Veille CVE

Mardi 13 octobre 2026

2 CVE

  1. CVE-2026-96951 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows Command Injection Vulnerability — Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.

  2. CVE-2026-104935 – Non évaluée Exploitée

    Ivanti Connect Secure

    Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability — Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.