IT security 2026-09-15

Level Watchful — 56/100 — 2026-09-15

Watchful day: 9 stories ranked, 1 of the top 9 reported as actively exploited, 1 flaw newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Cisco Secure Email Gateway SQL Injection Vulnerability (70/100).

1. Cisco Secure Email Gateway SQL Injection Vulnerability — 70/100 (CVE-2026-76461)
2. CVE-2026-81236 — Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dange… — 38/100 (CVE-2026-81236)
3. CVE-2026-81239 — Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dange… — 38/100 (CVE-2026-81239)
4. CVE-2026-81240 — Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dange… — 38/100 (CVE-2026-81240)
5. CVE-2026-81238 — Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Fun… — 35/100 (CVE-2026-81238)
6. apple macos: A validation issue existed in the entitlement verification. — 30/100 (CVE-2026-65381)
7. CVE-2026-12985 — Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7 Mattermost failed to validate Dynami… — 28/100 (CVE-2026-12985)
8. apple macos: The issue was addressed with improved memory handling. — 27/100 (CVE-2026-43790)
9. concretecms concrete cms: Concrete CMS below 9.5.3 did not sanitize custom style values in the Block Design dialog before writing them… — 22/100 (CVE-2026-18119)