Sécurité IT 2026-08-17

Niveau Vigilance — 52/100 — 2026-08-17

Journée « Vigilance » : 5 sujets classés, 1 des 5 premiers signalés comme activement exploités, 1 faille ajoutée au catalogue des vulnérabilités exploitées de la CISA. En tête : Ray-Project Ray Code Injection Vulnerability (66/100).

1. Ray-Project Ray Code Injection Vulnerability — 66/100 (CVE-2025-62593)
2. CVE-2026-75003 — In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url() in a FuncIRI attribute of an SVG… — 38/100 (CVE-2026-75003)
3. CVE-2026-19478 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before… — 35/100 (CVE-2026-19478)
4. jahlives openssl encrypt: openssl_encrypt versions before 1.4.0 contain an insecure default configuration that trusts the entire RFC 19… — 34/100 (CVE-2026-74882)
5. jahlives openssl encrypt: openssl_encrypt versions before 1.4.0 configure CORS with allow_origins set to wildcard and allow_credentials… — 27/100 (CVE-2026-74881)