IT security 2026-07-11

Level Tense — 66/100 — 2026-07-11

Tense day: 9 stories ranked, 2 of the top 9 reported as actively exploited, 2 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability (69/100).

  1. iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability — 69/100 (CVE-2026-48939)
  2. Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability — 68/100 (CVE-2026-56291)
  3. CVE-2026-57827 — Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12 - The Joomla ext… — 39/100 (CVE-2026-57827)
  4. broadcom rabbitmq server: RabbitMQ is a messaging and streaming broker. — 30/100 (CVE-2026-57216)
  5. broadcom rabbitmq server: RabbitMQ is a messaging and streaming broker. — 30/100 (CVE-2026-57211)
  6. CVE-2026-59792 — In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID… — 30/100 (CVE-2026-59792)
  7. CVE-2026-57156 — FreeRDP is a free implementation of the Remote Desktop Protocol. — 27/100 (CVE-2026-57156)
  8. CVE-2026-56372 — ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify operation that allow… — 19/100 (CVE-2026-56372)
  9. CVE-2026-57158 — FreeRDP is a free implementation of the Remote Desktop Protocol. — 17/100 (CVE-2026-57158)