IT security 2026-09-06

Level Calm — 27/100 — 2026-09-06

Calm day: 3 stories ranked, 0 of the top 3 reported as actively exploited, 0 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: N-able N-central Static Code Injection Vulnerability (30/100).

1. N-able N-central Static Code Injection Vulnerability — 30/100 (CVE-2026-86218)
2. MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability — 28/100 (CVE-2026-86060)
3. CVE-2026-67278 — MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures across RSA-based services, including TLS/X.509… — 19/100 (CVE-2026-67278)