Base de données CVE

CVE-2026-18134 Élevée · 7.5 ibm · financial_transaction_manager · 22/09/2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.

CVE-2026-18123 Élevée · 7.5 ibm · financial_transaction_manager · 22/09/2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to the improper use of reflection with externally controlled input.

CVE-2026-18114 Élevée · 7.5 ibm · financial_transaction_manager · 22/09/2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to read arbitrary files due to improper path canonicalization.

CVE-2026-18095 Élevée · 8.8 ibm · financial_transaction_manager · 22/09/2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.

CVE-2026-18074 Élevée · 7.5 ibm · financial_transaction_manager · 22/09/2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper authentication and missing authorization.

CVE-2026-18066 Élevée · 7.1 ibm · financial_transaction_manager · 22/09/2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and trigger unauthorized actions due to server-side request forgery.

CVE-2026-17647 Élevée · 8.8 ibm · financial_transaction_manager · 22/09/2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere.

CVE-2026-17645 Élevée · 8.8 ibm · financial_transaction_manager · 22/09/2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to gain elevated privileges due to improper privilege management.

CVE-2026-17644 Élevée · 7.1 ibm · financial_transaction_manager · 22/09/2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to gain unauthorized access to sensitive information and modify transaction data due to the use of hard-coded credentials.

CVE-2026-17643 Élevée · 7.1 ibm · financial_transaction_manager · 22/09/2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials.

CVE-2026-17620 Élevée · 7.5 ibm · financial_transaction_manager · 22/09/2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 IBM Financial Transaction Manager transmits...

CVE-2026-63104 Élevée · 7.2 · 22/09/2026

Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace members with viewer or member roles to delete and modify tasks beyond their assigned permissions by ex...

CVE-2026-83964 Élevée · 7.5 adobe · connect · 22/09/2026

Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitati...

CVE-2026-77246 Élevée · 8.6 mcp-atlassian · mcp_atlassian · 22/09/2026

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment with READ_ONLY_MODE=false accepts a request without an Authorization iden...

CVE-2026-77274 Élevée · 8.8 mcp-atlassian · mcp_atlassian · 22/09/2026

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf has a backslash authority confusion because it interprets the authority differen...

CVE-2026-77271 Élevée · 8.3 mcp-atlassian · mcp_atlassian · 22/09/2026

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_safe_path defaults its base directory to os.getcwd(), and affected Confluence attachment call...

CVE-2026-77265 Élevée · 7.5 mcp-atlassian · mcp_atlassian · 22/09/2026

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, header-supplied Jira or Confluence URLs are resolved and validated before the HTTP client resolves the...

CVE-2026-77261 Élevée · 8.5 mcp-atlassian · mcp_atlassian · 22/09/2026

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, _make_ssrf_safe_hook is omitted from JiraFetcher and ConfluenceFetcher sessions created through the ba...

CVE-2026-77260 Élevée · 8.3 mcp-atlassian · mcp_atlassian · 22/09/2026

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Confluence and Jira upload_attachment implementations accept an unconstrained file_path and open t...

CVE-2026-87902 Élevée · 8.1 KEV PoC WordPress · Core · 22/09/2026

WordPress Core Remote File Inclusion Vulnerability

CVE-2026-87886 Élevée · 7.8 KEV Acronis · Backup · 17/09/2026

Acronis Backup Incorrect Default Permissions Vulnerability

CVE-2026-58704 Élevée · 8.8 KEV Google · Pixel · 15/09/2026

Google Pixel Improper Authorization Vulnerability

CVE-2026-42018 Élevée · 7.5 KEV JFrog · Artifactory · 12/08/2026

JFrog Artifactory Improper Authentication Vulnerability

CVE-2026-65660 Élevée · 8.8 KEV PoC Microsoft · SharePoint · 11/08/2026

Microsoft SharePoint Code Injection Vulnerability

CVE-2026-53266 Élevée · 8.8 KEV PoC Linux · Kernel · 25/06/2026

Linux Kernel Out-of-Bounds Write Vulnerability

Sources : NVD (NIST), CISA KEV, FIRST EPSS. Dernière mise à jour : 22/10/2026 16:55. Les analyses en français sont générées par IA et peuvent contenir des erreurs : vérifiez toujours l'avis de l'éditeur.