15 casos · pág. 1/1
CERT-FR advisory CERTFR-2026-AVI-1347 reports a vulnerability in the MongoDB PHP Driver that lets an attacker cause a remote denial of service. The flaw is tracked in the MongoDB security bulletin PHPC-276, dated 19 October 2026. The advisory does not mention active exploitation, CVE identifiers, IOCs or attribution. Technical Details - A…
CERT-FR advisory CERTFR-2026-AVI-1343 reports multiple vulnerabilities in the Laravel PHP framework. According to the advisory, a remote attacker could exploit them to cause a denial of service, compromise data integrity or bypass the security policy. The fixes are described in two Laravel GitHub security advisories published on 19 Octobe…
CERT-FR advisory CERTFR-2026-AVI-1344 reports multiple vulnerabilities in Mattermost Server. The vendor did not specify the security impact. The advisory covers fixes announced in Mattermost security bulletins dated 19 October 2026. It does not mention active exploitation, CVE identifiers, IOCs or attribution. Technical Details - Affected…
The French national CERT (CERT-FR, part of ANSSI) published a lessons-learned report on application data breaches. It states that in 2025 it tracked nearly 200 data breaches originating from web applications. In many cases the exfiltration relied on low-complexity attacker actions and did not exploit any technical vulnerability. The repor…
CERT-FR advisory CERTFR-2026-AVI-1339 reports multiple vulnerabilities in Stormshield Network Security (SNS). Depending on the flaw, an attacker could compromise data integrity, bypass the security policy or inject indirect remote code through cross-site scripting (XSS). The advisory refers to four Stormshield security bulletins dated 16 …
CERT-FR advisory CERTFR-2026-AVI-1337 reports multiple vulnerabilities in Juniper Networks Session Smart Router (SSR) that let an attacker cause a security issue the vendor has not specified. The advisory is based on Juniper security bulletin JSA112528 of 16 October 2026. It gives no CVE identifiers, exploitation status, technical root ca…
CERT-FR advisory CERTFR-2026-AVI-1338 reports a vulnerability in Mattermost Server that lets an attacker cause a security issue the vendor has not specified. It affects Mattermost Server 11.7.x versions earlier than 11.7.12. The advisory is based on Mattermost security bulletin MMSA-2026-00709 of 16 October 2026. It gives no CVE identifie…
CERT-FR advisory CERTFR-2026-AVI-1327, published 16 October 2026, reports multiple vulnerabilities in the Moxa AIG-302 Series industrial computing products. Per the advisory, some of them allow an attacker to compromise data confidentiality, compromise data integrity and bypass the security policy. The affected versions are all AIG-302 Se…
CERT-FR advisory CERTFR-2026-AVI-1329, published 16 October 2026, reports multiple vulnerabilities in Google Chrome. The advisory says they allow an attacker to cause a security problem that the vendor has not specified. It covers 15 CVEs and refers to the Google security bulletins of 15 October 2026 for the fixes. It gives no exploitatio…
CERT-FR advisory CERTFR-2026-AVI-1328, published 16 October 2026, reports multiple vulnerabilities in the Mattermost Desktop App. The vendor did not specify the security impact, and the advisory only states that an attacker could cause an unspecified security problem. It is based on Mattermost security bulletins MMSA-2026-00778 and MMSA-2…
CERT-FR advisory CERTFR-2026-AVI-1319, published 15 October 2026, reports a vulnerability in PostgreSQL psqlODBC that lets a remote attacker cause a denial of service. The flaw is tracked as CVE-2026-109448 and affects psqlODBC versions prior to 18.00.0005. The advisory is based on the PostgreSQL project's security release of 14 October 2…
CERT-FR advisory CERTFR-2026-AVI-1318, published 15 October 2026, reports multiple vulnerabilities in Moodle that allow a remote attacker to perform cross-site scripting (XSS) and bypass the security policy. The advisory references CVE-2026-47759, CVE-2026-47761 and CVE-2026-47762, based on two Moodle security bulletins dated 15 October 2…
CERT-FR advisory CERTFR-2026-AVI-1324, published 15 October 2026, reports multiple vulnerabilities in Symfony components that allow a remote attacker to cause a denial of service. The affected components are symfony/expression-language, symfony/http-foundation, symfony/symfony and symfony/yaml, across the 5.4, 6.x, 7.x and 8.x branches. T…
CERT-FR advisory CERTFR-2026-AVI-1309 reports a vulnerability in Zabbix that allows an attacker to compromise data confidentiality. The advisory covers several supported branches and refers to the vendor bulletin ZBX-28169, published on 14 October 2026. No CVE identifier, exploitation status, technical detail or attribution is provided in…
CERT-FR advisory CERTFR-2026-AVI-1308, published on 14 October 2026, reports multiple vulnerabilities in Google Chrome. Google released the corresponding security bulletins on 13 October 2026 for the Stable and Extended Stable desktop channels. The advisory says only that an attacker could cause a security issue "not specified by the vend…
