Sécurité IT 2026-10-13

Niveau Tendu — 75/100 — 2026-10-13

Journée « Tendu » : 7 sujets classés, 2 des 7 premiers signalés comme activement exploités, 2 failles ajoutées au catalogue des vulnérabilités exploitées de la CISA. En tête : Microsoft Windows Command Injection Vulnerability (83/100).

1. Microsoft Windows Command Injection Vulnerability — 83/100 (CVE-2026-96951)
2. Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability — 82/100 (CVE-2026-104935)
3. microsoft windows 10 1607: Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a networ… — 38/100 (CVE-2026-83888)
4. CVE-2026-82110 — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary… — 30/100 (CVE-2026-82110)
5. CVE-2026-19622 — IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privi… — 30/100 (CVE-2026-19622)
6. CVE-2026-82101 — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of… — 29/100 (CVE-2026-82101)
7. CVE-2026-109566 — Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unaut… — 28/100 (CVE-2026-109566)