Bunkers Cyber Defense

Exploitées dans la nature · Source CISA KEV

Vulnérabilités exploitées dans la nature

Au 2026-10-16, la CISA a ajouté 36 vulnérabilités à son catalogue Known Exploited Vulnerabilities au cours des 30 derniers jours, dont 7 cette semaine. Fournisseurs les plus présents sur les 50 dernières entrées : Cisco (5), Citrix (4), Microsoft (4). Le catalogue compte 1746 entrées (version 2026.10.15).

Gravité
50 sur 50 entréesTélécharger en CSV ↓
CVEFournisseur · produitVulnérabilitéCVSSAjoutéÉchéanceRançongiciel
CVE-2026-21589Atlassian · Multiple ProductsAtlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability9.32026-10-152026-10-18Inconnu
CVE-2026-76519Cisco · Secure Email GatewayCisco Secure Email Gateway Relative Path Traversal Vulnerability9.82026-10-142026-10-17Inconnu
CVE-2026-105134Ahsay · AhsayCBSAhsay AhsayCBS Command Injection Vulnerability9.32026-10-142026-10-17Inconnu
CVE-2026-105133Ahsay · AhsayCBSAhsay AhsayCBS Improper Authentication Vulnerability5.52026-10-142026-10-17Inconnu
CVE-2026-0322Palo Alto Networks · PAN-OSPalo Alto Networks PAN-OS Code Injection Vulnerability8.62026-10-142026-10-17Inconnu
CVE-2026-96951Microsoft · WindowsMicrosoft Windows Command Injection VulnerabilityCVSS n/d2026-10-132026-10-16Inconnu
CVE-2026-104935Ivanti · Connect SecureIvanti Connect Secure Authentication Bypass by Spoofing VulnerabilityCVSS n/d2026-10-132026-10-16Inconnu
CVE-2023-22894Strapi · StrapiStrapi Cleartext Storage of Sensitive Information VulnerabilityCVSS n/d2026-10-082026-10-11Inconnu
CVE-2021-3199ONLYOFFICE · DocsONLYOFFICE Docs Server Path Traversal VulnerabilityCVSS n/d2026-10-082026-10-11Inconnu
CVE-2016-3081Apache · StrutsApache Struts Command Injection VulnerabilityCVSS n/d2026-10-082026-10-11Inconnu
CVE-2015-5477ISC · BIND ISC BIND Data Processing Errors VulnerabilityCVSS n/d2026-10-082026-10-11Inconnu
CVE-2015-3306ProFTPD · ProFTPDProFTPD Improper Access Control VulnerabilityCVSS n/d2026-10-082026-10-11Inconnu
CVE-2026-88779Citrix · NetScalerCitrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCVSS n/d2026-10-042026-10-07Inconnu
CVE-2026-102490Zammad GmbH · ZammadZammad GmbH Zammad Improper Privilege Management VulnerabilityCVSS n/d2026-10-022026-10-05Inconnu
CVE-2026-102489Zammad GmbH · ZammadZammad GmbH Zammad Session Fixation VulnerabilityCVSS n/d2026-10-022026-10-05Inconnu
CVE-2026-104286Fortinet · FortiMailFortinet FortiMail Path Traversal VulnerabilityCVSS n/d2026-10-012026-10-04Inconnu
CVE-2026-76504Cisco · Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityCVSS n/d2026-09-302026-10-03Inconnu
CVE-2026-86950Apple · Multiple ProductsApple Multiple Products Out-of-Bounds Write VulnerabilityCVSS n/d2026-09-292026-10-13Inconnu
CVE-2026-88772Citrix · NetScalerCitrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCVSS n/d2026-09-272026-09-30Inconnu
CVE-2026-88771Citrix · NetScalerCitrix NetScaler Improper Input Validation VulnerabilityCVSS n/d2026-09-272026-09-30Inconnu
CVE-2026-87902WordPress · CoreWordPress Core Remote File Inclusion VulnerabilityCVSS n/d2026-09-252026-09-28Inconnu
CVE-2026-67279MikroTik · RouterOSMikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityCVSS n/d2026-09-252026-09-28Inconnu
CVE-2026-65660Microsoft · SharePointMicrosoft SharePoint Code Injection VulnerabilityCVSS n/d2026-09-252026-09-28Inconnu
CVE-2026-71362Adobe · Commerce and Magento Adobe Commerce and Magento Incorrect Authorization Vulnerability CVSS n/d2026-09-242026-09-27Inconnu
CVE-2026-5430WSO2 · Multiple ProductsWSO2 Multiple Products Path Traversal Vulnerability CVSS n/d2026-09-242026-09-27Inconnu
