IT security 2026-06-23

Level Critical — 87/100 — 2026-06-23

Critical day: 26 stories ranked, 4 of the top 10 reported as actively exploited, 4 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Ubiquiti UniFi OS Improper Input Validation Vulnerability (85/100).

1. Ubiquiti UniFi OS Improper Input Validation Vulnerability — 85/100 (CVE-2026-34910)
2. Ubiquiti UniFi OS Path Traversal Vulnerability — 68/100 (CVE-2026-34909)
3. Ubiquiti UniFi OS Improper Access Control Vulnerability — 68/100 (CVE-2026-34908)
4. Lantronix EDS5000 Code Injection Vulnerability — 66/100 (CVE-2025-67038)
5. kidocode crawl4ai: Crawl4AI is an open-source LLM friendly web crawler & scraper. — 39/100 (CVE-2026-53753)
6. yt-dlp project yt-dlp: yt-dlp is a command-line audio/video downloader. — 37/100 (CVE-2026-50023)
7. yt-dlp project yt-dlp: yt-dlp is a command-line audio/video downloader. — 37/100 (CVE-2026-50574)
8. CVE-2026-44789 — n8n is an open source workflow automation platform. — 36/100 (CVE-2026-44789)
9. CVE-2026-44791 — n8n is an open source workflow automation platform. — 36/100 (CVE-2026-44791)
10. CVE-2026-44726 — Deno is a JavaScript, TypeScript, and WebAssembly runtime. — 35/100 (CVE-2026-44726)