Sécurité IT 2026-09-17

Niveau Critique — 81/100 — 2026-09-17

Journée « Critique » : 27 sujets classés, 3 des 10 premiers signalés comme activement exploités, 3 failles ajoutées au catalogue des vulnérabilités exploitées de la CISA. En tête : Acronis Backup Incorrect Default Permissions Vulnerability (79/100).

  1. Acronis Backup Incorrect Default Permissions Vulnerability — 79/100 (CVE-2026-87886)
  2. Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability — 68/100 (CVE-2026-76460)
  3. Google Pixel Improper Authorization Vulnerability — 64/100 (CVE-2026-58704)
  4. microsoft azure arc: Azure Arc Elevation of Privilege Vulnerability — 38/100 (CVE-2026-69399)
  5. microsoft azure arc: Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unautho… — 38/100 (CVE-2026-70009)
  6. microsoft azure logic apps: Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an… — 38/100 (CVE-2026-70200)
  7. CVE-2026-81440 — Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vu… — 38/100 (CVE-2026-81440)
  8. CVE-2026-81475 — Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Criti… — 38/100 (CVE-2026-81475)
  9. CVE-2026-81476 — Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Spec… — 38/100 (CVE-2026-81476)
  10. CVE-2026-81478 — Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic… — 38/100 (CVE-2026-81478)