Veille CVE

Semaine du 3 août au 9 août 2026

6 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 5 Tri : plus récentes
  1. CVE-2026-8037 – Non évaluée Exploitée

    Progress LoadMaster

    Progress LoadMaster Command Injection Vulnerability — Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints.

  2. CVE-2026-63077 – Non évaluée Exploitée Rançongiciel

    JetBrains TeamCity

    JetBrains TeamCity Deserialization of Untrusted Data Vulnerability — JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol.

  3. CVE-2026-34486 7.5 Élevée Exploitée

    Apache Software Foundation Apache Tomcat · Red Hat Enterprise Linux 10 · Red Hat Enterprise Linux 10.0 Extended Update Support · Red Hat Enterprise Linux 7 Extended Lifecycle Support

    Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.

  4. CVE-2026-9198 – Non évaluée Exploitée

    IBM Langflow

    IBM Langflow Code Injection Vulnerability — Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.

  5. CVE-2026-18556 – Non évaluée Exploitée

    N-able N-central

    N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability — N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass.

  6. CVE-2026-18577 – Non évaluée Exploitée

    N-able N-central

    N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability — N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in N-central. This vulnerability is the result of an incomplete patch for CVE-2026-18556.