IT security 2026-09-29

Level Watchful — 54/100 — 2026-09-29

Watchful day: 15 stories ranked, 1 of the top 10 reported as actively exploited, 1 flaw newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Apple Multiple Products Out-of-Bounds Write Vulnerability (65/100).

  1. Apple Multiple Products Out-of-Bounds Write Vulnerability — 65/100 (CVE-2026-86950)
  2. gnome libsoup: A flaw was found in libsoup. — 38/100 (CVE-2026-102560)
  3. electronjs electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. — 38/100 (CVE-2026-102676)
  4. simple-git project simple-git: simple-git, an interface for running git commands in any node.js application, enables applications to execute… — 38/100 (CVE-2026-102827)
  5. CVE-2026-73595 — Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, conta… — 38/100 (CVE-2026-73595)
  6. CVE-2026-102425 — Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4… — 37/100 (CVE-2026-102425)
  7. simple-git project simple-git: simple-git, an interface for running git commands in any node.js application, enables applications to execute… — 35/100 (CVE-2026-102828)
  8. CVE-2026-101127 — Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4 - The… — 33/100 (CVE-2026-101127)
  9. CVE-2026-101072 — A vulnerability was identified in Netcore NR289-GE 1.4.5102. — 31/100 (CVE-2026-101072)
  10. CVE-2026-101077 — A flaw has been found in Netcore NR289-GE 1.4.5102. — 29/100 (CVE-2026-101077)