IT security 2026-09-14

Level Tense — 61/100 — 2026-09-14

Tense day: 5 stories ranked, 1 of the top 5 reported as actively exploited, 1 flaw newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Cisco Secure Email Gateway SQL Injection Vulnerability (86/100).

1. Cisco Secure Email Gateway SQL Injection Vulnerability — 86/100 (CVE-2026-76461)
2. apple macos: A validation issue existed in the entitlement verification. — 39/100 (CVE-2026-65381)
3. CVE-2026-12985 — Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7 Mattermost failed to validate Dynami… — 36/100 (CVE-2026-12985)
4. apple macos: The issue was addressed with improved memory handling. — 35/100 (CVE-2026-43790)
5. concretecms concrete cms: Concrete CMS below 9.5.3 did not sanitize custom style values in the Block Design dialog before writing them… — 27/100 (CVE-2026-18119)