Sécurité IT 2026-07-10

Niveau Tendu — 68/100 — 2026-07-10

Journée « Tendu » : 13 sujets classés, 2 des 10 premiers signalés comme activement exploités, 2 failles ajoutées au catalogue des vulnérabilités exploitées de la CISA. En tête : iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability (68/100).

1. iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability — 68/100 (CVE-2026-48939)
2. Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability — 67/100 (CVE-2026-56291)
3. broadcom rabbitmq server: RabbitMQ is a messaging and streaming broker. — 39/100 (CVE-2026-57211)
4. broadcom rabbitmq server: RabbitMQ is a messaging and streaming broker. — 39/100 (CVE-2026-57216)
5. CVE-2026-59792 — In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID… — 38/100 (CVE-2026-59792)
6. CVE-2026-57156 — FreeRDP is a free implementation of the Remote Desktop Protocol. — 33/100 (CVE-2026-57156)
7. CVE-2026-53963 — Discourse is an open-source discussion platform. — 27/100 (CVE-2026-53963)
8. openwebui open webui: Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. — 27/100 (CVE-2026-59216)
9. openwebui open webui: Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. — 27/100 (CVE-2026-59214)
10. gpsd project gpsd: gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof t… — 27/100 (CVE-2026-58459)