Veille CVE

Vendredi 25 septembre 2026

3 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 2 Tri : plus récentes
  1. CVE-2026-65660 8.8 Élevée Exploitée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  2. CVE-2026-87902 – Non évaluée Exploitée

    WordPress Core

    WordPress Core Remote File Inclusion Vulnerability — WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local `.php` file outside the active theme directories, leading to remote code execution.

  3. CVE-2026-67279 – Non évaluée Exploitée

    MikroTik RouterOS

    Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability — Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of CVE-2026-86060.