IT security 2026-09-19

Level Tense — 73/100 — 2026-09-19

Tense day: 9 stories ranked, 3 of the top 9 reported as actively exploited, 3 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability (68/100).

1. Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability — 68/100 (CVE-2025-39682)
2. Linux Kernel Out-of-Bounds Write Vulnerability — 64/100 (CVE-2026-53266)
3. Linux Kernel Race Condition Vulnerability — 60/100 (CVE-2025-39964)
4. CVE-2026-10027 — IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a buffer o… — 30/100 (CVE-2026-10027)
5. microsoft azure billing: Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate pr… — 29/100 (CVE-2026-62874)
6. hcltech bigfix service management: HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to i… — 29/100 (CVE-2026-56592)
7. hcltech bigfix service management: HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file v… — 29/100 (CVE-2026-56590)
8. hcltech bigfix service management: HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability. — 29/100 (CVE-2026-21806)
9. oisf suricata: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring… — 28/100 (CVE-2026-57228)