Sécurité IT 2026-09-25

Niveau Critique — 90/100 — 2026-09-25

Journée « Critique » : 7 sujets classés, 5 des 7 premiers signalés comme activement exploités, 5 failles ajoutées au catalogue des vulnérabilités exploitées de la CISA. En tête : Adobe Commerce and Magento Incorrect Authorization Vulnerability (88/100).

1. Adobe Commerce and Magento Incorrect Authorization Vulnerability — 88/100 (CVE-2026-71362)
2. WSO2 Multiple Products Path Traversal Vulnerability — 68/100 (CVE-2026-5430)
3. WordPress Core Remote File Inclusion Vulnerability — 66/100 (CVE-2026-87902)
4. Microsoft SharePoint Code Injection Vulnerability — 66/100 (CVE-2026-65660)
5. Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability — 60/100 (CVE-2026-67279)
6. CVE-2026-97063 — X-SpringBoot through 6.0 returns login verification codes in HTTP responses from unauthenticated endpoints GE… — 36/100 (CVE-2026-97063)
7. broadcom rabbitmq server: RabbitMQ is a messaging and streaming broker. — 29/100 (CVE-2026-67237)