Sécurité IT 2026-09-05

Niveau Vigilance — 50/100 — 2026-09-05

Journée « Vigilance » : 15 sujets classés, 1 des 10 premiers signalés comme activement exploités, 1 faille ajoutée au catalogue des vulnérabilités exploitées de la CISA. En tête : Google Chromium V8 Type Confusion Vulnerability (65/100).

Google Chromium V8 Type Confusion Vulnerability — 65/100 (CVE-2026-85046)
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability — 35/100 (CVE-2026-86060)
CVE-2026-18221 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized access due to improper valida… — 29/100 (CVE-2026-18221)
CVE-2026-77822 — IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due… — 29/100 (CVE-2026-77822)
CVE-2026-85595 — Traefik versions before v2.11.55 and versions v3.0.0 through v3.7.10 contain an authentication bypass vulnera… — 28/100 (CVE-2026-85595)
CVE-2026-85695 — FastChat contains an authentication bypass vulnerability in the /register_worker endpoint that allows unauthe… — 28/100 (CVE-2026-85695)
CVE-2026-17057 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and affect data integ… — 28/100 (CVE-2026-17057)
CVE-2026-17207 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integr… — 28/100 (CVE-2026-17207)
teluu pjsip: PJSIP is a free and open source multimedia communication library written in C. — 27/100 (CVE-2026-57162)
nodejs undici: undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serial… — 27/100 (CVE-2026-84961)