Veille CVE

Semaine du 27 avril au 3 mai 2026

4 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 3 Tri : plus récentes
  1. CVE-2026-31431 7.8 Élevée Exploitée

    Linux · Red Hat NVIDIA for RHEL 10 · Red Hat Enterprise Linux 10 · Red Hat Enterprise Linux 10.0 Extended Update Support

    In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

  2. CVE-2026-41940 – Non évaluée Exploitée Rançongiciel

    WebPros cPanel & WHM and WP2 (WordPress Squared)

    WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability — WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

  3. CVE-2026-32202 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows Protection Mechanism Failure Vulnerability — Microsoft Windows Shell contains a protection mechanism failure vulnerability that allows an unauthorized attacker to perform spoofing over a network.

  4. CVE-2024-1708 – Non évaluée Exploitée Rançongiciel

    ConnectWise ScreenConnect

    ConnectWise ScreenConnect Path Traversal Vulnerability — ConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote code or directly impact confidential data and critical systems.