31 casos · pág. 1/2
The CERT-FR published advisory CERTFR-2026-AVI-1363 on multiple vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE). Exploitation can lead to remote arbitrary code execution, breach of data confidentiality and security policy bypass. The advisory relays the vendor's security bulletin of 21 October 2026 and lists 1…
CERT-FR published advisory CERTFR-2026-AVI-1365 on multiple vulnerabilities in ISC BIND, based on ISC security bulletins released on 21 October 2026. The flaws could allow a remote attacker to achieve arbitrary code execution or cause a denial of service. Three CVEs are referenced: CVE-2026-94300, CVE-2026-96888 and CVE-2026-97313. The ad…
CERT-FR published advisory CERTFR-2026-AVI-1367 on multiple vulnerabilities in Node.js. According to the advisory, some of them allow an attacker to achieve remote arbitrary code execution, bypass the security policy, or trigger an additional security issue that the vendor has not specified. The advisory is based on the Node.js october-20…
CERT-FR published advisory CERTFR-2026-AVI-1353 on 21 October 2026. It covers multiple vulnerabilities in Oracle Systems products, fixed in the Oracle Critical Patch Update cpuoct2026 of 20 October 2026. Affected products are Oracle Solaris 11.3 and 11.4 and Oracle ZFS Storage Appliance Kit 8.8. According to CERT-FR, exploitation could al…
CERT-FR has published advisory CERTFR-2026-AVI-1352 on multiple vulnerabilities in Oracle PeopleSoft. The advisory says some flaws allow an attacker to achieve remote arbitrary code execution, remote denial of service and breaches of data confidentiality. It also lists data integrity violations and security policy bypass as impacts. The a…
CERT-FR advisory CERTFR-2026-AVI-1350 (21 October 2026) relays the Oracle Critical Patch Update of 20 October 2026 (cpuoct2026) for Oracle Java SE, Oracle GraalVM and Oracle JavaFX. The bulletin covers well over 100 CVE identifiers. According to CERT-FR, some of the flaws allow remote arbitrary code execution, remote denial of service, lo…
The French CERT-FR published advisory CERTFR-2026-AVI-1357 on 21 October 2026 on multiple vulnerabilities in Google Chrome. The advisory relies on the Google stable channel bulletin of 20 October 2026 and lists CVE-2026-112992 through CVE-2026-113201 (the list is truncated in the source text). The vendor does not specify the impact, and C…
CERT-FR has published advisory CERTFR-2026-AVI-1345 on multiple vulnerabilities in Stormshield products. According to the advisory, some flaws allow an attacker to achieve arbitrary code execution, remote denial of service and breaches of data confidentiality. Others allow security policy bypass and indirect remote code injection (XSS). T…
CERT-FR has published an advisory on multiple vulnerabilities in Oracle MySQL, tied to the Oracle Critical Patch Update cpuoct2026 of 20 October 2026. According to the advisory, the flaws allow an attacker to achieve remote arbitrary code execution, remote denial of service, breaches of data confidentiality and integrity, and security pol…
CERT-FR advisory CERTFR-2026-AVI-1349 reports multiple vulnerabilities in Oracle Database Server and related components, fixed in the Oracle Critical Patch Update cpuoct2026 of 20 October 2026. According to the advisory, some of the flaws allow an attacker to achieve remote arbitrary code execution, remote denial of service and breach of …
CERT-FR advisory CERTFR-2026-AVI-1346 reports multiple vulnerabilities in Mozilla products (Firefox, Firefox ESR and Thunderbird), fixed in Mozilla security bulletins mfsa2026-111 to mfsa2026-115 of 20 October 2026. According to the advisory, some of the flaws allow an attacker to achieve arbitrary code execution, breach of data confident…
CERT-FR advisory CERTFR-2026-AVI-1354 reports multiple vulnerabilities in Oracle Virtualization products, fixed in the Oracle Critical Patch Update bulletin cpuoct2026 of 20 October 2026. According to the advisory, an attacker could exploit some of them to achieve remote arbitrary code execution, remote denial of service and breach of dat…
CERT-FR advisory CERTFR-2026-AVI-1340 reports multiple vulnerabilities in Roundcube Webmail. According to the advisory, an attacker could exploit them to achieve remote arbitrary code execution, server-side request forgery (SSRF) and cross-site scripting (XSS). The advisory's impact list also includes CSRF and security policy bypass. Fixe…
CERT-FR advisory CERTFR-2026-AVI-1342 reports a large batch of vulnerabilities in Microsoft Edge that could let an attacker achieve remote arbitrary code execution and cause an additional security issue the vendor has not specified. The advisory lists more than 130 Microsoft security bulletins dated 16 October 2026, from CVE-2026-102322 t…
F5 released NGINX 1.30.6 (stable) and 1.31.7 (mainline) on October 14, 2026 to fix five vulnerabilities. Three are memory-corruption bugs that F5 scores 9.2 (Critical) on CVSS v4.0, and they can crash a worker process or, in some conditions, allow code execution. The others are a TLS session-ticket flaw that can bypass client-certificate …
CERT-FR bulletin CERTFR-2026-ACT-044 covers significant vulnerabilities for week 42 of 2026 and recalls three recent CERT-FR alerts. These are a security incident targeting remote controllers of refrigeration installations, recommendations for the secure use of XWEB supervisors, and a vulnerability in Ivanti Connect Secure (ICS) tracked a…
CERT-FR advisory CERTFR-2026-AVI-1331, published 16 October 2026, reports multiple vulnerabilities in Microsoft Office products. They allow an attacker to achieve remote arbitrary code execution, compromise data confidentiality and bypass the security policy. The advisory is based on Microsoft security bulletins dated 15 October 2026 cove…
CERT-FR advisory CERTFR-2026-AVI-1330, published 16 October 2026, reports multiple vulnerabilities in Traefik. Per the advisory, they allow an attacker to compromise data confidentiality and bypass the security policy. All Traefik versions prior to v3.7.15 are affected. The advisory is based on two vendor security bulletins, GHSA-28hp-c82…
CERT-FR advisory CERTFR-2026-AVI-1333, published 16 October 2026, reports multiple vulnerabilities in the Ubuntu Linux kernel. Per the advisory, some of them allow an attacker to achieve remote arbitrary code execution, privilege escalation and compromise of data confidentiality. The advisory also lists data integrity compromise and secur…
CERT-FR advisory CERTFR-2026-AVI-1336, published 16 October 2026, reports multiple vulnerabilities across IBM products. Per the advisory, exploitation could allow remote arbitrary code execution, privilege escalation, remote denial of service, security policy bypass, SSRF, XSS, CSRF, and data confidentiality and integrity compromise. Affe…
