Sécurité IT 2026-07-02

Niveau Vigilance — 59/100 — 2026-07-02

Journée « Vigilance » : 13 sujets classés, 1 des 10 premiers signalés comme activement exploités, 1 faille ajoutée au catalogue des vulnérabilités exploitées de la CISA. En tête : Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability (78/100).

1. Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability — 78/100 (CVE-2026-45659)
2. ui unifi protect: A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (… — 38/100 (CVE-2026-55115)
3. microsoft azure synapse: Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network. — 38/100 (CVE-2026-26145)
4. ui unifi protect: A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in… — 38/100 (CVE-2026-54408)
5. ui unifi connect: A malicious actor with access to the network and under certain network configurations could exploit an Improp… — 38/100 (CVE-2026-55116)
6. microsoft 365 copilot: Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevat… — 36/100 (CVE-2026-41106)
7. CVE-2026-58453 — JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnera… — 31/100 (CVE-2026-58453)
8. juicedata juicefs: JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerability that allows u… — 27/100 (CVE-2026-59092)
9. linuxfoundation containerd: containerd is an open-source container runtime. — 26/100 (CVE-2026-53492)
10. mediawiki cargo: Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wik… — 21/100 (CVE-2026-14363)