IT security 2026-07-10

Level Tense — 68/100 — 2026-07-10

Tense day: 13 stories ranked, 2 of the top 10 reported as actively exploited, 2 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability (68/100).

1. iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability — 68/100 (CVE-2026-48939)
2. Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability — 67/100 (CVE-2026-56291)
3. broadcom rabbitmq server: RabbitMQ is a messaging and streaming broker. — 39/100 (CVE-2026-57211)
4. broadcom rabbitmq server: RabbitMQ is a messaging and streaming broker. — 39/100 (CVE-2026-57216)
5. CVE-2026-59792 — In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID… — 38/100 (CVE-2026-59792)
6. CVE-2026-57156 — FreeRDP is a free implementation of the Remote Desktop Protocol. — 33/100 (CVE-2026-57156)
7. CVE-2026-53963 — Discourse is an open-source discussion platform. — 27/100 (CVE-2026-53963)
8. openwebui open webui: Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. — 27/100 (CVE-2026-59216)
9. openwebui open webui: Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. — 27/100 (CVE-2026-59214)
10. gpsd project gpsd: gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof t… — 27/100 (CVE-2026-58459)