IT security 2026-07-04

Level Calm — 32/100 — 2026-07-04

Calm day: 4 stories ranked, 0 of the top 4 reported as actively exploited, 0 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: trailofbits fickling: In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditiona… (38/100).

1. trailofbits fickling: In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditiona… — 38/100 (CVE-2026-14535)
2. CVE-2026-57983 — Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a securit… — 30/100 (CVE-2026-57983)
3. CVE-2026-12481 — A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handli… — 30/100 (CVE-2026-12481)
4. CVE-2026-47898 — Improper Restriction of XML External Entity Reference vulnerability in Apache Lucene.Net (Lucene.Net.Analysis… — 13/100 (CVE-2026-47898)