Sécurité IT 2026-08-28

Niveau Critique — 81/100 — 2026-08-28

Journée « Critique » : 10 sujets classés, 3 des 10 premiers signalés comme activement exploités, 3 failles ajoutées au catalogue des vulnérabilités exploitées de la CISA. En tête : ownCloud Improper Authentication Vulnerability (87/100).

1. ownCloud Improper Authentication Vulnerability — 87/100 (CVE-2023-49105)
2. Linux Kernel Unspecified Vulnerability — 62/100 (CVE-2026-53362)
3. JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability — 60/100 (CVE-2026-66384)
4. PaperCut NG/MF Unsafe Reflection Vulnerability — 36/100 (CVE-2026-82078)
5. vmware spring integration: SerializingHttpMessageConverter deserializes the body of incoming HTTP requests with a raw java.io.ObjectInpu… — 34/100 (CVE-2026-47864)
6. PaperCut NG/MF Missing Authentication for Critical Function Vulnerability — 34/100 (CVE-2026-81578)
7. broadcom spring batch: Applications that deserialize execution contexts with Jackson2ExecutionContextStringSerializer are vulnerable… — 29/100 (CVE-2026-47875)
8. CVE-2026-75871 — GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gat… — 28/100 (CVE-2026-75871)
9. vmware spring security: Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administra… — 27/100 (CVE-2026-59270)
10. dangerblack n8n-node-sqlite3: n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. — 20/100 (CVE-2026-54687)