Vulnérabilités citées
Les CVE mentionnées dans l’actualité, avec leur gravité. Un score élevé indique une faille sérieuse, mais pas forcément exploitée.
| CVE | Score | Description | Articles |
|---|---|---|---|
| CVE-2026-123158 | 8.1 | sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of wheth… | 3 |
| CVE-2026-83844 | 8.1 | Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network. | 1 |
| CVE-2026-19868 | 7.5 | An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authen… | 1 |
| CVE-2026-109518 | 7.7 | On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT clie… | 1 |
| CVE-2026-119977 Exploitée activement |
8.1 | WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package cor… | 2 |
| CVE-2026-111357 Exploitée activement |
7 | Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploite… | 1 |
| CVE-2026-106087 | 8.7 | TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the affected devic… | 1 |
| CVE-2026-10756 | 7.7 | TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only from localho… | 1 |
| CVE-2026-13162 | 7.7 | An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control over the d… | 1 |
| CVE-2026-43284 | 8.8 | In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe … | 1 |
| CVE-2026-76418 Exploitée activement |
8.6 | A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) So… | 1 |
| CVE-2026-89209 | 7.6 | A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.4), Mendix SAML… | 1 |
| CVE-2026-46300 Exploitée activement |
7.8 | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags… | 1 |
| CVE-2023-4863 Exploitée activement |
8.8 | Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafte… | 1 |
| CVE-2026-114596 | 8.8 | In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bo… | 1 |
| CVE-2026-114597 | 8.7 | In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of… | 1 |
| CVE-2026-114598 | 8.7 | In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of… | 1 |
| CVE-2026-16437 | 7.1 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONI… | 1 |
| CVE-2021-41617 | 7 | sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized … | 1 |
| CVE-2023-52927 | 7.8 | In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nf_ct_find_expectation Currently nf_conntrack_in() calling… | 2 |
| CVE-2024-26982 | 7.1 | In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the inode number is not the invalid value of zero Syskiller has produced an out of b… | 1 |
| CVE-2024-27056 | 7.8 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: ensure offloading TID queue exists The resume code path assumes that the TX queu… | 1 |
| CVE-2024-36922 | 8.8 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: read txq->read_ptr under lock If we read txq->read_ptr without lock, we can read the … | 1 |
| CVE-2024-53166 | 7.8 | In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix bfqq uaf in bfq_limit_depth() Set new allocated bfqq to bic or remove freed bfqq fro… | 1 |
| CVE-2025-6965 | 7.2 | There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memor… | 1 |
This product uses data from the NVD API but is not endorsed or certified by the NVD.