IT security 2026-09-01

Level Tense — 67/100 — 2026-09-01

Tense day: 10 stories ranked, 2 of the top 10 reported as actively exploited, 2 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: PaperCut NG/MF Unsafe Reflection Vulnerability (67/100).

  1. PaperCut NG/MF Unsafe Reflection Vulnerability — 67/100 (CVE-2026-82078)
  2. PaperCut NG/MF Missing Authentication for Critical Function Vulnerability — 65/100 (CVE-2026-81578)
  3. CVE-2026-79687 — Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. — 39/100 (CVE-2026-79687)
  4. hpe arubaos-cx: Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed inpu… — 38/100 (CVE-2026-73749)
  5. hpe arubaos-cx: A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative acc… — 38/100 (CVE-2026-73778)
  6. mozilla firefox mobile: Other issue in Firefox Focus for Android. — 38/100 (CVE-2026-84135)
  7. mozilla firefox: Site isolation issue in the DOM: Navigation component. — 38/100 (CVE-2026-84140)
  8. mozilla firefox: Integer overflow in the Graphics: ImageLib component. — 38/100 (CVE-2026-84141)
  9. mozilla firefox: Internally found bugs present in Thunderbird 154. — 38/100 (CVE-2026-84142)
  10. mozilla firefox: Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. — 38/100 (CVE-2026-84143)