Veille CVE
Semaine du 18 mai au 24 mai 2026
9 CVE
-
Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
Ubiquiti Inc UniFi OS Server · Ubiquiti Inc UDM · Ubiquiti Inc UDM-Pro · Ubiquiti Inc UDM-SE
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
-
Ubiquiti Inc UniFi OS Server · Ubiquiti Inc Express · Ubiquiti Inc UDM · Ubiquiti Inc UDM-Pro
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.
-
Ubiquiti Inc UniFi OS Server · Ubiquiti Inc UDM · Ubiquiti Inc UDM-Pro · Ubiquiti Inc UDM-SE
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.
-
Trend Micro, Inc. TrendAI Apex One · Trend Micro, Inc. TrendAI Apex One as a Service · Trendmicro apex one
A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations. This vulnerability is only exploitable on the on-premise version of Apex One and a potential attacker must have access to the Apex One Server and already obtained administrative credentials to the server via some other method to exploit this vulnerability.
-
LiteSpeed Technologies cPanel Plugin · LiteSpeed Technologies WHM Plugin · Litespeedtech litespeed cpanel plugin · Litespeedtech litespeed whm plugin
LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpanel_jsonapi_func=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ 2>/dev/null in Bash. If you get no output, you have not been hit with exploitation of the vulnerability. If there is output, we recommend you examine the IP addresses in the list, determine if they are valid IP addresses, and if not, block them. To determine damage done, examine the system logs for use by the detected IP addresses. The issue is related to mishandling of Redis enable/disable features. The recommended minimum version is 2.4.7.
-
Drupal core · Drupal drupal
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection. This issue affects Drupal core: from 8.9.0 before 10.4.10, from 10.5.0 before 10.5.10, from 10.6.0 before 10.6.9, from 11.0.0 before 11.1.10, from 11.2.0 before 11.2.12, from 11.3.0 before 11.3.10.
-
Microsoft Defender Antimalware Platform
Microsoft Defender Denial of Service Vulnerability
-
Microsoft Malware Protection Engine
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.