IT security 2026-07-20

Level Calm — 37/100 — 2026-07-20

Calm day: 4 stories ranked, 0 of the top 4 reported as actively exploited, 0 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: sailpoint identityiq: This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized acc… (38/100).

1. sailpoint identityiq: This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized acc… — 38/100 (CVE-2026-12341)
2. CVE-2026-64620 — FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-based buffer overflow in crypto_rsa_common() (libfr… — 36/100 (CVE-2026-64620)
3. CVE-2026-28220 — Wazuh is a free and open source platform used for threat prevention, detection, and response. — 35/100 (CVE-2026-28220)
4. neutrinolabs xrdp: xrdp is an open source RDP server. — 35/100 (CVE-2026-41521)