Veille CVE

Jeudi 4 juin 2026

2 CVE

Critique 1 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2026-28318 7.5 Élevée Exploitée

    SolarWinds Serv-U

    SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update

  2. CVE-2026-8037 9.8 Critique Exploitée

    Progress Software LoadMaster · Progress Software ECS Connections Manager · Progress Software Object Scale Connection Manager · Progress Software MOVEit WAF

    OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints