Veille CVE

Mercredi 5 août 2026

4 CVE

Critique 4 Élevée 0 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2024-55591 9.8 Critique Exploitée Rançongiciel

    Fortinet FortiOS · Fortinet FortiProxy

    An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.

  2. CVE-2023-3519 9.8 Critique Exploitée Rançongiciel

    Citrix NetScaler ADC · Citrix NetScaler Gateway · Citrix netscaler application delivery controller

    Unauthenticated remote code execution

  3. CVE-2023-35078 9.8 Critique Exploitée Rançongiciel

    Ivanti Endpoint Manager Mobile · ivanti endpoint_manager_mobile

    An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.

  4. CVE-2023-28461 9.8 Critique Exploitée Rançongiciel

    arraynetworks arrayos_ag · Arraynetworks arrayos ag

    Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using a flags attribute in an HTTP header without authentication. The product could then be exploited through a vulnerable URL. The 2023-03-09 vendor advisory stated "a new Array AG release with the fix will be available soon."