IT security 2026-07-13

Level Watchful — 52/100 — 2026-07-13

Watchful day: 6 stories ranked, 1 of the top 6 reported as actively exploited, 1 flaw newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Cisco IOS Cross-Site Request Forgery Vulnerability (72/100).

1. Cisco IOS Cross-Site Request Forgery Vulnerability — 72/100 (CVE-2008-4128)
2. CVE-2026-13221 — Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently i… — 35/100 (CVE-2026-13221)
3. zephyrproject zephyr: parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form "a.b.c.d:port")… — 30/100 (CVE-2026-10666)
4. ollyo helix ultimate: Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7 - The J… — 26/100 (CVE-2026-57830)
5. fossies gawk: Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). — 20/100 (CVE-2026-40469)
6. fossies gawk: Integer overflow vulnerability has been found in "builtin.c" program file of gawk. — 8/100 (CVE-2026-40468)