Veille CVE

Jeudi 22 janvier 2026

4 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 4 Tri : plus récentes
  1. CVE-2025-68645 – Non évaluée Exploitée

    Synacor Zimbra Collaboration Suite (ZCS)

    Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability — Synacor Zimbra Collaboration Suite (ZCS) contains a PHP remote file inclusion vulnerability that could allow for remote attackers to craft requests to the /h/rest endpoint to influence internal request dispatching, allowing inclusion of arbitrary files from the WebRoot directory.

  2. CVE-2025-54313 – Non évaluée Exploitée

    Prettier eslint-config-prettier

    Prettier eslint-config-prettier Embedded Malicious Code Vulnerability — Prettier eslint-config-prettier contains an embedded malicious code vulnerability. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.

  3. CVE-2025-34026 – Non évaluée Exploitée

    Versa Concerto

    Versa Concerto Improper Authentication Vulnerability — Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.

  4. CVE-2025-31125 – Non évaluée Exploitée

    Vite Vitejs

    Vite Vitejs Improper Access Control Vulnerability — Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected.