Sécurité IT 2026-06-30

Niveau Vigilance — 55/100 — 2026-06-30

Journée « Vigilance » : 27 sujets classés, 1 des 10 premiers signalés comme activement exploités, 1 faille ajoutée au catalogue des vulnérabilités exploitées de la CISA. En tête : SimpleHelp Authentication Bypass Vulnerability (68/100).

1. SimpleHelp Authentication Bypass Vulnerability — 68/100 (CVE-2026-48558)
2. CVE-2026-13773 — IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 Approximately 50 generated CORBA stub classes in WebSpher… — 39/100 (CVE-2026-13773)
3. CVE-2026-13782 — Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromis… — 39/100 (CVE-2026-13782)
4. CVE-2026-13772 — IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 's Object Query Language engine resolves attacker-supplie… — 38/100 (CVE-2026-13772)
5. CVE-2026-11541 — IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0,… — 38/100 (CVE-2026-11541)
6. CVE-2026-11546 — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request for… — 38/100 (CVE-2026-11546)
7. CVE-2026-11714 — IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability with the… — 38/100 (CVE-2026-11714)
8. CVE-2026-13775 — Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised t… — 38/100 (CVE-2026-13775)
9. CVE-2026-13776 — Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised… — 38/100 (CVE-2026-13776)
10. CVE-2026-14104 — Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed… — 38/100 (CVE-2026-14104)