Veille CVE

Semaine du 3 août au 9 août 2026

6 CVE

Critique 3 Élevée 3 Moyenne 0 Faible 0 Non évaluée 0 Tri : plus récentes
  1. CVE-2026-8037 9.8 Critique Exploitée

    Progress Software LoadMaster · Progress Software ECS Connections Manager · Progress Software Object Scale Connection Manager · Progress Software MOVEit WAF

    OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints

  2. CVE-2026-63077 9.8 Critique Exploitée Rançongiciel

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

  3. CVE-2026-18556 7.4 Élevée Exploitée

    N-able N-central

    Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

  4. CVE-2026-9198 9.8 Critique Exploitée

    IBM Langflow OSS · Langflow langflow

    IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments

  5. CVE-2026-34486 7.5 Élevée Exploitée

    Apache Software Foundation Apache Tomcat · Red Hat Enterprise Linux 10 · Red Hat Enterprise Linux 10.0 Extended Update Support · Red Hat Enterprise Linux 7 Extended Lifecycle Support

    Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.

  6. CVE-2026-18577 8.1 Élevée Exploitée

    N-able N-central

    An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1