/
attack_type:vulnerability_exploitation × latest_source_host:cert.ssi.gouv.fr × limpar

Resultados

3 casos · pág. 1/1

cert.ssi.gouv.fr · high

CERT-FR weekly bulletin W42 2026: refrigeration controller incident, XWEB supervisors and Ivanti Connect Secure CVE-2026-104935

CERT-FR bulletin CERTFR-2026-ACT-044 covers significant vulnerabilities for week 42 of 2026 and recalls three recent CERT-FR alerts. These are a security incident targeting remote controllers of refrigeration installations, recommendations for the secure use of XWEB supervisors, and a vulnerability in Ivanti Connect Secure (ICS) tracked a…

CVE-2026-104935 industrial food and logistics
cert.ssi.gouv.fr · critical

CERT-FR: Multiple Microsoft Office vulnerabilities patched, CVE-2026-96951 actively exploited

CERT-FR advisory CERTFR-2026-AVI-1312 covers a large set of vulnerabilities in Microsoft Office, fixed in Microsoft's 13 October 2026 security updates. Exploitation can lead to remote arbitrary code execution, privilege escalation, security policy bypass and loss of data confidentiality. Microsoft states that CVE-2026-96951 is being activ…

CVE-2026-100209 CVE-2026-100210 CVE-2026-100211
cert.ssi.gouv.fr · · 5 fontes · 5 atualizações critical

Ivanti patches exploited Connect Secure zero-day CVE-2026-104935 (UTA0576); CISA adds it to KEV; six Xtraction and Intune flaws fixed

Ivanti released its October 2026 security update on 13 October 2026. It fixes the actively exploited Connect Secure zero-day CVE-2026-104935, a spoofing-based authentication bypass that lets remote, unauthenticated attackers execute arbitrary commands (cert.ssi.gouv.fr, darkwebinformer.com). The flaw was discovered by Volexity, which trac…

CVE-2026-104935 CVE-2026-109412 CVE-2026-106042 UTA0576 government