IT security 2026-10-13

Level Tense — 75/100 — 2026-10-13

Tense day: 7 stories ranked, 2 of the top 7 reported as actively exploited, 2 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Microsoft Windows Command Injection Vulnerability (83/100).

1. Microsoft Windows Command Injection Vulnerability — 83/100 (CVE-2026-96951)
2. Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability — 82/100 (CVE-2026-104935)
3. microsoft windows 10 1607: Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a networ… — 38/100 (CVE-2026-83888)
4. CVE-2026-82110 — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary… — 30/100 (CVE-2026-82110)
5. CVE-2026-19622 — IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privi… — 30/100 (CVE-2026-19622)
6. CVE-2026-82101 — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of… — 29/100 (CVE-2026-82101)
7. CVE-2026-109566 — Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unaut… — 28/100 (CVE-2026-109566)