Veille CVE

Mardi 13 octobre 2026

2 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 1 Tri : plus récentes
  1. CVE-2026-96951 8.8 Élevée Exploitée

    Microsoft Outlook.com · Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2

    Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

  2. CVE-2026-104935 – Non évaluée Exploitée

    Ivanti Connect Secure

    Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability — Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.