Sécurité IT 2026-09-01

Niveau Tendu — 67/100 — 2026-09-01

Journée « Tendu » : 10 sujets classés, 2 des 10 premiers signalés comme activement exploités, 2 failles ajoutées au catalogue des vulnérabilités exploitées de la CISA. En tête : PaperCut NG/MF Unsafe Reflection Vulnerability (67/100).

1. PaperCut NG/MF Unsafe Reflection Vulnerability — 67/100 (CVE-2026-82078)
2. PaperCut NG/MF Missing Authentication for Critical Function Vulnerability — 65/100 (CVE-2026-81578)
3. CVE-2026-79687 — Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. — 39/100 (CVE-2026-79687)
4. hpe arubaos-cx: Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed inpu… — 38/100 (CVE-2026-73749)
5. hpe arubaos-cx: A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative acc… — 38/100 (CVE-2026-73778)
6. mozilla firefox mobile: Other issue in Firefox Focus for Android. — 38/100 (CVE-2026-84135)
7. mozilla firefox: Site isolation issue in the DOM: Navigation component. — 38/100 (CVE-2026-84140)
8. mozilla firefox: Integer overflow in the Graphics: ImageLib component. — 38/100 (CVE-2026-84141)
9. mozilla firefox: Internally found bugs present in Thunderbird 154. — 38/100 (CVE-2026-84142)
10. mozilla firefox: Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. — 38/100 (CVE-2026-84143)