VulnWatcH85b8c08c6947 · veille vulnérabilités

Page générée le 23.10.2026 à 00h10
Vue « Sans navigateurs » : 0 alertes masquées (Google Chrome, Mozilla Firefox). La collecte et les notifications continuent. Watchlist, KEV et 0-day restent toujours affichés.
Vue « Serveurs » : 0 alertes masquées (Google Chrome, Mozilla Firefox, Apple (macOS, iOS, iPadOS), Windows (postes)). La collecte et les notifications continuent. Watchlist, KEV et 0-day restent toujours affichés.
PoC publiées · 24 h
Activité PoC : 30/j (médiane 60 j) · ▲ +9 % vs 60 j précédents
  1. #1CVE-2026-109618PHP2Shell234/24 hDigne d'intérêt
    7 j· ×78 le seuil (3)· 440 auteurs au total· en tendance depuis 22.10 23h06👁 PHP
  2. #2CVE-2026-109619Php2Shell8/24 hDigne d'intérêt
    7 j· ×2.7 le seuil (3)· 15 auteurs au total· en tendance depuis 22.10 23h06👁 PHP
  3. #3CVE-2026-1114978/24 hDigne d'intérêt
    7 j· ×2.7 le seuil (3)· 9 auteurs au total· en tendance depuis 22.10 23h06
  4. #4CVE-2026-1119434/24 hDigne d'intérêt
    7 j· ×1.3 le seuil (3)· 4 auteurs au total· en tendance depuis 22.10 23h06👁 Go (bibliothèque standard et toolchain)

Veille Sec

surveillées / chargées
88/89 technos avec au moins une source active, sur les technos chargées
  • Jackson (jackson-databind)GHSA (à venir)
  • .NET / ASP.NET CoreCVEKEVPSIRT (à venir)
  • Amazon Web ServicesCVEPSIRT (à venir)
  • Apache HTTP ServerCVEKEVVEX (à venir)
  • Apache Log4jCVEKEVGHSA (à venir)
  • Apache StrutsCVEKEVGHSA (à venir)
  • Apache TomcatCVEKEVVEX (à venir)
  • Apple (macOS, iOS, iPadOS)CVEKEV
  • Atlassian CloudCVE
  • Atlassian Confluence / Jira (Data Center)CVEKEV
  • BashCVEVEX (à venir)
  • BIND (ISC)CVEVEX (à venir)
  • CaddyCVEGHSA (à venir)
  • Check PointCVEKEV
  • Cisco (IOS XE, ASA, FTD…)CVEKEVPSIRT (à venir)
  • Citrix NetScalerCVEKEV
  • CloudflareCVEGHSA (à venir)
  • cloudflaredCVEGHSA (à venir)
  • curl / libcurlCVEVEX (à venir)
  • DebianOSOSV (à venir)KEV
  • F5 (BIG-IP)CVEKEV
  • Fortinet (FortiOS, FortiGate, FortiProxy…)CVEKEVPSIRT (à venir)
  • GitHub (Cloud / Enterprise)CVE
  • GitLab (auto-hébergé)CVEKEV
  • glibcCVEKEVVEX (à venir)
  • GnuTLSCVEVEX (à venir)
  • Go (bibliothèque standard et toolchain)CVEVEX (à venir)
  • Google ChromeCVEKEV
  • Google Cloud / WorkspaceCVE
  • IBM AIXOSCVEKEV
  • ImageMagickCVEVEX (à venir)
  • Ivanti (Connect Secure, EPMM…)CVEKEV
  • Java (OpenJDK / Oracle Java SE)CVEKEVVEX (à venir)
  • JenkinsCVEKEV
  • Juniper Networks (Junos)CVEKEV
  • KubernetesCVEGHSA (à venir)
  • libwebpCVEKEVVEX (à venir)
  • libxml2CVEVEX (à venir)
  • Linux kernelCVEKEVVEX (à venir)
  • Microsoft 365 / Entra ID / AzureCVEKEVPSIRT (à venir)
  • Microsoft Exchange / SharePoint (serveurs)CVEKEVPSIRT (à venir)
  • MIT Kerberos (krb5)CVEVEX (à venir)
  • Mozilla FirefoxCVE
  • MySQL / MariaDBCVEVEX (à venir)
  • nginxCVEVEX (à venir)
  • Node.jsCVEVEX (à venir)
  • NSS (Mozilla)CVEVEX (à venir)
  • OktaCVE
  • OpenLDAPCVEVEX (à venir)
  • OpenSSHCVEVEX (à venir)Fuites (à venir)
  • OpenSSLCVEVEX (à venir)
  • Oracle (WebLogic, Database, Java)CVEKEV
  • Palo Alto Networks (PAN-OS, GlobalProtect)CVEKEVPSIRT (à venir)
  • PerlCVEVEX (à venir)
  • PHPCVEKEVVEX (à venir)Fuites (à venir)
  • PodmanCVEGHSA (à venir)VEX (à venir)
  • polkitCVEKEVVEX (à venir)
  • PostfixCVEVEX (à venir)
  • PostgreSQLCVEVEX (à venir)
  • Progress (MOVEit, WS_FTP)CVEKEV
  • Python (CPython)CVEVEX (à venir)
  • Python · requests / Flask / JinjaCVEGHSA (à venir)
  • QNAP QTSCVEKEV
  • Red Hat Enterprise LinuxOSVEX (à venir)KEV
  • RedisCVEVEX (à venir)
  • runc / containerd / DockerCVEKEVGHSA (à venir)VEX (à venir)
  • SalesforceCVE
  • SambaCVEKEVVEX (à venir)
  • SAPCVEKEV
  • ServiceNowCVEKEV
  • SlackCVE
  • SnowflakeCVEGHSA (à venir)
  • SonicWallCVEKEV
  • Spring Framework / Spring BootCVEKEVGHSA (à venir)
  • SQLiteCVEVEX (à venir)
  • sudoCVEKEVVEX (à venir)
  • Synology DSMCVEKEV
  • systemdCVEVEX (à venir)
  • TailscaleCVEGHSA (à venir)
  • Ubiquiti (UniFi)CVE
  • Ubuntu Server (LTS)OSOSV (à venir)KEV
  • Veeam Backup & ReplicationCVEKEV
  • VMware (ESXi, vCenter)CVEKEV
  • Windows (postes)CVEKEVPSIRT (à venir)
  • Windows ServerOSCVEKEVPSIRT (à venir)
  • xz / liblzmaCVEVEX (à venir)
  • zlibCVEVEX (à venir)
  • ZoomCVE
  • ZyxelCVEKEV

