Sécurité IT 2026-07-30

Niveau Vigilance — 54/100 — 2026-07-30

Journée « Vigilance » : 22 sujets classés, 1 des 10 premiers signalés comme activement exploités, 1 faille ajoutée au catalogue des vulnérabilités exploitées de la CISA. En tête : Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability (66/100).

1. Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability — 66/100 (CVE-2026-20316)
2. CVE-2026-12118 — IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute a… — 38/100 (CVE-2026-12118)
3. CVE-2026-14522 — IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote at… — 38/100 (CVE-2026-14522)
4. CVE-2026-4978 — Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vi… — 38/100 (CVE-2026-4978)
5. CVE-2026-67208 — Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attack… — 36/100 (CVE-2026-67208)
6. CVE-2026-17543 — Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP… — 31/100 (CVE-2026-17543)
7. php php: Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in P… — 31/100 (CVE-2026-17544)
8. CVE-2026-65883 — Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 -… — 31/100 (CVE-2026-65883)
9. CVE-2026-48449 — Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arb… — 30/100 (CVE-2026-48449)
10. CVE-2026-65884 — Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows us… — 30/100 (CVE-2026-65884)