Sécurité IT 2026-07-29

Niveau Tendu — 62/100 — 2026-07-29

Journée « Tendu » : 16 sujets classés, 1 des 10 premiers signalés comme activement exploités, 1 faille ajoutée au catalogue des vulnérabilités exploitées de la CISA. En tête : Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability (84/100).

1. Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability — 84/100 (CVE-2026-20316)
2. CVE-2026-65883 — Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 -… — 39/100 (CVE-2026-65883)
3. CVE-2026-65884 — Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows us… — 39/100 (CVE-2026-65884)
4. CVE-2026-65887 — Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 - The resetPass… — 39/100 (CVE-2026-65887)
5. CVE-2026-65888 — Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 - The socialLogin method… — 39/100 (CVE-2026-65888)
6. CVE-2026-14529 — IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through… — 38/100 (CVE-2026-14529)
7. CVE-2026-65890 — Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors al… — 35/100 (CVE-2026-65890)
8. nodejs undici: undici's cache interceptor mishandles malformed Cache-Control private directives. — 35/100 (CVE-2026-13697)
9. CVE-2026-14974 — IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary… — 30/100 (CVE-2026-14974)
10. CVE-2026-16184 — IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sendi… — 29/100 (CVE-2026-16184)