Alertes

57 sur 48 h · plus récentes en haut
  1. [22.10.2026] 23h49CVE-2026-83938via cvelistV5 · CNA microsoft
    [Microsoft 365 / Entra ID / Azure]-[10.0 Critique]
    Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.
    Patch disponible :OuiMitigation :?
  2. [22.10.2026] 23h49CVE-2026-96185via cvelistV5 · CNA microsoft
    [Microsoft 365 / Entra ID / Azure]-[7.5 Élevée]
    Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.
    Patch disponible :OuiMitigation :?
  3. [22.10.2026] 23h49CVE-2026-97785via cvelistV5 · CNA microsoft
    [Microsoft 365 / Entra ID / Azure]-[10.0 Critique]
    Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.
    Patch disponible :OuiMitigation :?
  4. [22.10.2026] 23h49CVE-2026-105014via cvelistV5 · CNA microsoft
    [Microsoft 365 / Entra ID / Azure]-[9.1 Critique]
    Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.
    Patch disponible :OuiMitigation :?
  5. [22.10.2026] 23h49CVE-2026-108456via cvelistV5 · CNA microsoft
    [Microsoft 365 / Entra ID / Azure]-[7.7 Élevée]
    Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.
    Patch disponible :OuiMitigation :?
  6. [22.10.2026] 23h49CVE-2026-110063via cvelistV5 · CNA microsoft
    [Microsoft 365 / Entra ID / Azure]-[10.0 Critique]
    Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.
    Patch disponible :OuiMitigation :?
  7. [22.10.2026] 23h08CVE-2026-114583via cvelistV5 · CNA PSF
    [Python (CPython)]-[6.9 Moyenne]
    tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() with filter="tar" to write files outside the …
    Patch disponible :Oui(amont 3.16.0)Mitigation :?
  8. [22.10.2026] 22h34CVE-2026-115417via cvelistV5 · CNA AMZN
    [Amazon Web Services]-[7.5 Élevée]
    Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the client application. To remediate this issue, users should upgrade to aws-c-mqtt 0.16.2 or later, or to an AWS Common Runtime or AWS IoT …
    Patch disponible :Oui(amont 0.16.2)Mitigation :?
  9. [22.10.2026] 22h08CVE-2026-109619WatchlistDigne d'intérêtvia cvelistV5 · CNA php
    [PHP]-[9.2 Critique]
    PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state …
    Patch disponible :Oui(amont 8.2.35, 8.3.36, 8.4.27, 8.5.12)Mitigation :Oui
  10. [22.10.2026] 22h04CVE-2026-115419via cvelistV5 · CNA AMZN
    [Amazon Web Services]-[8.1 Élevée]
    The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could read other tenants' conversation history and add persistent instructions that alter …
    Patch disponible :Oui(amont 1.5.0, 1.43.0)Mitigation :?
  11. [22.10.2026] 21h11CVE-2026-76489via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[5.8 Moyenne]
    Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking …
    Patch disponible :?Mitigation :?
  12. [22.10.2026] 21h11CVE-2026-20221via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[5.8 Moyenne]
    Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause an unexpected restart of the Snort 3 Detection Engine. This vulnerability is due to improper …
    Patch disponible :?Mitigation :?
  13. [22.10.2026] 21h11CVE-2026-20197via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[5.8 Moyenne]
    Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking when Snort 3 …
    Patch disponible :?Mitigation :?
  14. [22.10.2026] 21h11CVE-2026-20011via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[5.8 Moyenne]
    Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of error checking when the MIME fields of the SMTP header are parsed. An attacker could …
    Patch disponible :?Mitigation :?
  15. [22.10.2026] 21h11CVE-2026-76445via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[5.3 Moyenne]
    Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) condition. The vulnerability is due to a flaw in logic handling when General Packet …
    Patch disponible :?Mitigation :?
  16. [22.10.2026] 21h11CVE-2026-20218via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[5.8 Moyenne]
    A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper range …
    Patch disponible :?Mitigation :?
  17. [22.10.2026] 21h11CVE-2026-20179via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[5.8 Moyenne]
    Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation (GRE) Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete …
    Patch disponible :?Mitigation :?
  18. [22.10.2026] 21h11CVE-2026-20291via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[7.8 Élevée]
    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The …
    Patch disponible :?Mitigation :?
  19. [22.10.2026] 21h10CVE-2026-20019via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[5.8 Moyenne]
    Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking when Snort 3 …
    Patch disponible :?Mitigation :?
  20. [22.10.2026] 21h10CVE-2026-20356via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[7.5 Élevée]
