IT security 2026-07-01

Level Watchful — 57/100 — 2026-07-01

Watchful day: 30 stories ranked, 1 of the top 10 reported as actively exploited, 1 flaw newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability (78/100).

  1. Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability — 78/100 (CVE-2026-45659)
  2. CVE-2026-58453 — JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnera… — 36/100 (CVE-2026-58453)
  3. CVE-2026-13773 — IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 Approximately 50 generated CORBA stub classes in WebSpher… — 35/100 (CVE-2026-13773)
  4. linuxfoundation containerd: containerd is an open-source container runtime. — 32/100 (CVE-2026-53492)
  5. CVE-2026-13782 — Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromis… — 30/100 (CVE-2026-13782)
  6. CVE-2026-11541 — IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0,… — 30/100 (CVE-2026-11541)
  7. CVE-2026-13772 — IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 's Object Query Language engine resolves attacker-supplie… — 30/100 (CVE-2026-13772)
  8. CVE-2026-13775 — Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised t… — 29/100 (CVE-2026-13775)
  9. CVE-2026-13776 — Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised… — 29/100 (CVE-2026-13776)
  10. CVE-2026-7663 — IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected MCP project re… — 29/100 (CVE-2026-7663)