Veille CVE

Jeudi 24 septembre 2026

2 CVE

  1. CVE-2026-71362 – Non évaluée Exploitée

    Adobe Commerce and Magento

    Adobe Commerce and Magento Incorrect Authorization Vulnerability — Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction.

  2. CVE-2026-5430 – Non évaluée Exploitée

    WSO2 Multiple Products

    WSO2 Multiple Products Path Traversal Vulnerability — WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution.