IT security 2026-08-11

Level Critical — 85/100 — 2026-08-11

Critical day: 12 stories ranked, 3 of the top 10 reported as actively exploited, 3 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability (82/100).

1. Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability — 82/100 (CVE-2026-20349)
2. Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability — 77/100 (CVE-2026-68820)
3. Metabase SQL Injection Vulnerability — 68/100 (CVE-2026-72898)
4. CVE-2026-65768 — Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android… — 38/100 (CVE-2026-65768)
5. microsoft azure storage explorer: Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explore… — 37/100 (CVE-2026-57104)
6. CVE-2026-73032 — PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute ar… — 36/100 (CVE-2026-73032)
7. commvault commvault: CommServe contained an allowlist bypass vulnerability affecting command execution authorization. — 35/100 (CVE-2026-13737)
8. commvault commvault: CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operat… — 35/100 (CVE-2026-13738)
9. commvault commvault: A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerabi… — 34/100 (CVE-2026-13739)
10. CVE-2026-72765 — n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. — 34/100 (CVE-2026-72765)