IT security 2026-08-12

Level Tense — 75/100 — 2026-08-12

Tense day: 20 stories ranked, 3 of the top 10 reported as actively exploited, 3 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Metabase SQL Injection Vulnerability (69/100).

  1. Metabase SQL Injection Vulnerability — 69/100 (CVE-2026-72898)
  2. Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability — 65/100 (CVE-2026-20349)
  3. Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability — 60/100 (CVE-2026-68820)
  4. CVE-2026-16860 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an… — 38/100 (CVE-2026-16860)
  5. CVE-2026-17276 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to escalate privileges due to improp… — 38/100 (CVE-2026-17276)
  6. CVE-2026-10534 — IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT p… — 38/100 (CVE-2026-10534)
  7. CVE-2026-10543 — IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a special… — 38/100 (CVE-2026-10543)
  8. CVE-2026-17111 — IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. — 38/100 (CVE-2026-17111)
  9. CVE-2026-17616 — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM V… — 38/100 (CVE-2026-17616)
  10. CVE-2026-18847 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to harvest credentials due to spoo… — 38/100 (CVE-2026-18847)