Veille CVE

Mercredi 9 septembre 2026

4 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 3 Tri : plus récentes
  1. CVE-2026-87491 8.8 Élevée Exploitée

    Google Chrome

    Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

  2. CVE-2026-20079 – Non évaluée Exploitée

    Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management

    Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability — Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.

  3. CVE-2026-19490 – Non évaluée Exploitée

    Citrix NetScaler

    Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability — Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy), an unauthenticated remote threat actor may be able to bypass authentication.

  4. CVE-2025-25249 – Non évaluée Exploitée

    Fortinet Multiple Products

    Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability — Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets.