Toutes
Critique
Élevée
Moyenne
Faible
Exploitées (KEV)
Rançongiciels
7 jours
Avec PoC
Sans PoC
Récentes
Plus graves
Priorité
CVE-2026-104068
Élevée · 8.6
PoC
· 22/10/2026
JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulnerability that allows an authenticated WordPress administrator to write attacker-controlled file contents outside the inte...
CVE-2026-109619
Critique · 9.2
PoC
php · php
· 21/10/2026
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request me...
CVE-2026-109618
Critique · 9.2
PoC
php · php
· 21/10/2026
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state...
CVE-2026-53995
Élevée · 8.8
PoC
· 19/10/2026
MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal...
Sources : NVD (NIST), CISA KEV, FIRST EPSS. Dernière mise à jour : 23/10/2026 05:07. Les analyses en français sont générées par IA et peuvent contenir des erreurs : vérifiez toujours l'avis de l'éditeur.