Sécurité IT 2026-07-01

Niveau Vigilance — 57/100 — 2026-07-01

Journée « Vigilance » : 30 sujets classés, 1 des 10 premiers signalés comme activement exploités, 1 faille ajoutée au catalogue des vulnérabilités exploitées de la CISA. En tête : Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability (78/100).

1. Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability — 78/100 (CVE-2026-45659)
2. CVE-2026-58453 — JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnera… — 36/100 (CVE-2026-58453)
3. CVE-2026-13773 — IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 Approximately 50 generated CORBA stub classes in WebSpher… — 35/100 (CVE-2026-13773)
4. linuxfoundation containerd: containerd is an open-source container runtime. — 32/100 (CVE-2026-53492)
5. CVE-2026-13782 — Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromis… — 30/100 (CVE-2026-13782)
6. CVE-2026-11541 — IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0,… — 30/100 (CVE-2026-11541)
7. CVE-2026-13772 — IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 's Object Query Language engine resolves attacker-supplie… — 30/100 (CVE-2026-13772)
8. CVE-2026-13775 — Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised t… — 29/100 (CVE-2026-13775)
9. CVE-2026-13776 — Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised… — 29/100 (CVE-2026-13776)
10. CVE-2026-7663 — IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected MCP project re… — 29/100 (CVE-2026-7663)