IT security 2026-07-19

Level Calm — 30/100 — 2026-07-19

Calm day: 2 stories ranked, 0 of the top 2 reported as actively exploited, 0 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: CVE-2026-15631 — Impact: @fastify/http-proxy versions from 9.4.0 up to and including 11.5.0 fail to validate the resolved WebS… (30/100).

1. CVE-2026-15631 — Impact: @fastify/http-proxy versions from 9.4.0 up to and including 11.5.0 fail to validate the resolved WebS… — 30/100 (CVE-2026-15631)
2. CVE-2026-16158 — Impact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 build the internal URL cache k… — 30/100 (CVE-2026-16158)