    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The …
    Patch disponible :?Mitigation :?
  21. [22.10.2026] 21h10CVE-2026-20236via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[7.5 Élevée]
    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The …
    Patch disponible :?Mitigation :?
  22. [22.10.2026] 21h10CVE-2026-20043via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[9.0 Critique]
    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The …
    Patch disponible :?Mitigation :?
  23. [22.10.2026] 20h54CVE-2026-115414via cvelistV5 · CNA AMZN
    [Amazon Web Services]-[7.8 Élevée]
    OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host running the build via a crafted Terraform resource address. To remediate this issue, …
    Patch disponible :Oui(amont 1.166.2)Mitigation :?
  24. [22.10.2026] 18h50CVE-2026-115416via cvelistV5 · CNA AMZN
    [Amazon Web Services]-[7.7 Élevée]
    Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed an authenticated user to read AWS account identifiers and SQL statement text query metadata from other AWS accounts. Query results, and data stored in Amazon S3 or other data sources, were not accessible through this …
    Patch disponible :?Mitigation :?
  25. [22.10.2026] 15h37CVE-2026-76435via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[5.3 Moyenne]
    A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to insufficient authorization checks of HTTP requests during Mobile and Remote Access (MRA) provisioning. An attacker could exploit this …
    Patch disponible :?Mitigation :?
  26. [22.10.2026] 15h37CVE-2026-76473via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[9.8 Critique]
    As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified …
    Patch disponible :?Mitigation :?
  27. [22.10.2026] 15h37CVE-2026-76474via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[9.8 Critique]
    As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified …
    Patch disponible :?Mitigation :?
  28. [22.10.2026] 15h37CVE-2026-76475via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[9.3 Critique]
    As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified …
    Patch disponible :?Mitigation :?
  29. [22.10.2026] 15h37CVE-2026-76476via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[8.8 Élevée]
    As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified …
    Patch disponible :?Mitigation :?
  30. [22.10.2026] 15h37CVE-2026-76477via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[8.8 Élevée]
    As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified …
    Patch disponible :?Mitigation :?
  31. [22.10.2026] 15h37CVE-2026-76478via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[8.8 Élevée]
    As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified …
    Patch disponible :?Mitigation :?
  32. [22.10.2026] 15h37CVE-2026-76479via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[7.8 Élevée]
    As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified …
    Patch disponible :?Mitigation :?
  33. [22.10.2026] 15h37CVE-2026-76487via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[5.3 Moyenne]
    A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device. This vulnerability is due to improper input …
    Patch disponible :?Mitigation :?
  34. [22.10.2026] 15h37CVE-2026-76491via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[7.5 Élevée]
    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The …
    Patch disponible :?Mitigation :?
  35. [22.10.2026] 15h37CVE-2026-76492via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[7.5 Élevée]
    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The …
    Patch disponible :?Mitigation :?
  36. [22.10.2026] 15h37CVE-2026-76490via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[8.6 Élevée]
    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The …
    Patch disponible :?Mitigation :?
  37. [22.10.2026] 15h37CVE-2026-76493via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[7.5 Élevée]
    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The …
    Patch disponible :?Mitigation :?
  38. [22.10.2026] 15h37CVE-2026-76494via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[7.8 Élevée]
    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The …
    Patch disponible :?Mitigation :?
  39. [22.10.2026] 15h37CVE-2026-76495via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[7.8 Élevée]
    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The …
    Patch disponible :?Mitigation :?
  40. [22.10.2026] 15h37CVE-2026-76496via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[7.0 Élevée]
    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The …
    Patch disponible :?Mitigation :?
  41. [22.10.2026] 15h37CVE-2026-76524via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[7.8 Élevée]
