42 casos · pág. 1/3
The NSA issued a warning on Wednesday about two critical vulnerabilities in PHP, present in all versions since PHP 5 (2004). The PHP Foundation has already released patches. The flaws let attackers reach the server file system or the database used by the web application. The NSA advises that any site that cannot be patched immediately sho…
CERT-FR advisory CERTFR-2026-AVI-1337 reports multiple vulnerabilities in Juniper Networks Session Smart Router (SSR) that let an attacker cause a security issue the vendor has not specified. The advisory is based on Juniper security bulletin JSA112528 of 16 October 2026. It gives no CVE identifiers, exploitation status, technical root ca…
CERT-FR advisory CERTFR-2026-AVI-1338 reports a vulnerability in Mattermost Server that lets an attacker cause a security issue the vendor has not specified. It affects Mattermost Server 11.7.x versions earlier than 11.7.12. The advisory is based on Mattermost security bulletin MMSA-2026-00709 of 16 October 2026. It gives no CVE identifie…
CERT-FR advisory CERTFR-2026-AVI-1331, published 16 October 2026, reports multiple vulnerabilities in Microsoft Office products. They allow an attacker to achieve remote arbitrary code execution, compromise data confidentiality and bypass the security policy. The advisory is based on Microsoft security bulletins dated 15 October 2026 cove…
CERT-FR advisory CERTFR-2026-AVI-1330, published 16 October 2026, reports multiple vulnerabilities in Traefik. Per the advisory, they allow an attacker to compromise data confidentiality and bypass the security policy. All Traefik versions prior to v3.7.15 are affected. The advisory is based on two vendor security bulletins, GHSA-28hp-c82…
CERT-FR advisory CERTFR-2026-AVI-1327, published 16 October 2026, reports multiple vulnerabilities in the Moxa AIG-302 Series industrial computing products. Per the advisory, some of them allow an attacker to compromise data confidentiality, compromise data integrity and bypass the security policy. The affected versions are all AIG-302 Se…
CERT-FR advisory CERTFR-2026-AVI-1329, published 16 October 2026, reports multiple vulnerabilities in Google Chrome. The advisory says they allow an attacker to cause a security problem that the vendor has not specified. It covers 15 CVEs and refers to the Google security bulletins of 15 October 2026 for the fixes. It gives no exploitatio…
CERT-FR advisory CERTFR-2026-AVI-1333, published 16 October 2026, reports multiple vulnerabilities in the Ubuntu Linux kernel. Per the advisory, some of them allow an attacker to achieve remote arbitrary code execution, privilege escalation and compromise of data confidentiality. The advisory also lists data integrity compromise and secur…
Palo Alto Networks published advisory PAN-SA-2026-0013, its monthly Chromium vulnerability update for October 2026. It states that Prisma Browser is affected by vulnerabilities fixed in recent upstream Chromium Stable Channel releases. The vendor rates severity HIGH with suggested urgency MODERATE. Palo Alto Networks is not aware of any m…
CERT-FR advisory CERTFR-2026-AVI-1336, published 16 October 2026, reports multiple vulnerabilities across IBM products. Per the advisory, exploitation could allow remote arbitrary code execution, privilege escalation, remote denial of service, security policy bypass, SSRF, XSS, CSRF, and data confidentiality and integrity compromise. Affe…
CERT-FR advisory CERTFR-2026-AVI-1328, published 16 October 2026, reports multiple vulnerabilities in the Mattermost Desktop App. The vendor did not specify the security impact, and the advisory only states that an attacker could cause an unspecified security problem. It is based on Mattermost security bulletins MMSA-2026-00778 and MMSA-2…
CERT-FR advisory CERTFR-2026-AVI-1308, published on 14 October 2026, reports multiple vulnerabilities in Google Chrome. Google released the corresponding security bulletins on 13 October 2026 for the Stable and Extended Stable desktop channels. The advisory says only that an attacker could cause a security issue "not specified by the vend…
Cisco published its October 2026 security hardening release for the Application Policy Infrastructure Controller (APIC). It follows an internal security review that found multiple vulnerabilities. Cisco rates the Security Impact Rating as Critical and assigns CVE-2026-76498, CVE-2026-76499 and CVE-2026-76500. The flaws were found during i…
Cisco published its Meraki Security Hardening Release for October 2026, addressing multiple vulnerabilities found during an internal security review of Meraki software. Cisco rates the Security Impact Rating as Critical. The flaws were found in internal testing and are not known to be actively exploited. Cisco grouped the issues by Common…
On October 21, the PHP Foundation released a Critical PHP Security release fixing two critical remote code execution vulnerabilities, collectively referred to as PHP2shell. Cisco published an advisory on how these flaws affect its products and rated the security impact Critical. The excerpt does not list which Cisco products are affected,…
CERT-FR advisory CERTFR-2026-AVI-1342 reports a large batch of vulnerabilities in Microsoft Edge that could let an attacker achieve remote arbitrary code execution and cause an additional security issue the vendor has not specified. The advisory lists more than 130 Microsoft security bulletins dated 16 October 2026, from CVE-2026-102322 t…
Cisco disclosed a high-impact local privilege escalation vulnerability, CVE-2026-76462, in the Secure Firewall Posture module of Cisco Secure Client. The flaw is in the interprocess communication (IPC) channel and stems from insufficient validation of user-supplied input. An authenticated local attacker can send crafted IPC messages to a …
CERT-FR advisory CERTFR-2026-AVI-1319, published 15 October 2026, reports a vulnerability in PostgreSQL psqlODBC that lets a remote attacker cause a denial of service. The flaw is tracked as CVE-2026-109448 and affects psqlODBC versions prior to 18.00.0005. The advisory is based on the PostgreSQL project's security release of 14 October 2…
CERT-FR advisory CERTFR-2026-AVI-1323, published 15 October 2026, reports a vulnerability in Microsoft SharePoint Server Subscription Edition that allows an attacker to elevate privileges. The flaw is tracked as CVE-2026-88164 and is based on a Microsoft security bulletin dated 13 October 2026. The advisory does not state whether the flaw…
CERT-FR advisory CERTFR-2026-AVI-1324, published 15 October 2026, reports multiple vulnerabilities in Symfony components that allow a remote attacker to cause a denial of service. The affected components are symfony/expression-language, symfony/http-foundation, symfony/symfony and symfony/yaml, across the 5.4, 6.x, 7.x and 8.x branches. T…
