Veille CVE

Mardi 2 septembre 2025

2 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 2 Tri : plus récentes
  1. CVE-2025-55177 – Non évaluée Exploitée

    Meta Platforms WhatsApp

    Meta Platforms WhatsApp Incorrect Authorization Vulnerability — Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device.

  2. CVE-2020-24363 – Non évaluée Exploitée

    TP-Link TL-WA855RE

    TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability — TP-link TL-WA855RE contains a missing authentication for critical function vulnerability. This vulnerability could allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.