Sécurité IT 2026-08-12

Niveau Tendu — 75/100 — 2026-08-12

Journée « Tendu » : 20 sujets classés, 3 des 10 premiers signalés comme activement exploités, 3 failles ajoutées au catalogue des vulnérabilités exploitées de la CISA. En tête : Metabase SQL Injection Vulnerability (69/100).

Metabase SQL Injection Vulnerability — 69/100 (CVE-2026-72898)
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability — 65/100 (CVE-2026-20349)
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability — 60/100 (CVE-2026-68820)
CVE-2026-16860 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an… — 38/100 (CVE-2026-16860)
CVE-2026-17276 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to escalate privileges due to improp… — 38/100 (CVE-2026-17276)
CVE-2026-10534 — IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT p… — 38/100 (CVE-2026-10534)
CVE-2026-10543 — IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a special… — 38/100 (CVE-2026-10543)
CVE-2026-17111 — IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. — 38/100 (CVE-2026-17111)
CVE-2026-17616 — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM V… — 38/100 (CVE-2026-17616)
CVE-2026-18847 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to harvest credentials due to spoo… — 38/100 (CVE-2026-18847)