IT security 2026-07-30

Level Watchful — 54/100 — 2026-07-30

Watchful day: 22 stories ranked, 1 of the top 10 reported as actively exploited, 1 flaw newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability (66/100).

  1. Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability — 66/100 (CVE-2026-20316)
  2. CVE-2026-12118 — IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute a… — 38/100 (CVE-2026-12118)
  3. CVE-2026-14522 — IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote at… — 38/100 (CVE-2026-14522)
  4. CVE-2026-4978 — Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vi… — 38/100 (CVE-2026-4978)
  5. CVE-2026-67208 — Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attack… — 36/100 (CVE-2026-67208)
  6. CVE-2026-17543 — Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP… — 31/100 (CVE-2026-17543)
  7. php php: Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in P… — 31/100 (CVE-2026-17544)
  8. CVE-2026-65883 — Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 -… — 31/100 (CVE-2026-65883)
  9. CVE-2026-48449 — Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arb… — 30/100 (CVE-2026-48449)
  10. CVE-2026-65884 — Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows us… — 30/100 (CVE-2026-65884)