Sécurité IT 2026-08-27

Niveau Critique — 98/100 — 2026-08-27

Journée « Critique » : 16 sujets classés, 9 des 10 premiers signalés comme activement exploités, 9 failles ajoutées au catalogue des vulnérabilités exploitées de la CISA. En tête : Ajax.NET Professional Deserialization of Untrusted Data Vulnerability (90/100).

1. Ajax.NET Professional Deserialization of Untrusted Data Vulnerability — 90/100 (CVE-2021-23758)
2. Microsoft SQL Server Remote Code Execution Vulnerability — 87/100 (CVE-2019-1068)
3. ownCloud Improper Authentication Vulnerability — 76/100 (CVE-2023-49105)
4. Linux Kernel Out-of-Bounds Write Vulnerability — 70/100 (CVE-2022-0995)
5. Red Hat Libuser Race Condition Vulnerability — 69/100 (CVE-2015-3246)
6. Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability — 67/100 (CVE-2015-5287)
7. Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability — 66/100 (CVE-2026-8452)
8. Linux Kernel Unspecified Vulnerability — 61/100 (CVE-2026-53362)
9. JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability — 60/100 (CVE-2026-66384)
10. CVE-2026-75871 — GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gat… — 37/100 (CVE-2026-75871)