IT security 2026-08-19

Level Critical — 95/100 — 2026-08-19

Critical day: 19 stories ranked, 5 of the top 10 reported as actively exploited, 5 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability (90/100).

  1. Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability — 90/100 (CVE-2026-33824)
  2. Broadcom VMware vCenter Path Traversal Vulnerability — 80/100 (CVE-2026-59310)
  3. Microsoft SharePoint Weak Authentication Vulnerability — 71/100 (CVE-2026-55040)
  4. Apple macOS Improper Authentication Vulnerability — 68/100 (CVE-2026-65400)
  5. MLflow Server-Side Request Forgery Vulnerability — 67/100 (CVE-2026-64849)
  6. wireshark wireshark: C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service — 38/100 (CVE-2026-76886)
  7. Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability — 36/100 (CVE-2026-19490)
  8. CVE-2026-75595 — Netty is an asynchronous, event-driven network application framework. — 35/100 (CVE-2026-75595)
  9. CVE-2026-55191 — FreeRDP is a free implementation of the Remote Desktop Protocol. — 34/100 (CVE-2026-55191)
  10. CVE-2026-55194 — FreeRDP is a free implementation of the Remote Desktop Protocol. — 34/100 (CVE-2026-55194)