IT security 2026-09-18

Level Tense — 74/100 — 2026-09-18

Tense day: 18 stories ranked, 3 of the top 10 reported as actively exploited, 3 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability (67/100).

1. Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability — 67/100 (CVE-2025-39682)
2. Linux Kernel Out-of-Bounds Write Vulnerability — 63/100 (CVE-2026-53266)
3. Linux Kernel Race Condition Vulnerability — 60/100 (CVE-2025-39964)
4. CVE-2026-10027 — IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a buffer o… — 38/100 (CVE-2026-10027)
5. hcltech bigfix service management: HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability. — 38/100 (CVE-2026-21806)
6. oisf suricata: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring… — 35/100 (CVE-2026-57228)
7. CVE-2026-81476 — Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Spec… — 32/100 (CVE-2026-81476)
8. CVE-2026-81475 — Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Criti… — 31/100 (CVE-2026-81475)
9. microsoft azure logic apps: Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an… — 30/100 (CVE-2026-70200)
10. microsoft azure arc: Azure Arc Elevation of Privilege Vulnerability — 30/100 (CVE-2026-69399)