IT security 2026-08-06

Level Watchful — 57/100 — 2026-08-06

Watchful day: 12 stories ranked, 1 of the top 10 reported as actively exploited, 1 flaw newly added to CISA’s exploited-vulnerabilities catalogue. Top story: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability (78/100).

  1. JetBrains TeamCity Deserialization of Untrusted Data Vulnerability — 78/100 (CVE-2026-63077)
  2. CVE-2026-54489 — Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitiv… — 38/100 (CVE-2026-54489)
  3. CVE-2026-64993 — Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in the collec… — 35/100 (CVE-2026-64993)
  4. CVE-2026-8400 — IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous deliv… — 30/100 (CVE-2026-8400)
  5. CVE-2026-10025 — IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity… — 29/100 (CVE-2026-10025)
  6. CVE-2026-17617 — IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery (SSRF) due t… — 29/100 (CVE-2026-17617)
  7. CVE-2026-9205 — IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() functi… — 29/100 (CVE-2026-9205)
  8. redhat build of keycloak: A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and us… — 29/100 (CVE-2026-16442)
  9. CVE-2026-17556 — A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated att… — 27/100 (CVE-2026-17556)
  10. CVE-2026-71324 — Traefik is an open source HTTP reverse proxy and load balancer. — 27/100 (CVE-2026-71324)