IT security 2026-06-30

Level Watchful — 55/100 — 2026-06-30

Watchful day: 27 stories ranked, 1 of the top 10 reported as actively exploited, 1 flaw newly added to CISA’s exploited-vulnerabilities catalogue. Top story: SimpleHelp Authentication Bypass Vulnerability (68/100).

  1. SimpleHelp Authentication Bypass Vulnerability — 68/100 (CVE-2026-48558)
  2. CVE-2026-13773 — IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 Approximately 50 generated CORBA stub classes in WebSpher… — 39/100 (CVE-2026-13773)
  3. CVE-2026-13782 — Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromis… — 39/100 (CVE-2026-13782)
  4. CVE-2026-13772 — IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 's Object Query Language engine resolves attacker-supplie… — 38/100 (CVE-2026-13772)
  5. CVE-2026-11541 — IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0,… — 38/100 (CVE-2026-11541)
  6. CVE-2026-11546 — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request for… — 38/100 (CVE-2026-11546)
  7. CVE-2026-11714 — IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability with the… — 38/100 (CVE-2026-11714)
  8. CVE-2026-13775 — Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised t… — 38/100 (CVE-2026-13775)
  9. CVE-2026-13776 — Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised… — 38/100 (CVE-2026-13776)
  10. CVE-2026-14104 — Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed… — 38/100 (CVE-2026-14104)