IT security 2026-07-02

Level Watchful — 59/100 — 2026-07-02

Watchful day: 13 stories ranked, 1 of the top 10 reported as actively exploited, 1 flaw newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability (78/100).

  1. Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability — 78/100 (CVE-2026-45659)
  2. ui unifi protect: A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (… — 38/100 (CVE-2026-55115)
  3. microsoft azure synapse: Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network. — 38/100 (CVE-2026-26145)
  4. ui unifi protect: A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in… — 38/100 (CVE-2026-54408)
  5. ui unifi connect: A malicious actor with access to the network and under certain network configurations could exploit an Improp… — 38/100 (CVE-2026-55116)
  6. microsoft 365 copilot: Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevat… — 36/100 (CVE-2026-41106)
  7. CVE-2026-58453 — JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnera… — 31/100 (CVE-2026-58453)
  8. juicedata juicefs: JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerability that allows u… — 27/100 (CVE-2026-59092)
  9. linuxfoundation containerd: containerd is an open-source container runtime. — 26/100 (CVE-2026-53492)
  10. mediawiki cargo: Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wik… — 21/100 (CVE-2026-14363)