Veille

Publications du 13/10/2026

CISA KEV — EXPLOITATION CONNUE Date d’ajout KEV : 13/10/2026

CVE-2026-96951 — Microsoft Windows Command Injection Vulnerability

Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.

AVIS CERT-FR 13/10/2026

Vulnérabilité dans NetApp StorageGRID (13 octobre 2026)

Une vulnérabilité a été découverte dans NetApp StorageGRID. Elle permet à un attaquant de provoquer un déni de service à distance.

Publications du 30/09/2026

CISA KEV — EXPLOITATION CONNUE Date d’ajout KEV : 30/09/2026

CVE-2026-76504 — Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request.

Publications du 29/09/2026

CISA KEV — EXPLOITATION CONNUE Date d’ajout KEV : 29/09/2026

CVE-2026-86950 — Apple Multiple Products Out-of-Bounds Write Vulnerability

Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution.

Publications du 25/09/2026

CISA KEV — EXPLOITATION CONNUE Date d’ajout KEV : 25/09/2026

CVE-2026-65660 — Microsoft SharePoint Code Injection Vulnerability

Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network.