3 casos · pág. 1/1
CERT-FR advisory CERTFR-2026-AVI-1321, published 15 October 2026, reports multiple vulnerabilities in Drupal core that allow a remote attacker to execute arbitrary code and perform indirect code injection (XSS). The advisory references CVE-2026-108097, CVE-2026-108514 and CVE-2026-108515, based on three Drupal security bulletins dated 14 …
CERT-FR has published advisory CERTFR-2026-AVI-1345 on multiple vulnerabilities in Stormshield products. According to the advisory, some flaws allow an attacker to achieve arbitrary code execution, remote denial of service and breaches of data confidentiality. Others allow security policy bypass and indirect remote code injection (XSS). T…
CERT-FR advisory CERTFR-2026-AVI-1340 reports multiple vulnerabilities in Roundcube Webmail. According to the advisory, an attacker could exploit them to achieve remote arbitrary code execution, server-side request forgery (SSRF) and cross-site scripting (XSS). The advisory's impact list also includes CSRF and security policy bypass. Fixe…
