IT security 2026-08-20

Level Critical — 78/100 — 2026-08-20

Critical day: 29 stories ranked, 3 of the top 10 reported as actively exploited, 3 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: MLflow Server-Side Request Forgery Vulnerability (73/100).

1. MLflow Server-Side Request Forgery Vulnerability — 73/100 (CVE-2026-64849)
2. TrueConf Server Code Injection Vulnerability — 66/100 (CVE-2026-72530)
3. TrueConf Server Missing Authentication for Critical Function Vulnerability — 65/100 (CVE-2026-72529)
4. CVE-2026-17000 — IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to… — 38/100 (CVE-2026-17000)
5. CVE-2026-17006 — IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to… — 38/100 (CVE-2026-17006)
6. CVE-2026-17024 — IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to… — 38/100 (CVE-2026-17024)
7. CVE-2026-17138 — IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to… — 38/100 (CVE-2026-17138)
8. CVE-2026-17436 — IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to… — 38/100 (CVE-2026-17436)
9. CVE-2026-18832 — IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to… — 38/100 (CVE-2026-18832)
10. CVE-2026-19437 — IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to… — 38/100 (CVE-2026-19437)