Sécurité IT 2026-08-01

Niveau Calme — 25/100 — 2026-08-01

Journée « Calme » : 3 sujets classés, 0 des 3 premiers signalés comme activement exploités, 0 faille ajoutée au catalogue des vulnérabilités exploitées de la CISA. En tête : CVE-2026-17351 — The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's exe… (29/100).

1. CVE-2026-17351 — The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's exe… — 29/100 (CVE-2026-17351)
2. CVE-2026-14537 — Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0… — 24/100 (CVE-2026-14537)
3. johnsoncontrols fms employee: Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows… — 16/100 (CVE-2026-21662)