Veille CVE

Semaine du 26 janvier au 1 février 2026

2 CVE

  1. CVE-2026-1340 9.8 Critique Exploitée

    Ivanti Endpoint Manager Mobile

    A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

  2. CVE-2026-21509 7.8 Élevée Exploitée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office LTSC 2021

    Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.