IT security 2026-09-10

Level Critical — 92/100 — 2026-09-10

Critical day: 17 stories ranked, 6 of the top 10 reported as actively exploited, 6 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability (90/100).

1. Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability — 90/100 (CVE-2026-20079)
2. Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability — 72/100 (CVE-2026-19490)
3. Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability — 69/100 (CVE-2025-25249)
4. MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability — 65/100 (CVE-2026-86060)
5. Google Chromium V8 Out of Bounds Write Vulnerability — 65/100 (CVE-2026-87491)
6. MikroTik RouterOS Missing Authentication for Critical Function Vulnerability — 64/100 (CVE-2026-67277)
7. CVE-2026-9163 — Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GIS Inf… — 38/100 (CVE-2026-9163)
8. CVE-2026-88007 — Traefik is an open source HTTP reverse proxy and load balancer. — 35/100 (CVE-2026-88007)
9. CVE-2026-88056 — Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScrip… — 33/100 (CVE-2026-88056)
10. CVE-2026-79689 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00… — 33/100 (CVE-2026-79689)