IT security 2026-07-12

Level Calm — 31/100 — 2026-07-12

Calm day: 3 stories ranked, 0 of the top 3 reported as actively exploited, 0 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: zephyrproject zephyr: parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form "a.b.c.d:port")… (38/100).

1. zephyrproject zephyr: parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form "a.b.c.d:port")… — 38/100 (CVE-2026-10666)
2. CVE-2026-57827 — Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12 - The Joomla ext… — 30/100 (CVE-2026-57827)
3. CVE-2026-56372 — ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify operation that allow… — 15/100 (CVE-2026-56372)