Veille CVE

Mercredi 14 octobre 2026

4 CVE

Critique 1 Élevée 2 Moyenne 0 Faible 0 Non évaluée 1 Tri : plus récentes
  1. CVE-2026-0322 7.2 Élevée Exploitée

    Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Access · Paloaltonetworks pan-os

    A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not impacted by this vulnerability.

  2. CVE-2026-105134 10.0 Critique Exploitée

    AhsayCBS · Ahsay cloud backup suite

    A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. Upgrading to version 10.3.4 is able to resolve this issue. Upgrading the affected component is advised.

  3. CVE-2026-105133 7.3 Élevée Exploitée

    AhsayCBS · Ahsay cloud backup suite

    A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 10.3.4 is able to mitigate this issue. It is recommended to upgrade the affected component.

  4. CVE-2026-76519 – Non évaluée Exploitée

    Cisco Secure Email Gateway

    Cisco Secure Email Gateway Relative Path Traversal Vulnerability — Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.