Veille CVE

Jeudi 16 juillet 2026

3 CVE

  1. CVE-2026-58644 9.8 Critique Exploitée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

  2. CVE-2026-39808 – Non évaluée Exploitée

    Fortinet FortiSandbox

    Fortinet FortiSandbox OS Command Injection Vulnerability — Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests.

  3. CVE-2026-25089 – Non évaluée Exploitée

    Fortinet FortiSandbox

    Fortinet FortiSandbox OS Command Injection Vulnerability — Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.