Sécurité IT 2026-07-11

Niveau Tendu — 66/100 — 2026-07-11

Journée « Tendu » : 9 sujets classés, 2 des 9 premiers signalés comme activement exploités, 2 failles ajoutées au catalogue des vulnérabilités exploitées de la CISA. En tête : iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability (69/100).

  1. iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability — 69/100 (CVE-2026-48939)
  2. Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability — 68/100 (CVE-2026-56291)
  3. CVE-2026-57827 — Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12 - The Joomla ext… — 39/100 (CVE-2026-57827)
  4. broadcom rabbitmq server: RabbitMQ is a messaging and streaming broker. — 30/100 (CVE-2026-57216)
  5. broadcom rabbitmq server: RabbitMQ is a messaging and streaming broker. — 30/100 (CVE-2026-57211)
  6. CVE-2026-59792 — In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID… — 30/100 (CVE-2026-59792)
  7. CVE-2026-57156 — FreeRDP is a free implementation of the Remote Desktop Protocol. — 27/100 (CVE-2026-57156)
  8. CVE-2026-56372 — ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify operation that allow… — 19/100 (CVE-2026-56372)
  9. CVE-2026-57158 — FreeRDP is a free implementation of the Remote Desktop Protocol. — 17/100 (CVE-2026-57158)