Veille CVE

Semaine du 20 juillet au 26 juillet 2026

6 CVE

Critique 1 Élevée 0 Moyenne 0 Faible 0 Non évaluée 5 Tri : plus récentes
  1. CVE-2026-50522 9.8 Critique Exploitée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

  2. CVE-2026-16232 – Non évaluée Exploitée

    Check Point SmartConsole

    Check Point SmartConsole Improper Authentication Vulnerability — Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges.

  3. CVE-2026-63030 – Non évaluée Exploitée

    WordPress Core

    WordPress Core Interpretation Conflict Vulnerability — WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.

  4. CVE-2026-60137 – Non évaluée Exploitée

    WordPress Core

    WordPress Core SQL Injection Vulnerability — WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability can be chained with CVE-2026-63030 to allow an unauthenticated attacker to gain remote code execution on default WordPress installations.

  5. CVE-2026-0770 – Non évaluée Exploitée

    Langflow Langflow

    Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability — Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations.

  6. CVE-2021-27137 – Non évaluée Exploitée

    DD-WRT DD-WRT

    DD-WRT Stack-Based Buffer Overflow Vulnerability — DD-WRT contains a stack-based buffer overflow vulnerability that could allow an unauthenticated attacker to overflow an internal buffer used by UPnP and trigger a code execution vulnerability.