Base de données CVE

CVE-2026-88773 Critique · 9.3 PoC citrix · netscaler_application_delivery_controller · 27/09/2026

Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 1...

CVE-2026-88772 Critique · 9.5 KEV PoC Citrix · NetScaler · 27/09/2026

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

CVE-2026-88771 Critique · 9.5 KEV PoC Citrix · NetScaler · 27/09/2026

Citrix NetScaler Improper Input Validation Vulnerability

CVE-2026-100833 Élevée · 8.6 PoC · 27/09/2026

Contrast (edgelesssys/contrast) versions 1.14.0 before 1.23.1 generate runtime policies that fail to detect all container image substitutions. A bad rebase during a Kata Containers update accidentally introduced an `allo...

CVE-2026-97163 Critique · 10.0 PoC lomart · up · 26/09/2026

Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

CVE-2026-97161 Critique · 9.2 PoC lomart · up · 26/09/2026

Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

CVE-2026-97160 Critique · 9.4 PoC lomart · up · 26/09/2026

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

CVE-2026-94132 Critique · 9.5 PoC acymailing · acymailing · 26/09/2026

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIME parts of incoming emails were saved to media/com_acym/upload/ with no e...

CVE-2026-94130 Critique · 9.3 PoC joomlaboat · youtube_gallery · 26/09/2026

Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands i...

CVE-2026-93834 Élevée · 8.8 PoC · 25/09/2026

A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allows a malicious guest user to craf...

CVE-2026-96656 Élevée · 8.6 KEV PoC Plex · Media Server · 23/09/2026

Plex Media Server External Control of File Name or Path Vulnerability

CVE-2026-96652 Moyenne · 5.3 KEV PoC Plex · Media Server · 23/09/2026

Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

CVE-2026-87902 Élevée · 8.1 KEV PoC WordPress · Core · 22/09/2026

WordPress Core Remote File Inclusion Vulnerability

CVE-2026-94127 Critique · 9.3 KEV PoC F5 · BIG-IP APM · 22/09/2026

F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability

CVE-2026-93616 Critique · 9.8 KEV PoC Check Point · Multiple Products · 22/09/2026

Check Point Multiple Products Path Traversal Vulnerability

CVE-2026-76460 Critique · 10.0 KEV PoC Cisco · Identity Services Engine · 16/09/2026

Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

CVE-2026-76461 Critique · 9.8 KEV PoC Cisco · Secure Email Gateway · 14/09/2026

Cisco Secure Email Gateway SQL Injection Vulnerability

CVE-2026-85706 Critique · 10.0 KEV PoC GitLab · Community Edition and Enterprise Edition · 12/09/2026

GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

CVE-2026-86060 Non évaluée KEV PoC MikroTik · RouterOS · 10/09/2026

MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

CVE-2026-85102 Critique · 9.8 KEV PoC Check Point · Multiple Products · 09/09/2026

Check Point Multiple Products Improper Certificate Validation Vulnerability

CVE-2026-87491 Non évaluée KEV PoC Google · Chromium V8 · 09/09/2026

Google Chromium V8 Out of Bounds Write Vulnerability

CVE-2026-20079 Non évaluée KEV PoC Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management · 09/09/2026

Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

CVE-2026-19490 Non évaluée KEV PoC Citrix · NetScaler · 09/09/2026

Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability

CVE-2026-86218 Non évaluée KEV PoC N-able · N-central · 08/09/2026

N-able N-central Static Code Injection Vulnerability

CVE-2026-81963 Non évaluée KEV PoC Microsoft · Windows · 08/09/2026

Microsoft Windows Link Following Vulnerability

Sources : NVD (NIST), CISA KEV, FIRST EPSS. Dernière mise à jour : 22/10/2026 16:55. Les analyses en français sont générées par IA et peuvent contenir des erreurs : vérifiez toujours l'avis de l'éditeur.