Sécurité IT 2026-09-24

Niveau Tendu — 64/100 — 2026-09-24

Journée « Tendu » : 6 sujets classés, 2 des 6 premiers signalés comme activement exploités, 2 failles ajoutées au catalogue des vulnérabilités exploitées de la CISA. En tête : Adobe Commerce and Magento Incorrect Authorization Vulnerability (68/100).

1. Adobe Commerce and Magento Incorrect Authorization Vulnerability — 68/100 (CVE-2026-71362)
2. WSO2 Multiple Products Path Traversal Vulnerability — 67/100 (CVE-2026-5430)
3. CVE-2026-95848 — Moquette is a lightweight Java MQTT broker. — 29/100 (CVE-2026-95848)
4. CVE-2026-96755 — orval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect generator th… — 28/100 (CVE-2026-96755)
5. broadcom rabbitmq server: RabbitMQ is a messaging and streaming broker. — 27/100 (CVE-2026-67231)
6. claris filemaker server: An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially c… — 27/100 (CVE-2026-86930)