive document discovery; Netskope Explains Blockchain Dead Drop Resolvers for C2 Fetches; Carahsoft Strengthens Public Sector Cybersecurity Through Key Cybersecurity and Zero Trust Government Events in 2026; NVIDIA secures PORTS-Pike capacity for OpenAI AI compute.

1. FedInsider and Carahsoft Co-Host Carahsoft’s Fourth Annual 5G Summit in Reston, Va., on Aug. 25, 2026
   Carahsoft will co-host its fourth annual 5G Summit with FedInsider in Reston, Virginia, on Aug. 25, 2026. The agenda covers Open RAN, ISAC for sensing applications, and using AI to extend 5G investments while preparing for 6G. Sessions, featured speakers, partner sponsors, and attendee CPE eligibility are listed.
2. CISA says Calix EXOS 6.6.47 exposes UPnP WANIPConnection on TCP 5000
   Calix GS7 XGS GS5239XG EXOS/6.6.47 has an unauthenticated UPnP WANIPConnection flaw on TCP 5000, enabling NAT mapping changes.
3. The Growing Memory Tax on AI Infrastructure
   In his latest blog, Baron Fung examines how DRAM inflation and rising HBM complexity are reshaping server economics and making memory efficiency critical to AI infrastructure growth through 2030. The post The Growing Memory Tax on AI Infrastructure appeared first on Dell'Oro Group.
4. Optical Transport Equipment Market Grew 15 Percent Year-over-Year in 2Q 2026, According to Dell’Oro Group
   Dell’Oro Group reports Optical Transport revenue rose 15% year-over-year, fueled by DCI growth, cloud provider demand, and North American AI infrastructure investment in 2Q 2026. Learn more: The post Optical Transport Equipment Market Grew 15 Percent Year-over-Year in 2Q 2026, According to Dell’Oro Group appeared first on Dell'Oro Group.
5. Cloudera Adds NVIDIA CUDA-X GPU Acceleration to Apache Spark 4.1
   Cloudera said it enabled native GPU acceleration for Apache Spark 4.1 in Cloudera Data Engineering using NVIDIA CUDA-X and cuDF.
6. ABI Research Reports Industrial AI Activity Rose in 2025
   ABI Research said tracked industrial AI developments rose to more than 210 in 2025, led by partnerships, generative AI, and physical AI.
7. Carahsoft Technology Corp. Receives NightDragon 2025 Partner Award
   Carahsoft said it was named NightDragon’s 2025 Channel Partner of the Year, citing its role as Master Government Aggregator since 2021 and related event and engagement activities.
8. Netskope details two experiments using frontier AI to test its code
   Netskope’s security red team describes sandbox tests using frontier AI models to probe its code, including memory corruption hunting and verification.
9. Netskope details survey findings on balancing AI speed and security
   Netskope’s survey of 100 financial services IT leaders finds most can’t scale AI adoption without risking security or operational integrity.
10. VU#874418: RDK-B WebUI contains multiple vulnerabilities
    Overview RDK Central RDK-B WebUI version, rdkb-2025q4-kirkstone, contains multiple vulnerabilities involving memory corruption, improper authentication, race conditions, and insufficient input validation. An attacker with network access to an affected WebUI may be able to bypass authentication, obtain administrative access, cause a denial-of-service condition, or corrupt memory within underlying RDK-B processes. Under certain conditions, this memory corruption may potentially be leveraged for arbitrary code execution. Description RDK-B (Reference Design Kit for Broadband) is an open-source software platform used in broadband gateways and related networking devices. The RDK-B WebUI provides a web-based interface for configuring and administering an RDK-B device. Five vulnerabilities have been identified in the RDK-B WebUI. CVE-2026-19505JWT (JSON Web Token) authentication in javascript-templates/source/jst_functions.c does not correctly verify whether a token's cryptographic signature is valid. The application treats both a valid signature and an invalid signature as successful verification because it incorrectly checks the return value from OpenSSL's EVP_VerifyFinal() function. A remote, unauthenticated attacker can craft a JWT with an invalid signature that is still accepted by the WebUI. Successful exploitation allows the attacker to log in as the privileged user and gain administrative access to the device. CVE-2026-19506 The login process in /usr/www2/check.jst uses a shared value to store the result of password verification. Because this value is shared between multiple requests, the application may return one user's authentication result to another user's session. An unauthenticated attacker can send a login request at the same time a legitimate administrator logs in. If the requests are timed correctly, the attacker's session may receive the administrator's successful authentication result, allowing access to the WebUI without knowing the correct password. CVE-2026-19507 The login handler in /usr/www2/check.jst does not limit the length of the password submitted by a user. The application performs SHA-256 hashing on the entire supplied password before rejecting the login attempt. A remote, unauthenticated attacker can submit very large password values to consume excessive CPU resources. Repeated requests can make the WebUI and related services slow or unresponsive, resulting in a denial-of-service condition. CVE-2026-19508 The data parser in javascript-templates/source/jst_post.c does not properly validate malformed input before processing it in memory. A remote, unauthenticated attacker can send a specially crafted request that causes the Duktape WebUI (https://duktape.org/) process to access or modify memory