    A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user. This vulnerability is due to a lack of authentication when a local user connects to the Snort control channel …
    Patch disponible :?Mitigation :?
  42. [22.10.2026] 15h37CVE-2026-76497via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[6.6 Moyenne]
    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The …
    Patch disponible :?Mitigation :?
  43. [22.10.2026] 15h37CVE-2026-76505via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[7.5 Élevée]
    A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause network processor (NP) errors, …
    Patch disponible :?Mitigation :?
  44. [22.10.2026] 14h50CVE-2026-110264Digne d'intérêtvia cvelistV5 · CNA GitLab
    [GitLab (auto-hébergé)]-[10.0 Critique]
    An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code …
    Patch disponible :Oui(amont 18.11.13, 19.0.10, 19.1.9, 19.2.9)Mitigation :?
  45. [22.10.2026] 01h3511 CVEDigne d'intérêtvia cvelistV5 · CNA GitLab
    [GitLab (auto-hébergé)]-[8.2 Élevée max]
    11 vulnérabilités corrigées par la même version (19.3.6, 19.4.3, 19.5.1). Plus grave : CVE-2026-15723. Liste : CVE-2026-12664, CVE-2026-13319, CVE-2026-14288, CVE-2026-15723, CVE-2026-16255, CVE-2026-103515, CVE-2026-105711, CVE-2026-105777, CVE-2026-112378, CVE-2026-112212, CVE-2026-112326
    Patch disponible :Oui(amont 19.3.6, 19.4.3, 19.5.1)Mitigation :?
  46. [21.10.2026] 21h47CVE-2026-112408via cvelistV5 · CNA AMZN
    [Amazon Web Services]-[8.1 Élevée]
    Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creation of a predictably …
    Patch disponible :Oui(amont 2.257.3, 3.10.0)Mitigation :?
  47. [21.10.2026] 19h19CVE-2026-19630via cvelistV5 · CNA isc
    [BIND (ISC)]-[7.5 Élevée]
    In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during processing. This issue …
    Patch disponible :OuiMitigation :Oui
  48. [21.10.2026] 19h19CVE-2026-94300via cvelistV5 · CNA isc
    [BIND (ISC)]-[8.1 Élevée]
    Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacker controls, the attacker may potentially achieve remote code …
    Patch disponible :OuiMitigation :Oui
  49. [21.10.2026] 19h19CVE-2026-96888via cvelistV5 · CNA isc
    [BIND (ISC)]-[7.5 Élevée]
    A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.16.8-S1 through 9.18.50-S1, and 9.20.9-S1 …
    Patch disponible :OuiMitigation :Oui
  50. [21.10.2026] 19h19CVE-2026-97313via cvelistV5 · CNA isc
    [BIND (ISC)]-[7.5 Élevée]
    A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failure, resulting in a denial of service. To be vulnerable, the BIND server must allow recursive queries and have at least two RPZ zones configured: one with the default …
    Patch disponible :OuiMitigation :Oui
  51. [21.10.2026] 19h19CVE-2026-76462via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[5.5 Moyenne]
    A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit …
    Patch disponible :?Mitigation :?
  52. [21.10.2026] 19h19CVE-2026-76466via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[9.8 Critique]
    A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as root. This vulnerability is due to the use of persistent cookies. Additionally, there is …
    Patch disponible :?Mitigation :?
  53. [21.10.2026] 19h19CVE-2026-76481via cvelistV5 · CNA cisco
    [Cisco (IOS XE, ASA, FTD…)]-[7.5 Élevée]
    As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified …
    Patch disponible :?Mitigation :?
  54. [21.10.2026] 18h07CVE-2026-109618WatchlistDigne d'intérêtvia cvelistV5 · CNA php
    [PHP]-[9.2 Critique]
    PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on …
    Patch disponible :Oui(amont 8.2.35, 8.3.36, 8.4.27, 8.5.12)Mitigation :Oui
  55. [21.10.2026] 16h59CVE-2023-7356via cvelistV5 · CNA Linux
    [Linux kernel]-[-.-]
    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID Copy the content of a Periodic Advertisement Report to BASE only if the service UUID is Basic Audio Announcement Service UUID.
    Patch disponible :Oui(amont 6.1.178, 6.6.145, 6.7, 927ef409f713929dea2b9a5ed5bb65e712be0050)Mitigation :?
  56. [21.10.2026] 16h55CVE-2026-98869via cvelistV5 · CNA Linux
    [Linux kernel]-[-.-]
    In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zext_dst based on static register liveness analysis As reported in the thread [1], the verifier's 32-bit operations zero extension logic is broken. This logic is responsible for correct semantics of 32-bit operations on s390 architecture. …
    Patch disponible :Oui(amont 7.3, 7ce090afbf725e25fff29caacce1eaf8459b1117)Mitigation :?
  57. [21.10.2026] 03h24CVE-2026-111943Digne d'intérêtvia cvelistV5 · CNA Go
    [Go (bibliothèque standard et toolchain)]-[-.-]
    On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of …
    Patch disponible :Oui(amont 1.26.10, 1.27.3)Mitigation :?
VulnWatcH 0.2.0 · lecture seuleDernière collecte : 23.10.2026 à 00h10

