Base de données CVE

CVE-2026-17643 Élevée · 7.1 ibm · financial_transaction_manager · 22/09/2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials.

CVE-2026-17620 Élevée · 7.5 ibm · financial_transaction_manager · 22/09/2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 IBM Financial Transaction Manager transmits...

CVE-2026-63104 Élevée · 7.2 · 22/09/2026

Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace members with viewer or member roles to delete and modify tasks beyond their assigned permissions by ex...

CVE-2026-83964 Élevée · 7.5 adobe · connect · 22/09/2026

Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitati...

CVE-2026-77246 Élevée · 8.6 mcp-atlassian · mcp_atlassian · 22/09/2026

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment with READ_ONLY_MODE=false accepts a request without an Authorization iden...

CVE-2026-77274 Élevée · 8.8 mcp-atlassian · mcp_atlassian · 22/09/2026

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf has a backslash authority confusion because it interprets the authority differen...

CVE-2026-77271 Élevée · 8.3 mcp-atlassian · mcp_atlassian · 22/09/2026

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_safe_path defaults its base directory to os.getcwd(), and affected Confluence attachment call...

CVE-2026-77265 Élevée · 7.5 mcp-atlassian · mcp_atlassian · 22/09/2026

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, header-supplied Jira or Confluence URLs are resolved and validated before the HTTP client resolves the...

CVE-2026-77261 Élevée · 8.5 mcp-atlassian · mcp_atlassian · 22/09/2026

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, _make_ssrf_safe_hook is omitted from JiraFetcher and ConfluenceFetcher sessions created through the ba...

CVE-2026-77260 Élevée · 8.3 mcp-atlassian · mcp_atlassian · 22/09/2026

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Confluence and Jira upload_attachment implementations accept an unconstrained file_path and open t...

CVE-2026-87886 Élevée · 7.8 KEV Acronis · Backup · 17/09/2026

Acronis Backup Incorrect Default Permissions Vulnerability

CVE-2026-58704 Élevée · 8.8 KEV Google · Pixel · 15/09/2026

Google Pixel Improper Authorization Vulnerability

CVE-2026-42018 Élevée · 7.5 KEV JFrog · Artifactory · 12/08/2026

JFrog Artifactory Improper Authentication Vulnerability

CVE-2026-7273 Élevée · 8.8 KEV Zyxel · GS1900 Series Switches · 16/06/2026

Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability

CVE-2016-3081 Élevée · 8.1 KEV Apache · Struts · 26/04/2016

Apache Struts Command Injection Vulnerability

Sources : NVD (NIST), CISA KEV, FIRST EPSS. Dernière mise à jour : 22/10/2026 16:55. Les analyses en français sont générées par IA et peuvent contenir des erreurs : vérifiez toujours l'avis de l'éditeur.