IT security 2026-09-16

Level Critical — 86/100 — 2026-09-16

Critical day: 22 stories ranked, 3 of the top 10 reported as actively exploited, 3 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability (87/100).

1. Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability — 87/100 (CVE-2026-76460)
2. Acronis Backup Incorrect Default Permissions Vulnerability — 79/100 (CVE-2026-87886)
3. Google Pixel Improper Authorization Vulnerability — 63/100 (CVE-2026-58704)
4. CVE-2026-70416 — Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. — 38/100 (CVE-2026-70416)
5. CVE-2026-91104 — HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. — 36/100 (CVE-2026-91104)
6. CVE-2026-91106 — HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. — 36/100 (CVE-2026-91106)
7. CVE-2025-43936 — Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. — 35/100 (CVE-2025-43936)
8. CVE-2026-91098 — HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. — 33/100 (CVE-2026-91098)
9. CVE-2026-91105 — HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. — 33/100 (CVE-2026-91105)
10. CVE-2026-91102 — HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. — 32/100 (CVE-2026-91102)