Veille CVE

Semaine du 1 juin au 7 juin 2026

5 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 4 Tri : plus récentes
  1. CVE-2026-28318 – Non évaluée Exploitée

    SolarWinds Serv-U

    SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability — SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication.

  2. CVE-2026-45247 – Non évaluée Exploitée

    Mirasvit Mirasvit Full Page Cache Warmer

    Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability — Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie.

  3. CVE-2022-0492 7.8 Élevée Exploitée

    kernel · Netapp h300s firmware · Netapp h410c firmware · Netapp h410s firmware

    A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

  4. CVE-2025-48595 – Non évaluée Exploitée

    Android Framework

    Android Framework Integer Overflow Vulnerability — Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.

  5. CVE-2024-21182 – Non évaluée Exploitée

    Oracle WebLogic Server

    Oracle WebLogic Server Unspecified Vulnerability — Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data.