IT security 2026-08-01

Level Calm — 25/100 — 2026-08-01

Calm day: 3 stories ranked, 0 of the top 3 reported as actively exploited, 0 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: CVE-2026-17351 — The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's exe… (29/100).

1. CVE-2026-17351 — The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's exe… — 29/100 (CVE-2026-17351)
2. CVE-2026-14537 — Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0… — 24/100 (CVE-2026-14537)
3. johnsoncontrols fms employee: Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows… — 16/100 (CVE-2026-21662)