IT security 2026-08-27

Level Critical — 98/100 — 2026-08-27

Critical day: 16 stories ranked, 9 of the top 10 reported as actively exploited, 9 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Ajax.NET Professional Deserialization of Untrusted Data Vulnerability (90/100).

1. Ajax.NET Professional Deserialization of Untrusted Data Vulnerability — 90/100 (CVE-2021-23758)
2. Microsoft SQL Server Remote Code Execution Vulnerability — 87/100 (CVE-2019-1068)
3. ownCloud Improper Authentication Vulnerability — 76/100 (CVE-2023-49105)
4. Linux Kernel Out-of-Bounds Write Vulnerability — 70/100 (CVE-2022-0995)
5. Red Hat Libuser Race Condition Vulnerability — 69/100 (CVE-2015-3246)
6. Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability — 67/100 (CVE-2015-5287)
7. Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability — 66/100 (CVE-2026-8452)
8. Linux Kernel Unspecified Vulnerability — 61/100 (CVE-2026-53362)
9. JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability — 60/100 (CVE-2026-66384)
10. CVE-2026-75871 — GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gat… — 37/100 (CVE-2026-75871)