Base de données CVE

CVE-2026-100647 Moyenne · 6.9 vllm · vllm · 26/09/2026

vLLM versions before 0.29.0 contain a denial-of-service vulnerability in the cache_salt parameter accepted on OpenAI-compatible and Anthropic API endpoints, which lacks maximum length validation and is processed on the s...

CVE-2026-97885 Moyenne · 5.5 · 25/09/2026

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updatefaculty.php. This manipulation of the argument fid causes...

CVE-2026-97883 Moyenne · 5.5 · 25/09/2026

A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file updatequery.php. The manipulation of the...

CVE-2026-97871 Moyenne · 5.5 · 25/09/2026

A vulnerability has been found in Zhonglun CloudPos up to 3.0.1.76. This issue affects the function OpenLocalBrowser of the file ZlPos/ZlPos/Bizlogic/JSBridge.cs of the component JSBridge. Such manipulation of the argume...

CVE-2026-67412 Moyenne · 6.0 broadcom · rabbitmq_server · 25/09/2026

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, 4.2.9 , 4.1.14, 4.0.24, and 3.13.18, Federation upstream in RabbitMQ skips vhost authorization allowing cross-vhost message access. what the bug lets...

CVE-2026-67411 Moyenne · 6.0 broadcom · rabbitmq_server · 25/09/2026

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18, 4.0.23, 4.1.14, 4.2.9, and 4.3.3, native MQTT and MQTT over WebSocket behind a trusted PROXY Protocol frontend could lose the proxy-derived client...

CVE-2026-67407 Moyenne · 5.1 broadcom · rabbitmq_server · 25/09/2026

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3 and 4.2.9 and 4.1.14 and 4.0.23, Incomplete fix for CVE-2026-44838: escaperegexchar/1 does not escape -, leaving room for an MQTT topic permission bypa...

CVE-2026-67230 Moyenne · 6.3 broadcom · rabbitmq_server · 25/09/2026

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the Web STOMP WebSocket handler enforced neither max_frame_size nor login_timeout before authentication, allowing an una...

CVE-2026-67225 Moyenne · 6.3 broadcom · rabbitmq_server · 25/09/2026

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the stream protocol stored the FrameMax value negotiated during the Tune handshake but did not compare it with an inboun...

CVE-2026-67223 Moyenne · 6.3 broadcom · rabbitmq_server · 25/09/2026

RabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, 4.2, and 4.3 maintenance lines but contains conflicting first-fixed versions for the 3.13, 4.0, and 4.1 lines. fill/2 substi...

CVE-2026-97865 Moyenne · 6.9 · 25/09/2026

A security flaw has been discovered in Open-Web-Analytics up to 1.8.1. Affected is the function Event::loadFromArray of the file queue.php of the component Remote Event Queue Endpoint. Performing a manipulation results i...

CVE-2026-67233 Moyenne · 6.0 broadcom · rabbitmq_server · 24/09/2026

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The shovel management resource's is_authorized/2 delegates to rabbit_mgmt_util:is_authorized_monitor/2, which acc...

CVE-2026-67405 Moyenne · 5.3 broadcom · rabbitmq_server · 23/09/2026

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, Neither the Web-MQTT handler (deps/rabbitmq_web_mqtt/src/rabbit_web_mqtt_handler.erl:104) nor the Web-STOMP handl...

CVE-2026-96655 Moyenne · 5.3 KEV Plex · Media Server · 23/09/2026

Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

CVE-2026-96654 Moyenne · 6.9 KEV Plex · Media Server · 23/09/2026

Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability

CVE-2026-96652 Moyenne · 5.3 KEV PoC Plex · Media Server · 23/09/2026

Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

CVE-2026-95656 Moyenne · 5.5 · 22/09/2026

A vulnerability was found in dgtlmoon changedetection.io up to 50389b07. This vulnerability affects the function add_watch_ui_snapshot of the file changedetectionio/blueprint/add_watch_ui/__init__.py of the component Pre...

CVE-2026-67279 Moyenne · 6.9 KEV PoC MikroTik · RouterOS · 05/09/2026

Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

CVE-2026-66384 Moyenne · 5.3 KEV PoC JFrog · Artifactory · 12/08/2026

JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

CVE-2026-20316 Moyenne · 5.3 KEV Rançongiciel Cisco · Secure Firewall Management Center (FMC) · 29/07/2026

Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

CVE-2026-60137 Moyenne · 5.9 KEV PoC WordPress · Core · 17/07/2026

WordPress Core SQL Injection Vulnerability

CVE-2026-48710 Moyenne · 6.5 KEV PoC Kludex · Starlette · 26/05/2026

Kludex Starlette HTTP Request/Response Smuggling Vulnerability

CVE-2025-61624 Moyenne · 6.5 KEV Fortinet · Multiple Products · 14/04/2026

Fortinet Multiple Products Path Traversal Vulnerability

CVE-2025-68686 Moyenne · 5.9 KEV Fortinet · FortiOS · 10/02/2026

Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

CVE-2025-39964 Moyenne · 5.5 KEV PoC Linux · Kernel · 13/10/2025

Linux Kernel Race Condition Vulnerability

Sources : NVD (NIST), CISA KEV, FIRST EPSS. Dernière mise à jour : 23/10/2026 05:07. Les analyses en français sont générées par IA et peuvent contenir des erreurs : vérifiez toujours l'avis de l'éditeur.