Veille de sécurité · Menaces actives

Explorer le catalogue → Analyses Bulletins Éditeurs Méthode

DERNIÈRE SYNCHRONISATION · 29 oct. 2026, 08:00 · SOURCES PUBLIQUES

CATALOGUE KEV · il y a 3 heures // SCORES EPSS/CVSS · il y a 3 heures // VEILLE · il y a 33 minutes // INFRASTRUCTURE C2 · il y a 3 heures // CERT-FR (ANSSI) · il y a 3 heures

Liées au ransomware ET à forte probabilité d'exploitation (EPSS ≥ 50 %)

CVE-2021-21985 100%

VMware · vCenter Server

CVE-2021-22005 100%

VMware · vCenter Server

CVE-2019-11510 100%

Ivanti · Pulse Connect Secure

CVE-2021-34473 100%

Microsoft · Exchange Server

CVE-2019-0708 100%

Microsoft · Remote Desktop Services

CVE-2018-13379 100%

Fortinet · FortiOS

CVE-2021-35464 100%

ForgeRock · Access Management (AM)

CVE-2020-5902 100%

F5 · BIG-IP

CVE-2026-46300 Linux · Kernel· CWE-456 10% 28 oct. 2026 CVE-2026-41709 Broadcom · VMware ESX· CWE-778 0% 28 oct. 2026 CVE-2026-111497 Google · Brotli· CWE-252 88% 27 oct. 2026 CVE-2026-48356 Adobe · Commerce and Magento· Téléversement de fichier non restreint 59% 27 oct. 2026 CVE-2026-109619 PHP Group · PHP· Utilisation après libération (use-after-free) 100% 26 oct. 2026 CVE-2026-109618 PHP Group · PHP· Utilisation après libération (use-after-free) 100% 26 oct. 2026 CVE-2026-110447 Collabora · Collabora Online – Built-in CODE Server· Injection de commande système (OS) 12% 23 oct. 2026 CVE-2026-114625 Arista · VeloCloud Orchestrator· Injection SQL 1% 23 oct. 2026 CVE-2026-110936 Siemens · Software Center· CWE-427 1% 20 oct. 2026 CVE-2026-96652 Plex · Media Server· Falsification de requête côté serveur (SSRF) 2% 20 oct. 2026 CVE-2026-96654 Plex · Media Server· CWE-84 2% 20 oct. 2026 CVE-2026-96655 Plex · Media Server· Falsification de requête côté serveur (SSRF) 2% 20 oct. 2026

Agrégat de sources publiques · titre + extrait + lien vers la source

The Hacker Newsdans 3 heures

China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it h...

The Hacker Newsdans 2 heures

Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces

Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces. "Active exploitation has been observed targeting...

@cveNotifyil y a 1 heure

🚨 CVE-2026-118030A flaw was found in the HOTP authentication mechanism of the keycloak-services component, which provides identity and acce...

🚨 CVE-2026-118030A flaw was found in the HOTP authentication mechanism of the keycloak-services component, which provides identity and access management services. The issue occurs because the system validates a one-time password and update...

@cveNotifyil y a 1 heure

🚨 CVE-2026-117859A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-services component. The issue occu...

🚨 CVE-2026-117859A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-services component. The issue occurs when an authentication flow is restarted, which incorrectly clears the internal markers used to t...

@cveNotifyil y a 1 heure

🚨 CVE-2026-117688A flaw was found in the client registration component of Keycloak, an open-source identity and access management solution....

🚨 CVE-2026-117688A flaw was found in the client registration component of Keycloak, an open-source identity and access management solution. When a vault provider is used to store sensitive information, an authenticated client owner can use...

@cveNotifyil y a 1 heure

🚨 CVE-2026-117627A flaw was found in the JWT Authorization Grant implementation of the keycloak-services component. When an OIDC or Google...

🚨 CVE-2026-117627A flaw was found in the JWT Authorization Grant implementation of the keycloak-services component. When an OIDC or Google identity provider is configured with specific login restrictions, such as claim filtering, these che...

@cveNotifyil y a 1 heure

🚨 CVE-2026-117548A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) operation uses an attr...

🚨 CVE-2026-117548A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) operation uses an attribute's schema alias name (such as "commonName") instead of its canonical name (such as "cn") as the...

@cveNotifyil y a 1 heure

🚨 CVE-2026-97320A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element is the function AiKnowledge...

🚨 CVE-2026-97320A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element is the function AiKnowledgeDocumentServiceImpl.readUrl of the file AiKnowledgeDocumentServiceImpl.java of the component AI Know...

@cveNotifyil y a 1 heure

🚨 CVE-2024-3056A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured t...

🚨 CVE-2024-3056A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same IPC with at least one other container, can create a large number of IPC resources i...

@cveNotifyil y a 1 heure

🚨 CVE-2024-3727A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated...

🚨 CVE-2024-3727A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and...

@cveNotifyil y a 1 heure

🚨 CVE-2024-1394A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vuln...

🚨 CVE-2024-1394A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs​. The memory leak happens in github.com/golang-fips/opens...

@cveNotifyil y a 2 heures

🚨 CVE-2026-93293The Password Protected plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bundled Freemius SDK's pur...

🚨 CVE-2026-93293The Password Protected plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bundled Freemius SDK's purchase-completion handler in all versions up to, and including, 2.8.4 due to insufficient input sanit...

@cveNotifyil y a 2 heures

🚨 CVE-2026-89216The vTables WordPress plugin before 0.3 does not properly sanitise and escape a parameter before using it in a SQL statemen...

🚨 CVE-2026-89216The vTables WordPress plugin before 0.3 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and extract data from the...

@cveNotifyil y a 2 heures

🚨 CVE-2026-88928The PAYCOMET for WooCommerce WordPress plugin before 5.46 does not verify the cryptographic signature on its payment notifi...

🚨 CVE-2026-88928The PAYCOMET for WooCommerce WordPress plugin before 5.46 does not verify the cryptographic signature on its payment notification endpoint when the request references a tokenisation operation, allowing unauthenticated attac...

@cveNotifyil y a 2 heures

🚨 CVE-2026-86794The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks when processing public event...

🚨 CVE-2026-86794The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks when processing public event submissions, and does not escape several of the submitted values before outputting them in the admi...

@cveNotifyil y a 2 heures

🚨 CVE-2026-85007The Video Player for YouTube WordPress plugin before 2.1.4 does not perform a capability check on its player-preset AJAX ha...

🚨 CVE-2026-85007The Video Player for YouTube WordPress plugin before 2.1.4 does not perform a capability check on its player-preset AJAX handler, allowing users with the Contributor role and above to read the site-wide player-preset config...

@cveNotifyil y a 2 heures

🚨 CVE-2026-78396The Link Library WordPress plugin before 7.10.0 does not verify that a requested link belongs to the settings set whose dis...

🚨 CVE-2026-78396The Link Library WordPress plugin before 7.10.0 does not verify that a requested link belongs to the settings set whose display template is used to render it, allowing unauthenticated users to disclose the telephone number,...

@cveNotifyil y a 2 heures

🚨 CVE-2026-78395The Link Library WordPress plugin before 7.10.0 does not re-check the selected library's own login requirement when process...

🚨 CVE-2026-78395The Link Library WordPress plugin before 7.10.0 does not re-check the selected library's own login requirement when processing its front-end link submission, allowing unauthenticated users to submit links to a library confi...