Base de données CVE

CVE-2026-88776 Élevée · 8.8 PoC citrix · netscaler_application_delivery_controller · 27/09/2026

Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcP...

CVE-2026-88775 Élevée · 8.8 citrix · netscaler_application_delivery_controller · 27/09/2026

Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: b...

CVE-2026-88774 Élevée · 7.0 citrix · netscaler_application_delivery_controller · 27/09/2026

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37...

CVE-2026-93302 Élevée · 8.3 wolfssl · wolfssl · 27/09/2026

MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSL_TRUST_PEER_CERT and load CA certificates with wolfSSL_CTX_trust_peer_c...

CVE-2026-100846 Élevée · 8.8 project-monai · monai · 27/09/2026

MONAI before 1.5.2 contains a deserialization of untrusted data vulnerability in the algo_from_pickle function in monai/auto3dseg/utils.py. The function reads a .pkl file and passes its contents to pickle.loads without v...

CVE-2026-100844 Élevée · 8.6 project-monai · monai · 27/09/2026

MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component (monai.apps.nnunet.nnunetv2_runner). User-controlled values taken from the YAML configuration file (notably dataset_name_or_id) and...

CVE-2026-100842 Élevée · 7.3 project-monai · monai · 27/09/2026

MONAI through 1.6.0 contains an eval injection vulnerability in _get_fake_spatial_shape() in monai/bundle/scripts.py. The function validates shape expressions with a helper that walks the AST and only collects ast.Name n...

CVE-2026-100833 Élevée · 8.6 PoC · 27/09/2026

Contrast (edgelesssys/contrast) versions 1.14.0 before 1.23.1 generate runtime policies that fail to detect all container image substitutions. A bad rebase during a Kata Containers update accidentally introduced an `allo...

CVE-2026-97162 Élevée · 8.3 lomart · up · 26/09/2026

Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

CVE-2026-94131 Élevée · 8.3 acymailing · acymailing · 26/09/2026

Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0 - A subscriber could store a path in a file-type custom field and have AcyMailing delete that file w...

CVE-2026-100652 Élevée · 8.2 vllm · vllm · 26/09/2026

vLLM versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against vocabulary bounds in Rust HTTP and gRPC frontends, allowing out-of-vocabulary token IDs to reach MinTokensLogitsProcessor. Attackers can submit...

CVE-2026-98163 Élevée · 7.0 linux · linux_kernel · 26/09/2026

In the Linux kernel, the following vulnerability has been resolved: cgroup: Avoid iteration of dying tasks with zero refcount The commit 260fbcb92bbea ("cgroup: Move dying_tasks cleanup from cgroup_task_release() to cg...

CVE-2026-100208 Élevée · 8.1 microsoft · 365_apps · 25/09/2026

Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVE-2026-67410 Élevée · 8.2 broadcom · rabbitmq_server · 25/09/2026

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.3.3 and 4.2.9, OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint (CWE-200). when OAuth2 authentication is enabled for the RabbitMQ Manag...

CVE-2026-67237 Élevée · 7.5 broadcom · rabbitmq_server · 25/09/2026

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, set_token_auth/2 inserted a bearer token from the Authorization header or access_token cookie into OAuth bootstrap JavaScript without escapi...

CVE-2026-93834 Élevée · 8.8 PoC · 25/09/2026

A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allows a malicious guest user to craf...

CVE-2026-85029 Élevée · 8.8 ibm · guardium_data_protection · 25/09/2026

IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to improper limitation of a pathname to a restricted directory.

CVE-2026-84884 Élevée · 8.8 ibm · guardium_data_protection · 25/09/2026

IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password...

CVE-2026-100072 Élevée · 7.8 linux · linux_kernel · 25/09/2026

In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpi_bus_get_primary_device() The acpi_get_first_physical_node() usage in acpi_platform_fill_resource() and acpi_create_platform_d...

CVE-2026-98155 Élevée · 7.1 linux · linux_kernel · 25/09/2026

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Address potential out-of-bounds read in resp_worker() Although 'commit 2feec5ae5df7 ("accel/qaic: Handle DBC deactivation if the owner wen...

CVE-2026-98149 Élevée · 7.8 linux · linux_kernel · 25/09/2026

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix percpu map update indexing with sparse CPU IDs Per-CPU array, hash, and cgroup storage map updates without BPF_F_CPU or BPF_F_ALL_CPUS use a...

CVE-2026-98136 Élevée · 7.1 linux · linux_kernel · 25/09/2026

In the Linux kernel, the following vulnerability has been resolved: ntfs: bound $AttrDef table walk to the loaded table size ntfs_attr_find_in_attrdef() walks the in-memory $AttrDef table, but the loop condition bounds...

CVE-2026-63493 Élevée · 8.6 snipeitapp · snipe-it · 24/09/2026

Snipe-IT is an IT asset/license management system. Prior to 8.7.0, a password-authenticated session for an account with self.api permission can reach the personal-access-token API flow before completing the account's sec...

CVE-2026-62368 Élevée · 8.4 snipeitapp · snipe-it · 24/09/2026

Snipe-IT is an IT asset/license management system. Prior to 8.7.0, a user with the customfields.create permission can store markup in CustomField.name, and app/Presenters/AssetPresenter.php assigns that value as an unesc...

CVE-2026-82094 Élevée · 7.1 ibm · datastage_on_cloud_pak_for_data · 24/09/2026

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to traverse directories on the system due to improper limitation of a pathname to a restricted directory.

Sources : NVD (NIST), CISA KEV, FIRST EPSS. Dernière mise à jour : 22/10/2026 16:55. Les analyses en français sont générées par IA et peuvent contenir des erreurs : vérifiez toujours l'avis de l'éditeur.