IT security 2026-09-09

Level Critical — 91/100 — 2026-09-09

Critical day: 25 stories ranked, 8 of the top 10 reported as actively exploited, 8 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability (86/100).

  1. Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability — 86/100 (CVE-2026-20079)
  2. Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability — 70/100 (CVE-2026-75650)
  3. Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability — 70/100 (CVE-2026-19490)
  4. N-able N-central Static Code Injection Vulnerability — 68/100 (CVE-2026-86218)
  5. Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability — 68/100 (CVE-2025-25249)
  6. Google Chromium V8 Out of Bounds Write Vulnerability — 64/100 (CVE-2026-87491)
  7. Microsoft Windows Link Following Vulnerability — 62/100 (CVE-2026-81963)
  8. Microsoft Windows Heap-Based Buffer Overflow Vulnerability — 62/100 (CVE-2026-85880)
  9. CVE-2026-79689 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00… — 38/100 (CVE-2026-79689)
  10. CVE-2026-79941 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00… — 38/100 (CVE-2026-79941)