IT security 2026-06-29

Level Watchful — 56/100 — 2026-06-29

Watchful day: 4 stories ranked, 1 of the top 4 reported as actively exploited, 1 flaw newly added to CISA’s exploited-vulnerabilities catalogue. Top story: SimpleHelp Authentication Bypass Vulnerability (67/100).

1. SimpleHelp Authentication Bypass Vulnerability — 67/100 (CVE-2026-48558)
2. Joomlack Page Builder Improper Access Control Vulnerability — 39/100 (CVE-2026-56290)
3. CVE-2026-13751 — Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed server-side… — 37/100 (CVE-2026-13751)
4. CVE-2026-11720 — A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. — 36/100 (CVE-2026-11720)