Sécurité IT 2026-09-16

Niveau Critique — 86/100 — 2026-09-16

Journée « Critique » : 22 sujets classés, 3 des 10 premiers signalés comme activement exploités, 3 failles ajoutées au catalogue des vulnérabilités exploitées de la CISA. En tête : Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability (87/100).

1. Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability — 87/100 (CVE-2026-76460)
2. Acronis Backup Incorrect Default Permissions Vulnerability — 79/100 (CVE-2026-87886)
3. Google Pixel Improper Authorization Vulnerability — 63/100 (CVE-2026-58704)
4. CVE-2026-70416 — Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. — 38/100 (CVE-2026-70416)
5. CVE-2026-91104 — HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. — 36/100 (CVE-2026-91104)
6. CVE-2026-91106 — HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. — 36/100 (CVE-2026-91106)
7. CVE-2025-43936 — Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. — 35/100 (CVE-2025-43936)
8. CVE-2026-91098 — HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. — 33/100 (CVE-2026-91098)
9. CVE-2026-91105 — HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. — 33/100 (CVE-2026-91105)
10. CVE-2026-91102 — HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. — 32/100 (CVE-2026-91102)