Restez informés

Deux sections pour maintenir une veille efficace et rapide en cybersécurité. Une section de news pour avoir un aperçu des articles récents en rapport avec la cybersécurité et une section qui référence les CVE à haut score les plus récentes afin de comprendre du premier coup d'oeil ce qu'elles concernent sans avoir besoin de consulter de pages supplémentaires.

Actualité
Vulnérabilités

8.7

CVE-2026-55574 - vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends

Il y a 21 jour(s)

9.2

CVE-2026-42341 - FOSSBilling has an unauthenticated payment bypass via IPN callback forgery

Il y a 21 jour(s)

9.9

CVE-2026-34038 - Coolify authenticated remote command injection leading to RCE and secret exfiltration

Il y a 21 jour(s)

8.8

CVE-2026-25268 - Stack-based Buffer Overflow in WLAN Host

Il y a 21 jour(s)

8.6

CVE-2026-14471 - Authenticated SQL injection in the metrics-service retention policy subsystem of mcp-gateway-registry

Il y a 21 jour(s)

9.8

CVE-2026-9181 - Directory Traversal in ArcGIS Server

Il y a 21 jour(s)

8.2

CVE-2026-54291 - Silent channel-binding authentication downgrade via unsupported certificate algorithms

Il y a 21 jour(s)

9.9

CVE-2026-48614 - Plesk XML API Improper Authorization Privilege Escalation

Il y a 21 jour(s)

10

CVE-2026-48316 - ColdFusion | Improper Input Validation (CWE-20)

Il y a 21 jour(s)

8.5

CVE-2026-40141 - High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access

Il y a 21 jour(s)

8.8

CVE-2026-9085 - DNS Hijacking in TUBITAK BILGEM's Pardus-Parental-Control

Il y a 22 jour(s)

9.2

CVE-2026-59509 - Unauthenticated arbitrary MongoDB collection read in cve-search

Il y a 22 jour(s)

9

CVE-2026-14721 - UTT HiPER 1250GW Web Endpoint ConfigWirelessBase_5g stack-based overflow

Il y a 22 jour(s)

8.5

CVE-2026-14637 - kirilkirkov Ecommerce-CodeIgniter-Bootstrap ShoppingCart.php getCartItems deserialization

Il y a 23 jour(s)

8.8

CVE-2026-14535 - Fickling MLAllowlist analysis pass rendered inoperative by shared mutable state in AnalysisContext.shorten_code()

Il y a 23 jour(s)

8.8

CVE-2026-14534 - Fickling check_safety() bypass via unlisted standard library modules (_posixsubprocess, site, atexit)

Il y a 23 jour(s)

8.3

CVE-2026-12196 - HestiaCP Admin Takeover

Il y a 23 jour(s)

8.5

CVE-2026-12195 - myVesta is affected by an authenticated remote cod

Il y a 23 jour(s)

8.8

CVE-2025-71380 - n8n - Arbitrary Command Execution via Execute Command Node

Il y a 23 jour(s)

8.1

CVE-2025-71375 - picklescan - Undetected Remote Code Execution via _operator.methodcaller

Il y a 23 jour(s)

8.1

CVE-2025-71373 - picklescan - Remote Code Execution via operator.methodcaller Detection Bypass

Il y a 23 jour(s)

8.1

CVE-2025-71372 - Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef Gadget

Il y a 23 jour(s)

8.1

CVE-2025-71369 - picklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlers

Il y a 23 jour(s)

8.1

CVE-2025-71367 - picklescan - Remote Code Execution via _operator.attrgetter Detection Bypass

Il y a 23 jour(s)

8.1

CVE-2025-71366 - picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_cprofile

Il y a 23 jour(s)