Veille CVE

Semaine du 27 avril au 3 mai 2026

4 CVE

Critique 1 Élevée 2 Moyenne 1 Faible 0 Non évaluée 0 Tri : plus récentes
  1. CVE-2026-31431 7.8 Élevée Exploitée

    Linux · Red Hat NVIDIA for RHEL 10 · Red Hat Enterprise Linux 10 · Red Hat Enterprise Linux 10.0 Extended Update Support

    In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

  2. CVE-2026-41940 9.8 Critique Exploitée Rançongiciel

    WebPros cPanel · WebPros WP Squared · WebPros WHM · Cpanel cpanel

    cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

  3. CVE-2026-32202 4.3 Moyenne Exploitée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

  4. CVE-2024-1708 8.4 Élevée Exploitée Rançongiciel

    ConnectWise ScreenConnect

    ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems.