IT security 2026-09-05

Level Watchful — 50/100 — 2026-09-05

Watchful day: 15 stories ranked, 1 of the top 10 reported as actively exploited, 1 flaw newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Google Chromium V8 Type Confusion Vulnerability (65/100).

  1. Google Chromium V8 Type Confusion Vulnerability — 65/100 (CVE-2026-85046)
  2. MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability — 35/100 (CVE-2026-86060)
  3. CVE-2026-18221 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized access due to improper valida… — 29/100 (CVE-2026-18221)
  4. CVE-2026-77822 — IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due… — 29/100 (CVE-2026-77822)
  5. CVE-2026-85595 — Traefik versions before v2.11.55 and versions v3.0.0 through v3.7.10 contain an authentication bypass vulnera… — 28/100 (CVE-2026-85595)
  6. CVE-2026-85695 — FastChat contains an authentication bypass vulnerability in the /register_worker endpoint that allows unauthe… — 28/100 (CVE-2026-85695)
  7. CVE-2026-17057 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and affect data integ… — 28/100 (CVE-2026-17057)
  8. CVE-2026-17207 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integr… — 28/100 (CVE-2026-17207)
  9. teluu pjsip: PJSIP is a free and open source multimedia communication library written in C. — 27/100 (CVE-2026-57162)
  10. nodejs undici: undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serial… — 27/100 (CVE-2026-84961)