IT security 2026-07-03

Level Calm — 37/100 — 2026-07-03

Calm day: 9 stories ranked, 0 of the top 9 reported as actively exploited, 0 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: CVE-2026-57983 — Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a securit… (39/100).

1. CVE-2026-57983 — Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a securit… — 39/100 (CVE-2026-57983)
2. CVE-2026-12481 — A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handli… — 38/100 (CVE-2026-12481)
3. microsoft azure synapse: Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network. — 38/100 (CVE-2026-26145)
4. microsoft 365 copilot: Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevat… — 36/100 (CVE-2026-41106)
5. ui unifi protect: A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (… — 29/100 (CVE-2026-55115)
6. ui unifi protect: A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in… — 29/100 (CVE-2026-54408)
7. ui unifi connect: A malicious actor with access to the network and under certain network configurations could exploit an Improp… — 29/100 (CVE-2026-55116)
8. juicedata juicefs: JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerability that allows u… — 22/100 (CVE-2026-59092)
9. CVE-2026-47898 — Improper Restriction of XML External Entity Reference vulnerability in Apache Lucene.Net (Lucene.Net.Analysis… — 15/100 (CVE-2026-47898)