incorrectly. During data parser processing and later during Duktape memory cleanup, indicating that application memory can be corrupted. An attacker may be able to use this vulnerability to cause a denial-of-service and potentially execute arbitrary code, although code execution has not been demonstrated. CVE-2026-19509 The ajaxSet_wireless_network_configuration.jst handler does not properly validate the ssid_number value before passing it to the RDK-B routing service. An authenticated administrator can supply an abnormally large value that causes memory corruption in the native rtrouted process. This condition can crash rtrouted and trigger an RBus service restart. Successful exploitation can cause a denial-of-service. Because the flaw results in native memory corruption, arbitrary code execution may also be possible. Impact A remote, unauthenticated attacker with network access to the RDK-B WebUI may be able to bypass authentication and obtain administrative access to the device. An unauthenticated attacker may also cause memory corruption or resource exhaustion, resulting in denial-of-service. An authenticated administrator may be able to trigger memory corruption in the privileged rtrouted process and result in arbitrary code execution. Successful exploitation of one or more of these vulnerabilities could result in unauthorized administrative access, modification of device configuration, loss of availability, or potentially execution of attacker-controlled code on an affected device. Solution Unfortunately, RDK Central was unreachable to coordinate these vulnerabilities. Until an update is available, administrators should restrict access to the RDK-B WebUI to trusted management networks and authorized hosts. The administrative interface should not be exposed directly to the Internet or other untrusted networks. Acknowledgements Thanks to Mikołaj Pisula and Michał Bernacki for researching and reporting these vulnerabilities. This document was written by Michael Bragg.
11. Cribl acquires Radiant Security technology assets for AI SOC operations center
    Cribl acquired Radiant Security AI SOC technology to autonomously triage, investigate, and resolve alerts using its telemetry platform.
12. RegScale Collaborates with Microsoft to Support FedRAMP Readiness on Azure
    RegScale and Microsoft collaborated to support FedRAMP readiness on Microsoft Azure using compliance automation and continuous controls monitoring.
13. Pindrop Receives Third Circuit Ruling on Illinois BIPA Financial-Institution Exemption
    Third Circuit held Pindrop qualifies as a financial institution under Illinois BIPA via GLBA, exempting it from BIPA consent requirements.
14. Cloudera Introduces Cloudera Anywhere Cloud for Production Data and AI Apps
    Cloudera launched Cloudera Anywhere Cloud for building and scaling production data and AI apps across multi-cloud and on-premises. It supports unified governance.
15. Dell’Oro Group forecasts data center physical infrastructure revenue to reach $120 billion by 2030
    Dell’Oro forecasts DCPI manufacturer revenue will reach $120 billion by 2030, growing 22% CAGR from 2025.
16. Allot chairs post-quantum communications consortium supported by Israel’s Innovation Authority
    Allot will chair a Post-Quantum Communications consortium supported by Israel’s Innovation Authority to develop PQC, QKD, and hybrid approaches.
17. Teleport Adds Linux Desktop Support in Infrastructure Identity Platform
    Teleport added Linux Desktop support as a protected resource in its Infrastructure Identity Platform, applying unified controls to workstations.
18. Rapid7 Quarterly Threat Landscape Report Cites Faster Q2 2026 Exploitation
    Rapid7’s Q2 2026 report said newly exploited vulnerabilities rose from 8% to 40%, with more zero-click flaws, missing authentication, and ransomware geography changes.
19. Illumio Inc. named Leader and “Customer Favorite” in Forrester Wave
    Illumio said it was named a Leader and “Customer Favorite” in Forrester’s Microsegmentation Solutions Q3 2026.
20. Space raises $2.4 million pre-seed led by a16z Speedrun
    Space said it built a distributed filesystem streaming required byte ranges and announced a $2.4M pre-seed.
21. Dell’Oro Group Reports Worldwide RAN Revenue Growth Continues in 2Q 2026
    Dell’Oro Group says worldwide RAN revenue rose modestly in 2Q 2026, extending growth to three quarters while 2026 stays broadly flat.
22. Concentric AI launches vision-model feature for sensitive document discovery
    Concentric AI made a vision-model feature available in its Semantic Intelligence platform to detect passports and U.S. driver licenses by visual signatures.
23. Netskope Explains Blockchain Dead Drop Resolvers for C2 Fetches
    Dead drop resolvers use blockchain reads to fetch malware C2 pointers at runtime, with examples on EVM, Solana, and TON.
24. Carahsoft Strengthens Public Sector Cybersecurity Through Key Cybersecurity and Zero Trust Government Events in 2026
    Carahsoft Technology Corp. announced 2026 cybersecurity and Zero Trust events for U.S. public sector organizations. The release highlights partnerships, buyer’s guides, and an access-to-lab program for demos and training. It lists scheduled summits and forums covering AI security, risk management, cloud, identity, and supply chain security.
25. NVIDIA secures PORTS-Pike capacity for OpenAI AI compute
    NVIDIA secured land, power and shell capacity at PORTS-Pike in Ohio, with OpenAI using the site for 8 IT-GW of AI factory capacity.

The original article was written by Decision Insights Editorial.