Sécurité IT 2026-06-23

Niveau Critique — 87/100 — 2026-06-23

Journée « Critique » : 26 sujets classés, 4 des 10 premiers signalés comme activement exploités, 4 failles ajoutées au catalogue des vulnérabilités exploitées de la CISA. En tête : Ubiquiti UniFi OS Improper Input Validation Vulnerability (85/100).

1. Ubiquiti UniFi OS Improper Input Validation Vulnerability — 85/100 (CVE-2026-34910)
2. Ubiquiti UniFi OS Path Traversal Vulnerability — 68/100 (CVE-2026-34909)
3. Ubiquiti UniFi OS Improper Access Control Vulnerability — 68/100 (CVE-2026-34908)
4. Lantronix EDS5000 Code Injection Vulnerability — 66/100 (CVE-2025-67038)
5. kidocode crawl4ai: Crawl4AI is an open-source LLM friendly web crawler & scraper. — 39/100 (CVE-2026-53753)
6. yt-dlp project yt-dlp: yt-dlp is a command-line audio/video downloader. — 37/100 (CVE-2026-50023)
7. yt-dlp project yt-dlp: yt-dlp is a command-line audio/video downloader. — 37/100 (CVE-2026-50574)
8. CVE-2026-44789 — n8n is an open source workflow automation platform. — 36/100 (CVE-2026-44789)
9. CVE-2026-44791 — n8n is an open source workflow automation platform. — 36/100 (CVE-2026-44791)
10. CVE-2026-44726 — Deno is a JavaScript, TypeScript, and WebAssembly runtime. — 35/100 (CVE-2026-44726)