55 casos · pág. 3/3
CERT-FR advisory CERTFR-2026-AVI-1320, published 15 October 2026, reports multiple vulnerabilities in SonicWall Network Security Manager (NSM) On-Prem that allow a remote attacker to execute arbitrary code and bypass the security policy. The advisory references CVE-2026-100232 and CVE-2026-96540, based on SonicWall bulletin SNWLID-2026-00…
CERT-FR advisory CERTFR-2026-AVI-1323, published 15 October 2026, reports a vulnerability in Microsoft SharePoint Server Subscription Edition that allows an attacker to elevate privileges. The flaw is tracked as CVE-2026-88164 and is based on a Microsoft security bulletin dated 13 October 2026. The advisory does not state whether the flaw…
CERT-FR advisory CERTFR-2026-AVI-1321, published 15 October 2026, reports multiple vulnerabilities in Drupal core that allow a remote attacker to execute arbitrary code and perform indirect code injection (XSS). The advisory references CVE-2026-108097, CVE-2026-108514 and CVE-2026-108515, based on three Drupal security bulletins dated 14 …
CERT-FR advisory CERTFR-2026-AVI-1318, published 15 October 2026, reports multiple vulnerabilities in Moodle that allow a remote attacker to perform cross-site scripting (XSS) and bypass the security policy. The advisory references CVE-2026-47759, CVE-2026-47761 and CVE-2026-47762, based on two Moodle security bulletins dated 15 October 2…
CERT-FR advisory CERTFR-2026-AVI-1317 is not the source here; this record covers CERTFR-2026-AVI-1326, which reports multiple vulnerabilities in Palo Alto Networks products fixed in vendor bulletins of October 14, 2026. Some flaws allow remote arbitrary code execution, privilege escalation and remote denial of service. Other impact classe…
CERT-FR advisory CERTFR-2026-AVI-1324, published 15 October 2026, reports multiple vulnerabilities in Symfony components that allow a remote attacker to cause a denial of service. The affected components are symfony/expression-language, symfony/http-foundation, symfony/symfony and symfony/yaml, across the 5.4, 6.x, 7.x and 8.x branches. T…
CERT-FR advisory CERTFR-2026-AVI-1310 reports multiple vulnerabilities in Citrix products, based on Citrix security bulletins dated 13 October 2026. According to the advisory, some flaws allow an attacker to achieve arbitrary code execution, privilege escalation and remote denial of service. Other listed impacts are data integrity and con…
CERT-FR advisory CERTFR-2026-AVI-1313 reports multiple vulnerabilities in Microsoft .NET, ASP.NET Core and .NET Framework, covered by Microsoft's October 13, 2026 security bulletins for 43 CVEs. Some of them allow an attacker to achieve remote arbitrary code execution, privilege escalation and remote denial of service. The advisory also l…
CERT-FR advisory CERTFR-2026-AVI-1316 reports multiple vulnerabilities across Microsoft products, based on Microsoft security bulletins dated 13 October 2026. According to the advisory, some flaws allow an attacker to achieve remote arbitrary code execution, privilege escalation and remote denial of service. Other listed impacts are data …
CERT-FR advisory CERTFR-2026-AVI-1314 reports multiple vulnerabilities in Microsoft Windows and related components, covered by Microsoft's October 13, 2026 security bulletins (ADV260001 and dozens of CVEs). Some of them allow remote arbitrary code execution, privilege escalation, remote denial of service, security policy bypass and compro…
CERT-FR advisory CERTFR-2026-AVI-1309 reports a vulnerability in Zabbix that allows an attacker to compromise data confidentiality. The advisory covers several supported branches and refers to the vendor bulletin ZBX-28169, published on 14 October 2026. No CVE identifier, exploitation status, technical detail or attribution is provided in…
CERT-FR advisory CERTFR-2026-AVI-1308, published on 14 October 2026, reports multiple vulnerabilities in Google Chrome. Google released the corresponding security bulletins on 13 October 2026 for the Stable and Extended Stable desktop channels. The advisory says only that an attacker could cause a security issue "not specified by the vend…
CERT-FR advisory CERTFR-2026-AVI-1315 reports multiple vulnerabilities in Microsoft Azure components, published on 14 October 2026. Some of them allow remote arbitrary code execution, privilege escalation, security policy bypass and loss of data confidentiality. Microsoft published the corresponding security bulletins on 13 October 2026. …
CERT-FR advisory CERTFR-2026-AVI-1312 covers a large set of vulnerabilities in Microsoft Office, fixed in Microsoft's 13 October 2026 security updates. Exploitation can lead to remote arbitrary code execution, privilege escalation, security policy bypass and loss of data confidentiality. Microsoft states that CVE-2026-96951 is being activ…
Ivanti released its October 2026 security update on 13 October 2026. It fixes the actively exploited Connect Secure zero-day CVE-2026-104935, a spoofing-based authentication bypass that lets remote, unauthenticated attackers execute arbitrary commands (cert.ssi.gouv.fr, darkwebinformer.com). The flaw was discovered by Volexity, which trac…
