Base de données CVE

CVE-2026-94578 Élevée · 7.5 broadcom · fabric_operating_system · 08/10/2026

Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated users to gain root-equiva...

CVE-2026-87684 Élevée · 8.7 broadcom · fabric_operating_system · 08/10/2026

A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies...

CVE-2026-87671 Élevée · 7.1 broadcom · fabric_operating_system · 08/10/2026

An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array in...

CVE-2026-87659 Élevée · 7.1 broadcom · fabric_operating_system · 08/10/2026

A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1. A compromised switch connected to the fabric can transmit crafted inband Fibre Channel v...

CVE-2026-87683 Élevée · 8.6 broadcom · fabric_operating_system · 08/10/2026

Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads (such as device configuration attributes...

CVE-2026-87682 Élevée · 8.6 broadcom · fabric_operating_system · 08/10/2026

Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input processing flaws during remote management connection vali...

CVE-2026-87680 Élevée · 8.5 broadcom · fabric_operating_system · 08/10/2026

A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters.

CVE-2026-87679 Élevée · 8.5 broadcom · fabric_operating_system · 08/10/2026

When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the ma...

CVE-2026-107223 Élevée · 7.1 excelize · excelize · 07/10/2026

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, flatCols expands file-loaded column ranges without validating Min and Max against the worksheet column limit....

CVE-2026-76468 Élevée · 8.2 · 07/10/2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening...

CVE-2026-107209 Élevée · 7.5 imagemagick · imagemagick · 07/10/2026

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resourc...

CVE-2026-106580 Élevée · 8.2 imagemagick · imagemagick · 07/10/2026

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation...

CVE-2026-106579 Élevée · 7.5 imagemagick · imagemagick · 07/10/2026

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can bypass an ImageMagick security policy that uses coder as its domain, pot...

CVE-2026-106578 Élevée · 7.5 imagemagick · imagemagick · 07/10/2026

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid memory free in the MVG decoder and crash the process. T...

CVE-2026-106576 Élevée · 7.5 imagemagick · imagemagick · 07/10/2026

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted XMP profile can trigger excessive work while the parser determines a rational value's numerator...

CVE-2026-106573 Élevée · 7.5 imagemagick · imagemagick · 07/10/2026

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessivel...

CVE-2026-46569 Élevée · 7.7 tuxera · ntfs-3g · 07/10/2026

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image....

CVE-2026-42616 Élevée · 7.8 tuxera · ntfs-3g · 07/10/2026

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by readin...

CVE-2026-83540 Élevée · 7.7 wolfssh · wolfssh · 07/10/2026

When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated connection is not released before a token is acquired for a subsequent connecti...

CVE-2026-93449 Élevée · 8.8 langflow · langflow · 07/10/2026

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.

CVE-2026-93445 Élevée · 8.8 langflow · langflow · 07/10/2026

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code.

CVE-2026-93443 Élevée · 8.8 langflow · langflow · 07/10/2026

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code.

CVE-2026-106583 Élevée · 7.8 openbsd · openssh · 07/10/2026

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.

CVE-2026-106509 Élevée · 8.8 linuxfoundation · backstage_plugin-techdocs-node · 06/10/2026

Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by improper validation of mkdocs theme configuration in techdocs. When TechDocs is c...

CVE-2026-106505 Élevée · 8.5 linuxfoundation · backstage_plugin-techdocs-node · 06/10/2026

Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package is affected by bypass of mkdocs configuration sanitizer in techdocs backend. Users wi...

Sources : NVD (NIST), CISA KEV, FIRST EPSS. Dernière mise à jour : 23/10/2026 05:07. Les analyses en français sont générées par IA et peuvent contenir des erreurs : vérifiez toujours l'avis de l'éditeur.