Sécurité IT 2026-10-07

Niveau Calme — 37/100 — 2026-10-07

Journée « Calme » : 14 sujets classés, 0 des 10 premiers signalés comme activement exploités, 0 faille ajoutée au catalogue des vulnérabilités exploitées de la CISA. En tête : splunk splunk: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compre… (38/100).

  1. splunk splunk: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compre… — 38/100 (CVE-2026-76285)
  2. CVE-2026-76459 — As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering… — 38/100 (CVE-2026-76459)
  3. CVE-2026-92414 — : Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. — 36/100 (CVE-2026-92414)
  4. CVE-2026-76454 — A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Softw… — 35/100 (CVE-2026-76454)
  5. CVE-2026-93675 — IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expec… — 30/100 (CVE-2026-93675)
  6. CVE-2026-106218 — In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was po… — 30/100 (CVE-2026-106218)
  7. CVE-2026-82162 — Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vu… — 29/100 (CVE-2026-82162)
  8. CVE-2026-67273 — Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special El… — 29/100 (CVE-2026-67273)
  9. CVE-2026-63691 — Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in… — 29/100 (CVE-2026-63691)
  10. CVE-2026-106237 — Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass s… — 28/100 (CVE-2026-106237)