Veille CVE

Jeudi 24 septembre 2026

2 CVE sur 92

Critique 7 Élevée 42 Moyenne 40 Faible 2 Non évaluée 1 Exploitées (KEV) Tri : plus récentes
  1. CVE-2026-73064 2.9 Faible

    trustedfirmware Mbed TLS

    In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.

  2. CVE-2026-77797 3.6 Faible

    Rapid7 Velociraptor

    Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files.