Sécurité IT 2026-09-14

Niveau Tendu — 61/100 — 2026-09-14

Journée « Tendu » : 5 sujets classés, 1 des 5 premiers signalés comme activement exploités, 1 faille ajoutée au catalogue des vulnérabilités exploitées de la CISA. En tête : Cisco Secure Email Gateway SQL Injection Vulnerability (86/100).

1. Cisco Secure Email Gateway SQL Injection Vulnerability — 86/100 (CVE-2026-76461)
2. apple macos: A validation issue existed in the entitlement verification. — 39/100 (CVE-2026-65381)
3. CVE-2026-12985 — Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7 Mattermost failed to validate Dynami… — 36/100 (CVE-2026-12985)
4. apple macos: The issue was addressed with improved memory handling. — 35/100 (CVE-2026-43790)
5. concretecms concrete cms: Concrete CMS below 9.5.3 did not sanitize custom style values in the Block Design dialog before writing them… — 27/100 (CVE-2026-18119)