Sécurité IT 2026-09-04

Niveau Vigilance — 53/100 — 2026-09-04

Journée « Vigilance » : 22 sujets classés, 1 des 10 premiers signalés comme activement exploités, 1 faille ajoutée au catalogue des vulnérabilités exploitées de la CISA. En tête : Google Chromium V8 Type Confusion Vulnerability (64/100).

Google Chromium V8 Type Confusion Vulnerability — 64/100 (CVE-2026-85046)
CVE-2026-18221 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized access due to improper valida… — 38/100 (CVE-2026-18221)
CVE-2026-77822 — IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due… — 37/100 (CVE-2026-77822)
CVE-2026-85595 — Traefik versions before v2.11.55 and versions v3.0.0 through v3.7.10 contain an authentication bypass vulnera… — 36/100 (CVE-2026-85595)
CVE-2026-85695 — FastChat contains an authentication bypass vulnerability in the /register_worker endpoint that allows unauthe… — 36/100 (CVE-2026-85695)
CVE-2026-17057 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and affect data integ… — 35/100 (CVE-2026-17057)
CVE-2026-17207 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integr… — 35/100 (CVE-2026-17207)
nodejs undici: undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serial… — 35/100 (CVE-2026-84961)
teluu pjsip: PJSIP is a free and open source multimedia communication library written in C. — 34/100 (CVE-2026-57162)
teluu pjsip: PJSIP is a free and open source multimedia communication library written in C. — 34/100 (CVE-2026-57163)