Veille CVE

Mardi 14 juillet 2026

4 CVE

  1. CVE-2026-56164 – Non évaluée Exploitée

    Microsoft SharePoint Server

    Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability — Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network.

  2. CVE-2026-56155 – Non évaluée Exploitée

    Microsoft Active Directory Federation Services

    Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability — Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally.

  3. CVE-2026-15410 – Non évaluée Exploitée Rançongiciel

    SonicWall SMA1000 Appliances

    SonicWall SMA1000 Appliances Code Injection Vulnerability — SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.

  4. CVE-2026-15409 – Non évaluée Exploitée Rançongiciel

    SonicWall SMA1000 Appliances

    SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability — SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location.