Restez informés

Deux sections pour maintenir une veille efficace et rapide en cybersécurité. Une section de news pour avoir un aperçu des articles récents en rapport avec la cybersécurité et une section qui référence les CVE à haut score les plus récentes afin de comprendre du premier coup d'oeil ce qu'elles concernent sans avoir besoin de consulter de pages supplémentaires.

Actualité
Vulnérabilités

9.1

CVE-2026-111691 - WIMOOR through commit ec86736 Authentication Bypass via Forged X-USERINFO Header

Il y a 13 jour(s)

9.8

CVE-2026-111690 - Simple Admin Core through 1.8.7 Hard-Coded JWT Secret Authentication Bypass

Il y a 13 jour(s)

9.8

CVE-2026-111687 - WeRSS (we-mp-rss) through 1.5.3 RCE via template Parameter in /rss Endpoint

Il y a 13 jour(s)

8.7

CVE-2026-111686 - IceCMS through 4.1.5 SQL Injection via /WebArticle/findarticlesbynum

Il y a 13 jour(s)

8.6

CVE-2026-75941 - Lenovo Legion Zone Remote Code Execution Vulnerability

Il y a 14 jour(s)

8.6

CVE-2026-111366 - cool-admin-midway through 8.0.0 Authorization Bypass via /admin/sys/user Endpoints

Il y a 14 jour(s)

9.1

CVE-2026-111356 - MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force

Il y a 14 jour(s)

8.8

CVE-2026-111352 - ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST API

Il y a 14 jour(s)

8.2

CVE-2026-111347 - go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd

Il y a 14 jour(s)

8.2

CVE-2026-111330 - JuggleIM im-server through 1.8.16 Weak Password Hashing via Unsalted SHA-1

Il y a 14 jour(s)

9.8

CVE-2026-111329 - JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console

Il y a 14 jour(s)

9.8

CVE-2026-111322 - Archon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control API

Il y a 14 jour(s)

9.2

CVE-2026-111312 - OpenHealth through 0.2.0 Missing Authentication via /api/health-data/[id] Route

Il y a 14 jour(s)

9.5

CVE-2026-111283 - BMC Helix Network Management before 26.3.01 Authentication Bypass via SAML Configuration

Il y a 14 jour(s)

8.8

CVE-2026-111282 - iso14229 before 0.10.1 Out-of-Bounds Read via Handle_0x38_RequestFileTransfer

Il y a 14 jour(s)

9.8

CVE-2026-111281 - Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials

Il y a 14 jour(s)

8.3

CVE-2026-111280 - snap7 through 1.4.3 Out-of-Bounds Write via TSnap7MicroClient::opReadArea

Il y a 14 jour(s)

8.7

CVE-2026-111279 - Dragonfly through 2.0.2 Unbounded Memory Allocation via Negative COUNT in HRANDFIELD, ZRANDMEMBER and SRANDMEMBER

Il y a 14 jour(s)

8.7

CVE-2026-111277 - NivoCart through 2.5.1 Guest Order Invoice Disclosure via account/order/download

Il y a 14 jour(s)

8.8

CVE-2026-108452 - Microsoft Office SharePoint Remote Code Execution Vulnerability

Il y a 14 jour(s)

8.8

CVE-2026-108451 - Microsoft Office Word Remote Code Execution Vulnerability

Il y a 14 jour(s)

8.8

CVE-2026-108450 - Microsoft Office Word Remote Code Execution Vulnerability

Il y a 14 jour(s)

8.8

CVE-2026-108449 - Microsoft Office Word Remote Code Execution Vulnerability

Il y a 14 jour(s)

8.8

CVE-2026-108447 - Microsoft Office Word Remote Code Execution Vulnerability

Il y a 14 jour(s)

8.8

CVE-2026-108446 - Microsoft Office Excel Remote Code Execution Vulnerability

Il y a 14 jour(s)