IT security 2026-08-17

Level Watchful — 52/100 — 2026-08-17

Watchful day: 5 stories ranked, 1 of the top 5 reported as actively exploited, 1 flaw newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Ray-Project Ray Code Injection Vulnerability (66/100).

1. Ray-Project Ray Code Injection Vulnerability — 66/100 (CVE-2025-62593)
2. CVE-2026-75003 — In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url() in a FuncIRI attribute of an SVG… — 38/100 (CVE-2026-75003)
3. CVE-2026-19478 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before… — 35/100 (CVE-2026-19478)
4. jahlives openssl encrypt: openssl_encrypt versions before 1.4.0 contain an insecure default configuration that trusts the entire RFC 19… — 34/100 (CVE-2026-74882)
5. jahlives openssl encrypt: openssl_encrypt versions before 1.4.0 configure CORS with allow_origins set to wildcard and allow_credentials… — 27/100 (CVE-2026-74881)