Sécurité IT 2026-08-19

Niveau Critique — 95/100 — 2026-08-19

Journée « Critique » : 19 sujets classés, 5 des 10 premiers signalés comme activement exploités, 5 failles ajoutées au catalogue des vulnérabilités exploitées de la CISA. En tête : Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability (90/100).

1. Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability — 90/100 (CVE-2026-33824)
2. Broadcom VMware vCenter Path Traversal Vulnerability — 80/100 (CVE-2026-59310)
3. Microsoft SharePoint Weak Authentication Vulnerability — 71/100 (CVE-2026-55040)
4. Apple macOS Improper Authentication Vulnerability — 68/100 (CVE-2026-65400)
5. MLflow Server-Side Request Forgery Vulnerability — 67/100 (CVE-2026-64849)
6. wireshark wireshark: C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service — 38/100 (CVE-2026-76886)
7. Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability — 36/100 (CVE-2026-19490)
8. CVE-2026-75595 — Netty is an asynchronous, event-driven network application framework. — 35/100 (CVE-2026-75595)
9. CVE-2026-55191 — FreeRDP is a free implementation of the Remote Desktop Protocol. — 34/100 (CVE-2026-55191)
10. CVE-2026-55194 — FreeRDP is a free implementation of the Remote Desktop Protocol. — 34/100 (CVE-2026-55194)