Base de données CVE

CVE-2026-17647 Élevée · 8.8 ibm · financial_transaction_manager · 22/09/2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere.

CVE-2026-17645 Élevée · 8.8 ibm · financial_transaction_manager · 22/09/2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to gain elevated privileges due to improper privilege management.

CVE-2026-17644 Élevée · 7.1 ibm · financial_transaction_manager · 22/09/2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to gain unauthorized access to sensitive information and modify transaction data due to the use of hard-coded credentials.

CVE-2026-17643 Élevée · 7.1 ibm · financial_transaction_manager · 22/09/2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently protected credentials.

CVE-2026-17620 Élevée · 7.5 ibm · financial_transaction_manager · 22/09/2026

IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 IBM Financial Transaction Manager transmits...

CVE-2026-63104 Élevée · 7.2 · 22/09/2026

Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace members with viewer or member roles to delete and modify tasks beyond their assigned permissions by ex...

CVE-2026-83964 Élevée · 7.5 adobe · connect · 22/09/2026

Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitati...

CVE-2026-77246 Élevée · 8.6 mcp-atlassian · mcp_atlassian · 22/09/2026

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment with READ_ONLY_MODE=false accepts a request without an Authorization iden...

CVE-2026-77274 Élevée · 8.8 mcp-atlassian · mcp_atlassian · 22/09/2026

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf has a backslash authority confusion because it interprets the authority differen...

CVE-2026-77271 Élevée · 8.3 mcp-atlassian · mcp_atlassian · 22/09/2026

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_safe_path defaults its base directory to os.getcwd(), and affected Confluence attachment call...

CVE-2026-77265 Élevée · 7.5 mcp-atlassian · mcp_atlassian · 22/09/2026

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, header-supplied Jira or Confluence URLs are resolved and validated before the HTTP client resolves the...

CVE-2026-77261 Élevée · 8.5 mcp-atlassian · mcp_atlassian · 22/09/2026

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, _make_ssrf_safe_hook is omitted from JiraFetcher and ConfluenceFetcher sessions created through the ba...

CVE-2026-77260 Élevée · 8.3 mcp-atlassian · mcp_atlassian · 22/09/2026

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Confluence and Jira upload_attachment implementations accept an unconstrained file_path and open t...

CVE-2026-87902 Élevée · 8.1 KEV PoC WordPress · Core · 22/09/2026

WordPress Core Remote File Inclusion Vulnerability

CVE-2026-87886 Élevée · 7.8 KEV Acronis · Backup · 17/09/2026

Acronis Backup Incorrect Default Permissions Vulnerability

CVE-2026-58704 Élevée · 8.8 KEV Google · Pixel · 15/09/2026

Google Pixel Improper Authorization Vulnerability

CVE-2026-87491 Élevée · 8.8 KEV PoC Google · Chromium V8 · 09/09/2026

Google Chromium V8 Out of Bounds Write Vulnerability

CVE-2026-85880 Élevée · 7.8 KEV Microsoft · Windows · 08/09/2026

Microsoft Windows Heap-Based Buffer Overflow Vulnerability

CVE-2026-81963 Élevée · 7.8 KEV PoC Microsoft · Windows · 08/09/2026

Microsoft Windows Link Following Vulnerability

CVE-2026-67277 Élevée · 8.8 KEV MikroTik · RouterOS · 05/09/2026

MikroTik RouterOS Missing Authentication for Critical Function Vulnerability

CVE-2026-85046 Élevée · 8.8 KEV PoC Google · Chromium V8 · 03/09/2026

Google Chromium V8 Type Confusion Vulnerability

CVE-2026-83549 Élevée · 7.8 KEV SonicWall · SMA1000 Appliances · 01/09/2026

SonicWall SMA1000 Appliances OS Command Injection Vulnerability

CVE-2026-81578 Élevée · 8.8 KEV PoC PaperCut · NG/MF · 28/08/2026

PaperCut NG/MF Missing Authentication for Critical Function Vulnerability

CVE-2026-73570 Élevée · 8.9 KEV PoC Synacor · Zimbra Collaboration Suite (ZCS) · 13/08/2026

Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

CVE-2026-42018 Élevée · 7.5 KEV JFrog · Artifactory · 12/08/2026

JFrog Artifactory Improper Authentication Vulnerability

Sources : NVD (NIST), CISA KEV, FIRST EPSS. Dernière mise à jour : 23/10/2026 05:07. Les analyses en français sont générées par IA et peuvent contenir des erreurs : vérifiez toujours l'avis de l'éditeur.