IT security 2026-09-17

Level Critical — 81/100 — 2026-09-17

Critical day: 27 stories ranked, 3 of the top 10 reported as actively exploited, 3 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Acronis Backup Incorrect Default Permissions Vulnerability (79/100).

  1. Acronis Backup Incorrect Default Permissions Vulnerability — 79/100 (CVE-2026-87886)
  2. Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability — 68/100 (CVE-2026-76460)
  3. Google Pixel Improper Authorization Vulnerability — 64/100 (CVE-2026-58704)
  4. microsoft azure arc: Azure Arc Elevation of Privilege Vulnerability — 38/100 (CVE-2026-69399)
  5. microsoft azure arc: Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unautho… — 38/100 (CVE-2026-70009)
  6. microsoft azure logic apps: Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an… — 38/100 (CVE-2026-70200)
  7. CVE-2026-81440 — Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vu… — 38/100 (CVE-2026-81440)
  8. CVE-2026-81475 — Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Criti… — 38/100 (CVE-2026-81475)
  9. CVE-2026-81476 — Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Spec… — 38/100 (CVE-2026-81476)
  10. CVE-2026-81478 — Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic… — 38/100 (CVE-2026-81478)