Sécurité IT 2026-06-24

Niveau Critique — 89/100 — 2026-06-24

Journée « Critique » : 23 sujets classés, 4 des 10 premiers signalés comme activement exploités, 4 failles ajoutées au catalogue des vulnérabilités exploitées de la CISA. En tête : Ubiquiti UniFi OS Improper Input Validation Vulnerability (90/100).

1. Ubiquiti UniFi OS Improper Input Validation Vulnerability — 90/100 (CVE-2026-34910)
2. Ubiquiti UniFi OS Improper Access Control Vulnerability — 70/100 (CVE-2026-34908)
3. Ubiquiti UniFi OS Path Traversal Vulnerability — 70/100 (CVE-2026-34909)
4. Lantronix EDS5000 Code Injection Vulnerability — 67/100 (CVE-2025-67038)
5. CVE-2026-39948 — Cacti is an open source performance and fault management framework. — 36/100 (CVE-2026-39948)
6. kidocode crawl4ai: Crawl4AI is an open-source LLM friendly web crawler & scraper. — 30/100 (CVE-2026-53753)
7. yt-dlp project yt-dlp: yt-dlp is a command-line audio/video downloader. — 30/100 (CVE-2026-50023)
8. yt-dlp project yt-dlp: yt-dlp is a command-line audio/video downloader. — 29/100 (CVE-2026-50574)
9. CVE-2026-44791 — n8n is an open source workflow automation platform. — 29/100 (CVE-2026-44791)
10. CVE-2026-44789 — n8n is an open source workflow automation platform. — 29/100 (CVE-2026-44789)