Sécurité IT 2026-09-12

Niveau Critique — 79/100 — 2026-09-12

Journée « Critique » : 5 sujets classés, 4 des 5 premiers signalés comme activement exploités, 4 failles ajoutées au catalogue des vulnérabilités exploitées de la CISA. En tête : GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability (69/100).

1. GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability — 69/100 (CVE-2026-85706)
2. ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability — 68/100 (CVE-2026-84869)
3. JFrog Artifactory Incorrect Authorization Vulnerability — 65/100 (CVE-2026-42016)
4. JFrog Artifactory Improper Authentication Vulnerability — 62/100 (CVE-2026-42018)
5. apache opennlp: The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULT_REGE… — 30/100 (CVE-2026-82617)