24 casos · pág. 1/2
CERT-FR advisory CERTFR-2026-AVI-1336, published 16 October 2026, reports multiple vulnerabilities across IBM products. Per the advisory, exploitation could allow remote arbitrary code execution, privilege escalation, remote denial of service, security policy bypass, SSRF, XSS, CSRF, and data confidentiality and integrity compromise. Affe…
CERT-FR advisory CERTFR-2026-AVI-1335, published 16 October 2026, reports multiple vulnerabilities in the Linux kernel shipped with SUSE products. Some of them allow an attacker to escalate privileges, cause a remote denial of service and breach data confidentiality. Other listed impacts are data integrity breach and security policy bypas…
CERT-FR advisory CERTFR-2026-AVI-1328, published 16 October 2026, reports multiple vulnerabilities in the Mattermost Desktop App. The vendor did not specify the security impact, and the advisory only states that an attacker could cause an unspecified security problem. It is based on Mattermost security bulletins MMSA-2026-00778 and MMSA-2…
CERT-FR advisory CERTFR-2026-AVI-1334, published 16 October 2026, reports multiple vulnerabilities in the Linux kernel shipped with Red Hat Enterprise Linux. Some of them allow a remote attacker to execute arbitrary code, escalate privileges and cause a remote denial of service. Other listed impacts are data integrity and confidentiality …
CERT-FR advisory CERTFR-2026-AVI-1332, published 16 October 2026, reports multiple vulnerabilities in Microsoft products that may allow remote arbitrary code execution, privilege escalation, remote denial of service and breach of data confidentiality. The advisory is based on Microsoft security bulletins dated 15 October 2026 for four CVE…
CERT-FR advisory CERTFR-2026-AVI-1325, published 15 October 2026, reports a vulnerability in Cisco AsyncOS Software for Cisco Secure Email Gateway that allows a remote attacker to execute arbitrary code and compromise data integrity. Cisco states that CVE-2026-76519 is actively exploited. The advisory is based on Cisco security advisory c…
CERT-FR advisory CERTFR-2026-AVI-1319, published 15 October 2026, reports a vulnerability in PostgreSQL psqlODBC that lets a remote attacker cause a denial of service. The flaw is tracked as CVE-2026-109448 and affects psqlODBC versions prior to 18.00.0005. The advisory is based on the PostgreSQL project's security release of 14 October 2…
CERT-FR advisory CERTFR-2026-AVI-1322, published 15 October 2026, reports multiple vulnerabilities in Juniper Networks products, based on the vendor's October 2026 security bulletins of 14 October (JSA112168 to JSA112250). The flaws affect Junos OS, Junos OS Evolved (including MX and SRX Series) and Juniper Cloud-Native Router. According …
CERT-FR advisory CERTFR-2026-AVI-1320, published 15 October 2026, reports multiple vulnerabilities in SonicWall Network Security Manager (NSM) On-Prem that allow a remote attacker to execute arbitrary code and bypass the security policy. The advisory references CVE-2026-100232 and CVE-2026-96540, based on SonicWall bulletin SNWLID-2026-00…
CERT-FR advisory CERTFR-2026-AVI-1323, published 15 October 2026, reports a vulnerability in Microsoft SharePoint Server Subscription Edition that allows an attacker to elevate privileges. The flaw is tracked as CVE-2026-88164 and is based on a Microsoft security bulletin dated 13 October 2026. The advisory does not state whether the flaw…
CERT-FR advisory CERTFR-2026-AVI-1321, published 15 October 2026, reports multiple vulnerabilities in Drupal core that allow a remote attacker to execute arbitrary code and perform indirect code injection (XSS). The advisory references CVE-2026-108097, CVE-2026-108514 and CVE-2026-108515, based on three Drupal security bulletins dated 14 …
CERT-FR advisory CERTFR-2026-AVI-1318, published 15 October 2026, reports multiple vulnerabilities in Moodle that allow a remote attacker to perform cross-site scripting (XSS) and bypass the security policy. The advisory references CVE-2026-47759, CVE-2026-47761 and CVE-2026-47762, based on two Moodle security bulletins dated 15 October 2…
CERT-FR advisory CERTFR-2026-AVI-1317 is not the source here; this record covers CERTFR-2026-AVI-1326, which reports multiple vulnerabilities in Palo Alto Networks products fixed in vendor bulletins of October 14, 2026. Some flaws allow remote arbitrary code execution, privilege escalation and remote denial of service. Other impact classe…
CERT-FR advisory CERTFR-2026-AVI-1324, published 15 October 2026, reports multiple vulnerabilities in Symfony components that allow a remote attacker to cause a denial of service. The affected components are symfony/expression-language, symfony/http-foundation, symfony/symfony and symfony/yaml, across the 5.4, 6.x, 7.x and 8.x branches. T…
CERT-FR advisory CERTFR-2026-AVI-1317 reports multiple vulnerabilities in F5 products, mainly the NGINX family, covered by F5 security bulletins published on October 14, 2026. Some of the flaws allow an attacker to achieve remote arbitrary code execution, compromise data confidentiality and integrity, and cause remote denial of service. F…
CERT-FR advisory CERTFR-2026-AVI-1310 reports multiple vulnerabilities in Citrix products, based on Citrix security bulletins dated 13 October 2026. According to the advisory, some flaws allow an attacker to achieve arbitrary code execution, privilege escalation and remote denial of service. Other listed impacts are data integrity and con…
CERT-FR advisory CERTFR-2026-AVI-1313 reports multiple vulnerabilities in Microsoft .NET, ASP.NET Core and .NET Framework, covered by Microsoft's October 13, 2026 security bulletins for 43 CVEs. Some of them allow an attacker to achieve remote arbitrary code execution, privilege escalation and remote denial of service. The advisory also l…
CERT-FR advisory CERTFR-2026-AVI-1316 reports multiple vulnerabilities across Microsoft products, based on Microsoft security bulletins dated 13 October 2026. According to the advisory, some flaws allow an attacker to achieve remote arbitrary code execution, privilege escalation and remote denial of service. Other listed impacts are data …
CERT-FR advisory CERTFR-2026-AVI-1314 reports multiple vulnerabilities in Microsoft Windows and related components, covered by Microsoft's October 13, 2026 security bulletins (ADV260001 and dozens of CVEs). Some of them allow remote arbitrary code execution, privilege escalation, remote denial of service, security policy bypass and compro…
CERT-FR advisory CERTFR-2026-AVI-1309 reports a vulnerability in Zabbix that allows an attacker to compromise data confidentiality. The advisory covers several supported branches and refers to the vendor bulletin ZBX-28169, published on 14 October 2026. No CVE identifier, exploitation status, technical detail or attribution is provided in…
