IT security 2026-09-24

Level Tense — 64/100 — 2026-09-24

Tense day: 6 stories ranked, 2 of the top 6 reported as actively exploited, 2 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Adobe Commerce and Magento Incorrect Authorization Vulnerability (68/100).

1. Adobe Commerce and Magento Incorrect Authorization Vulnerability — 68/100 (CVE-2026-71362)
2. WSO2 Multiple Products Path Traversal Vulnerability — 67/100 (CVE-2026-5430)
3. CVE-2026-95848 — Moquette is a lightweight Java MQTT broker. — 29/100 (CVE-2026-95848)
4. CVE-2026-96755 — orval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect generator th… — 28/100 (CVE-2026-96755)
5. broadcom rabbitmq server: RabbitMQ is a messaging and streaming broker. — 27/100 (CVE-2026-67231)
6. claris filemaker server: An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially c… — 27/100 (CVE-2026-86930)