Sécurité IT 2026-09-15

Niveau Vigilance — 56/100 — 2026-09-15

Journée « Vigilance » : 9 sujets classés, 1 des 9 premiers signalés comme activement exploités, 1 faille ajoutée au catalogue des vulnérabilités exploitées de la CISA. En tête : Cisco Secure Email Gateway SQL Injection Vulnerability (70/100).

Cisco Secure Email Gateway SQL Injection Vulnerability — 70/100 (CVE-2026-76461)
CVE-2026-81236 — Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dange… — 38/100 (CVE-2026-81236)
CVE-2026-81239 — Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dange… — 38/100 (CVE-2026-81239)
CVE-2026-81240 — Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dange… — 38/100 (CVE-2026-81240)
CVE-2026-81238 — Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Fun… — 35/100 (CVE-2026-81238)
apple macos: A validation issue existed in the entitlement verification. — 30/100 (CVE-2026-65381)
CVE-2026-12985 — Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7 Mattermost failed to validate Dynami… — 28/100 (CVE-2026-12985)
apple macos: The issue was addressed with improved memory handling. — 27/100 (CVE-2026-43790)
concretecms concrete cms: Concrete CMS below 9.5.3 did not sanitize custom style values in the Block Design dialog before writing them… — 22/100 (CVE-2026-18119)