CVE-2026-94127F5 · BIG-IP APMF5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityCVSS n/d2026-09-222026-09-25Inconnu
CVE-2026-93952Arista · VeloCloud OrchestratorArista VeloCloud Orchestrator Improper Input Validation VulnerabilityCVSS n/d2026-09-222026-09-25Inconnu
CVE-2026-93616Check Point · Multiple ProductsCheck Point Multiple Products Path Traversal VulnerabilityCVSS n/d2026-09-222026-09-25Inconnu
CVE-2026-85102Check Point · Multiple ProductsCheck Point Multiple Products Improper Certificate Validation VulnerabilityCVSS n/d2026-09-222026-09-25Inconnu
CVE-2026-7273Zyxel · GS1900 Series SwitchesZyxel GS1900 Series Switches Stack-Based Buffer Overflow VulnerabilityCVSS n/d2026-09-212026-09-24Inconnu
CVE-2026-53266Linux · KernelLinux Kernel Out-of-Bounds Write VulnerabilityCVSS n/d2026-09-182026-09-21Inconnu
CVE-2025-39964Linux · KernelLinux Kernel Race Condition VulnerabilityCVSS n/d2026-09-182026-09-21Inconnu
CVE-2025-39682Linux · KernelLinux Kernel Improper Check for Unusual or Exceptional Conditions VulnerabilityCVSS n/d2026-09-182026-09-21Inconnu
CVE-2026-87886Acronis · BackupAcronis Backup Incorrect Default Permissions VulnerabilityCVSS n/d2026-09-162026-09-19Inconnu
CVE-2026-76460Cisco · Identity Services EngineCisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityCVSS n/d2026-09-162026-09-19Inconnu
CVE-2026-58704Google · PixelGoogle Pixel Improper Authorization VulnerabilityCVSS n/d2026-09-162026-09-19Inconnu
CVE-2026-76461Cisco · Secure Email GatewayCisco Secure Email Gateway SQL Injection VulnerabilityCVSS n/d2026-09-142026-09-17Inconnu
CVE-2026-85706GitLab · Community Edition and Enterprise EditionGitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityCVSS n/d2026-09-112026-09-14Inconnu
CVE-2026-84869ConnectWise · ScreenConnectConnectWise ScreenConnect Improper Privilege Management and Missing Authorization VulnerabilityCVSS n/d2026-09-112026-09-14Inconnu
CVE-2026-42018JFrog · ArtifactoryJFrog Artifactory Improper Authentication VulnerabilityCVSS n/d2026-09-112026-09-25Inconnu
CVE-2026-42016JFrog · ArtifactoryJFrog Artifactory Incorrect Authorization VulnerabilityCVSS n/d2026-09-112026-09-25Inconnu
CVE-2026-86060MikroTik · RouterOSMikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityCVSS n/d2026-09-102026-09-13Inconnu
CVE-2026-67277MikroTik · RouterOSMikroTik RouterOS Missing Authentication for Critical Function VulnerabilityCVSS n/d2026-09-102026-09-13Inconnu
CVE-2026-87491Google · Chromium V8Google Chromium V8 Out of Bounds Write VulnerabilityCVSS n/d2026-09-092026-09-23Inconnu
CVE-2026-20079Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityCVSS n/d2026-09-092026-09-12Inconnu
CVE-2026-19490Citrix · NetScalerCitrix NetScaler Authentication Bypass Using an Alternate Path or Channel VulnerabilityCVSS n/d2026-09-092026-09-12Inconnu
CVE-2025-25249Fortinet · Multiple ProductsFortinet Multiple Products Heap-based Buffer Overflow VulnerabilityCVSS n/d2026-09-092026-09-12Inconnu
CVE-2026-86218N-able · N-centralN-able N-central Static Code Injection VulnerabilityCVSS n/d2026-09-082026-09-11Inconnu
CVE-2026-85880Microsoft · WindowsMicrosoft Windows Heap-Based Buffer Overflow VulnerabilityCVSS n/d2026-09-082026-09-22Inconnu
CVE-2026-81963Microsoft · WindowsMicrosoft Windows Link Following VulnerabilityCVSS n/d2026-09-082026-09-22Inconnu

Sources : CISA Known Exploited Vulnerabilities Catalog (domaine public, attribution demandée) ; scores CVSS : NVD API 2.0 — ce site utilise l'API NVD mais n'est ni endossé ni certifié par la NVD. · CISA KEV 2026.10.15 · Mis à jour il y a 21 min