Sécurité IT 2026-09-19

Niveau Tendu — 73/100 — 2026-09-19

Journée « Tendu » : 9 sujets classés, 3 des 9 premiers signalés comme activement exploités, 3 failles ajoutées au catalogue des vulnérabilités exploitées de la CISA. En tête : Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability (68/100).

  1. Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability — 68/100 (CVE-2025-39682)
  2. Linux Kernel Out-of-Bounds Write Vulnerability — 64/100 (CVE-2026-53266)
  3. Linux Kernel Race Condition Vulnerability — 60/100 (CVE-2025-39964)
  4. CVE-2026-10027 — IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a buffer o… — 30/100 (CVE-2026-10027)
  5. microsoft azure billing: Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate pr… — 29/100 (CVE-2026-62874)
  6. hcltech bigfix service management: HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to i… — 29/100 (CVE-2026-56592)
  7. hcltech bigfix service management: HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file v… — 29/100 (CVE-2026-56590)
  8. hcltech bigfix service management: HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability. — 29/100 (CVE-2026-21806)
  9. oisf suricata: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring… — 28/100 (CVE-2026-57228)