IT security 2026-10-17

Level Tense — 61/100 — 2026-10-17

Tense day: 5 stories ranked, 2 of the top 5 reported as actively exploited, 2 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability (67/100).

1. BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability — 67/100 (CVE-2026-102764)
2. Fortinet Multiple Products Path Traversal Vulnerability — 60/100 (CVE-2025-61624)
3. CVE-2026-111643 — Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated… — 28/100 (CVE-2026-111643)
4. CVE-2026-111693 — DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allows unauth… — 28/100 (CVE-2026-111693)
5. CVE-2026-111375 — FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL client that… — 19/100 (CVE-2026-111375)