IT security 2026-06-24

Level Critical — 89/100 — 2026-06-24

Critical day: 23 stories ranked, 4 of the top 10 reported as actively exploited, 4 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Ubiquiti UniFi OS Improper Input Validation Vulnerability (90/100).

1. Ubiquiti UniFi OS Improper Input Validation Vulnerability — 90/100 (CVE-2026-34910)
2. Ubiquiti UniFi OS Improper Access Control Vulnerability — 70/100 (CVE-2026-34908)
3. Ubiquiti UniFi OS Path Traversal Vulnerability — 70/100 (CVE-2026-34909)
4. Lantronix EDS5000 Code Injection Vulnerability — 67/100 (CVE-2025-67038)
5. CVE-2026-39948 — Cacti is an open source performance and fault management framework. — 36/100 (CVE-2026-39948)
6. kidocode crawl4ai: Crawl4AI is an open-source LLM friendly web crawler & scraper. — 30/100 (CVE-2026-53753)
7. yt-dlp project yt-dlp: yt-dlp is a command-line audio/video downloader. — 30/100 (CVE-2026-50023)
8. yt-dlp project yt-dlp: yt-dlp is a command-line audio/video downloader. — 29/100 (CVE-2026-50574)
9. CVE-2026-44791 — n8n is an open source workflow automation platform. — 29/100 (CVE-2026-44791)
10. CVE-2026-44789 — n8n is an open source workflow automation platform. — 29/100 (CVE-2026-44789)