Sécurité IT 2026-10-17

Niveau Tendu — 61/100 — 2026-10-17

Journée « Tendu » : 5 sujets classés, 2 des 5 premiers signalés comme activement exploités, 2 failles ajoutées au catalogue des vulnérabilités exploitées de la CISA. En tête : BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability (67/100).

1. BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability — 67/100 (CVE-2026-102764)
2. Fortinet Multiple Products Path Traversal Vulnerability — 60/100 (CVE-2025-61624)
3. CVE-2026-111643 — Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated… — 28/100 (CVE-2026-111643)
4. CVE-2026-111693 — DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allows unauth… — 28/100 (CVE-2026-111693)
5. CVE-2026-111375 — FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL client that… — 19/100 (CVE-2026-111375)