Veille CVE

Samedi 27 juin 2026

4 CVE sur 59

Critique 4 Élevée 26 Moyenne 29 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2026-2053 10.0 Critique

    WSO2 API Manager

    The WSO2 API Manager's message flow component, when processing WS-Addressing headers, does not sufficiently validate or restrict user-controlled input within these headers. This omission allows an attacker to manipulate WS-Addressing headers to specify arbitrary destinations for server-initiated requests. Successful exploitation allows an unauthenticated attacker to control the destination of server-initiated requests originating from the WSO2 API Manager. This direct control can enable unauthorized access to internal network resources or services that would typically be inaccessible from external networks.

  2. CVE-2026-53914 9.8 Critique

    JetBrains Kotlin

    In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata

  3. CVE-2026-57926 9.8 Critique

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.16593 the websandbox bridge was vulnerable to a prototype pollution attack

  4. CVE-2026-52780 9.6 Critique

    opf openproject

    OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, cache store poisoning leads to Remote Code Execution (RCE). This vulnerability is fixed in 17.3.3 and 17.4.1.