Vulnérabilités exploitées Anglais
CVE-2026-119977: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
WordPress WordPress Core has a vulnerability that attackers are actively exploiting.
Rubrique
Vulnérabilités exploitées
Les vulnérabilités activement exploitées par des attaquants, et les correctifs à appliquer en priorité.
Vulnérabilités exploitées Anglais
CVE-2026-97229: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
GitLab Community Edition and Enterprise Edition has a vulnerability that attackers are actively exploiting.
Vulnérabilités exploitées Anglais
CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software has a vulnerability that attackers are actively exploiting.
Vulnérabilités exploitées Anglais
CVE-2026-48356: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
Adobe Commerce and Magento has a vulnerability that attackers are actively exploiting.
Vulnérabilités exploitées Anglais
CVE-2026-46300: Linux Kernel Missing Initialization of a Variable Vulnerability
Linux Kernel has a vulnerability that attackers are actively exploiting.
Vulnérabilités exploitées Anglais
CVE-2026-41709: Broadcom VMWare ESX Insufficient Logging Vulnerability
Broadcom VMware ESX has a vulnerability that attackers are actively exploiting.
Vulnérabilités exploitées Anglais
CVE-2026-118527: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Ivanti Connect Secure has a vulnerability that attackers are actively exploiting.
Vulnérabilités exploitées Anglais
CVE-2026-111497: Google Brotli Unchecked Return Value Vulnerability
Google Brotli has a vulnerability that attackers are actively exploiting.
Vulnérabilités exploitées Anglais
CVE-2026-111357: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Ivanti Connect Secure has a vulnerability that attackers are actively exploiting.
Vulnérabilités exploitées Anglais
CVE-2026-109619: PHP Stale Internal Request-State Vulnerability
PHP Group PHP has a vulnerability that attackers are actively exploiting.
Vulnérabilités exploitées Anglais
CVE-2026-109618: PHP Memory Corruption Vulnerability
PHP Group PHP has a vulnerability that attackers are actively exploiting.