Restez informés

Deux sections pour maintenir une veille efficace et rapide en cybersécurité. Une section de news pour avoir un aperçu des articles récents en rapport avec la cybersécurité et une section qui référence les CVE à haut score les plus récentes afin de comprendre du premier coup d'oeil ce qu'elles concernent sans avoir besoin de consulter de pages supplémentaires.

Actualité
Vulnérabilités

8.5

CVE-2026-55234 - Wekan: Broken access control: any authenticated user can move their Cards/Lists/Swimlanes into a private board they are not a member of (cross-board write via collection allow rule)

Il y a 3 mois

9.6

CVE-2026-54458 - AVideo: Unauthenticated Stored DOM Cross-Site Scripting via Per-Client Metadata Broadcast in YPTSocket Plugin

Il y a 3 mois

9.2

CVE-2026-52893 - Wekan: OIDC Account Takeover via Unconditional Email-Based Account Merge in onCreateUser hook

Il y a 3 mois

9.9

CVE-2026-52891 - Wekan: Shell Injection via Avatar Upload

Il y a 3 mois

8.6

CVE-2026-48795 - Incomplete fix for CVE-2026-25754 in @adonisjs/bodyparser

Il y a 3 mois

8.8

CVE-2026-62312 - 9Router: Authenticated RCE via Unvalidated MCP Plugin Arguments

Il y a 3 mois

8.7

CVE-2026-56679 - 9Router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade

Il y a 3 mois

9.9

CVE-2026-54052 - n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deployments

Il y a 3 mois

10

CVE-2026-52887 - NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE

Il y a 3 mois

9.8

CVE-2026-49352 - 9Router: Hardcoded Default fallback JWT Secret Allows Authentication Bypass

Il y a 3 mois

10

CVE-2026-46339 - 9Router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes

Il y a 3 mois

8.7

CVE-2026-33445 - Memory management vulnerability in Secure Access servers

Il y a 3 mois

9.2

CVE-2026-49445 - Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket access

Il y a 3 mois

9.5

CVE-2026-46684 - DataEase: Unauthorized Command Execution Vulnerability

Il y a 3 mois

8.7

CVE-2026-45535 - DataEase: Stored SQL Injection Vulnerability

Il y a 3 mois

9

CVE-2026-45534 - DataEase: RCE Vulnerability

Il y a 3 mois

8.3

CVE-2026-45533 - DataEase: Path Traversal Vulnerability

Il y a 3 mois

8.5

CVE-2026-45419 - DataEase: Arbitrary File Write Vulnerability

Il y a 3 mois

8.7

CVE-2026-45417 - DataEase: SQL injection vulnerability

Il y a 3 mois

8.7

CVE-2026-45320 - DataEase Data Dashboard SqlVariable transFilter Unfiltered SQL Injection

Il y a 3 mois

8.5

CVE-2026-40952 - Privilge misconfiguration in Secure Access installers

Il y a 3 mois

8.3

CVE-2026-62349 - TDengine: Off-by-One Buffer Overflow

Il y a 3 mois

8.8

CVE-2026-59733 - rclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read, overwrite and delete other users' repositories

Il y a 3 mois

8.8

CVE-2026-50130 - Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`

Il y a 3 mois

9.3

CVE-2026-48334 - Illustrator | Improper Input Validation (CWE-20)

Il y a 3 mois