AI Midnight · History · Weekly reports · The five risk categories · Methodology · Sources · Glossary · Why AIs differ · Analyst track record · Who are the analysts? · Methods log · Experiments and rules fixed in advance · Corrections and replaced versions · What changed this week · Weighting simulator · Public API and widgets · System status · About · Compare two weeks · Timeline of AI developments · JJ HUB · Newsletter · Legal notice · Privacy IT security watch · Daily digests archive · Newly exploited vulnerabilities · Security methodology · Security sources · Security watch status · About the security watch IT security 2026-08-13 Level Calm — 38/100 — 2026-08-13
Calm day: 23 stories ranked, 0 of the top 10 reported as actively exploited, 0 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: CVE-2026-18193 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper va… (39/100).
CVE-2026-18193 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper va… — 39/100 (CVE-2026-18193)CVE-2026-18249 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to i… — 38/100 (CVE-2026-18249)CVE-2026-16867 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of… — 38/100 (CVE-2026-16867)CVE-2026-16961 — IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. — 38/100 (CVE-2026-16961)CVE-2026-17197 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper va… — 38/100 (CVE-2026-17197)CVE-2026-17206 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a buffer overflow. — 38/100 (CVE-2026-17206)CVE-2026-17481 — IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to… — 38/100 (CVE-2026-17481)CVE-2026-17101 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive info… — 37/100 (CVE-2026-17101)sangoma freepbx: FreePBX is an open source IP PBX. — 36/100 (CVE-2026-73663)sangoma freepbx: FreePBX is an open source IP PBX. — 36/100 (CVE-2026-73665)