Légende

Libellés de menace

Préoccupante
exploitation observée : catalogue KEV de CISA ou SSVC « active »
Digne d'intérêt
preuve de concept : SSVC « poc », référence « exploit » ou ≥ 3 auteurs de PoC
Surveillée
discutée : 1 ou 2 auteurs de PoC, ou petit nom connu
…*
libellé arrivé après la création de l'alerte ; survol : preuves

Alertes

Watchlist
identifiant listé dans watch_ids
0-day
exploitée sans correctif connu ; contour orange, clignotant tant que le patch n'est pas « Oui »
barre de gauche : CVSS critique, élevée, moyenne, faible ; [-.-] = pas de CVSS
{UPDATE} hh:mm
champ modifié après la création ; ancienne valeur barrée
Patch : Oui / Non / ?
« amont » = version corrigée publiée ; « ? » = pas d'information ; passage à « Oui » : clignotement vert 30 min
Mitigation : Oui / ?
contournement publié par le CNA ; « ? » = pas d'information
OS OS
version d'OS touchée / non touchée

Tendances

#1, #2…
classement par activité sur 24 h, la plus forte en premier
N/24 h
auteurs distincts de dépôts PoC en 24 h (forks exclus)
Seuil
99e centile des 60 derniers jours (plancher 3) ; s'ajuste à l'activité globale
Activité PoC
médiane des dépôts par jour sur 60 j, et évolution vs les 60 j précédents
👁
concerne une techno chargée (au survol d'une ligne)

Veille Sec

jauge : toutes couvertes, incomplète, < 50 %, < 3, 0 (clignote)