52 casos · pág. 1/3
The CERT-FR published advisory CERTFR-2026-AVI-1363 on multiple vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE). Exploitation can lead to remote arbitrary code execution, breach of data confidentiality and security policy bypass. The advisory relays the vendor's security bulletin of 21 October 2026 and lists 1…
CERT-FR published advisory CERTFR-2026-AVI-1365 on multiple vulnerabilities in ISC BIND, based on ISC security bulletins released on 21 October 2026. The flaws could allow a remote attacker to achieve arbitrary code execution or cause a denial of service. Three CVEs are referenced: CVE-2026-94300, CVE-2026-96888 and CVE-2026-97313. The ad…
CERT-FR published advisory CERTFR-2026-AVI-1353 on 21 October 2026. It covers multiple vulnerabilities in Oracle Systems products, fixed in the Oracle Critical Patch Update cpuoct2026 of 20 October 2026. Affected products are Oracle Solaris 11.3 and 11.4 and Oracle ZFS Storage Appliance Kit 8.8. According to CERT-FR, exploitation could al…
CERT-FR has published advisory CERTFR-2026-AVI-1355 on multiple vulnerabilities in Oracle WebLogic Server and the WebLogic Server Proxy Plug-in. The flaws allow a remote attacker to cause a denial of service and to breach the confidentiality and integrity of data. The advisory relies on the Oracle Critical Patch Update bulletin cpuoct2026…
CERT-FR published advisory CERTFR-2026-AVI-1348 on 21 October 2026 about multiple vulnerabilities in Mattermost Server. The vendor has not specified the nature or impact of the flaws, and the advisory says only that an attacker could cause an unspecified security problem. The advisory cites Mattermost security bulletins MMSA-2026-00772 an…
CERT-FR has published advisory CERTFR-2026-AVI-1352 on multiple vulnerabilities in Oracle PeopleSoft. The advisory says some flaws allow an attacker to achieve remote arbitrary code execution, remote denial of service and breaches of data confidentiality. It also lists data integrity violations and security policy bypass as impacts. The a…
CERT-FR advisory CERTFR-2026-AVI-1350 (21 October 2026) relays the Oracle Critical Patch Update of 20 October 2026 (cpuoct2026) for Oracle Java SE, Oracle GraalVM and Oracle JavaFX. The bulletin covers well over 100 CVE identifiers. According to CERT-FR, some of the flaws allow remote arbitrary code execution, remote denial of service, lo…
The French CERT-FR published advisory CERTFR-2026-AVI-1357 on 21 October 2026 on multiple vulnerabilities in Google Chrome. The advisory relies on the Google stable channel bulletin of 20 October 2026 and lists CVE-2026-112992 through CVE-2026-113201 (the list is truncated in the source text). The vendor does not specify the impact, and C…
CERT-FR has published advisory CERTFR-2026-AVI-1345 on multiple vulnerabilities in Stormshield products. According to the advisory, some flaws allow an attacker to achieve arbitrary code execution, remote denial of service and breaches of data confidentiality. Others allow security policy bypass and indirect remote code injection (XSS). T…
CERT-FR advisory CERTFR-2026-AVI-1347 reports a vulnerability in the MongoDB PHP Driver that lets an attacker cause a remote denial of service. The flaw is tracked in the MongoDB security bulletin PHPC-276, dated 19 October 2026. The advisory does not mention active exploitation, CVE identifiers, IOCs or attribution. Technical Details - A…
CERT-FR has published an advisory on multiple vulnerabilities in Oracle MySQL, tied to the Oracle Critical Patch Update cpuoct2026 of 20 October 2026. According to the advisory, the flaws allow an attacker to achieve remote arbitrary code execution, remote denial of service, breaches of data confidentiality and integrity, and security pol…
CERT-FR advisory CERTFR-2026-AVI-1349 reports multiple vulnerabilities in Oracle Database Server and related components, fixed in the Oracle Critical Patch Update cpuoct2026 of 20 October 2026. According to the advisory, some of the flaws allow an attacker to achieve remote arbitrary code execution, remote denial of service and breach of …
CERT-FR advisory CERTFR-2026-AVI-1346 reports multiple vulnerabilities in Mozilla products (Firefox, Firefox ESR and Thunderbird), fixed in Mozilla security bulletins mfsa2026-111 to mfsa2026-115 of 20 October 2026. According to the advisory, some of the flaws allow an attacker to achieve arbitrary code execution, breach of data confident…
CERT-FR advisory CERTFR-2026-AVI-1343 reports multiple vulnerabilities in the Laravel PHP framework. According to the advisory, a remote attacker could exploit them to cause a denial of service, compromise data integrity or bypass the security policy. The fixes are described in two Laravel GitHub security advisories published on 19 Octobe…
CERT-FR advisory CERTFR-2026-AVI-1354 reports multiple vulnerabilities in Oracle Virtualization products, fixed in the Oracle Critical Patch Update bulletin cpuoct2026 of 20 October 2026. According to the advisory, an attacker could exploit some of them to achieve remote arbitrary code execution, remote denial of service and breach of dat…
CERT-FR advisory CERTFR-2026-AVI-1344 reports multiple vulnerabilities in Mattermost Server. The vendor did not specify the security impact. The advisory covers fixes announced in Mattermost security bulletins dated 19 October 2026. It does not mention active exploitation, CVE identifiers, IOCs or attribution. Technical Details - Affected…
The French national CERT (CERT-FR, part of ANSSI) published a lessons-learned report on application data breaches. It states that in 2025 it tracked nearly 200 data breaches originating from web applications. In many cases the exfiltration relied on low-complexity attacker actions and did not exploit any technical vulnerability. The repor…
CERT-FR advisory CERTFR-2026-AVI-1339 reports multiple vulnerabilities in Stormshield Network Security (SNS). Depending on the flaw, an attacker could compromise data integrity, bypass the security policy or inject indirect remote code through cross-site scripting (XSS). The advisory refers to four Stormshield security bulletins dated 16 …
CERT-FR advisory CERTFR-2026-AVI-1340 reports multiple vulnerabilities in Roundcube Webmail. According to the advisory, an attacker could exploit them to achieve remote arbitrary code execution, server-side request forgery (SSRF) and cross-site scripting (XSS). The advisory's impact list also includes CSRF and security policy bypass. Fixe…
CERT-FR advisory CERTFR-2026-AVI-1342 reports a large batch of vulnerabilities in Microsoft Edge that could let an attacker achieve remote arbitrary code execution and cause an additional security issue the vendor has not specified. The advisory lists more than 130 Microsoft security bulletins dated 16 October 2026, from CVE-2026-102322 t…
