Sécurité IT 2026-08-06

Niveau Vigilance — 57/100 — 2026-08-06

Journée « Vigilance » : 12 sujets classés, 1 des 10 premiers signalés comme activement exploités, 1 faille ajoutée au catalogue des vulnérabilités exploitées de la CISA. En tête : JetBrains TeamCity Deserialization of Untrusted Data Vulnerability (78/100).

1. JetBrains TeamCity Deserialization of Untrusted Data Vulnerability — 78/100 (CVE-2026-63077)
2. CVE-2026-54489 — Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitiv… — 38/100 (CVE-2026-54489)
3. CVE-2026-64993 — Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in the collec… — 35/100 (CVE-2026-64993)
4. CVE-2026-8400 — IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous deliv… — 30/100 (CVE-2026-8400)
5. CVE-2026-10025 — IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity… — 29/100 (CVE-2026-10025)
6. CVE-2026-17617 — IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery (SSRF) due t… — 29/100 (CVE-2026-17617)
7. CVE-2026-9205 — IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() functi… — 29/100 (CVE-2026-9205)
8. redhat build of keycloak: A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and us… — 29/100 (CVE-2026-16442)
9. CVE-2026-17556 — A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated att… — 27/100 (CVE-2026-17556)
10. CVE-2026-71324 — Traefik is an open source HTTP reverse proxy and load balancer. — 27/100 (CVE-2026-71324)