Veille CVE

Semaine du 8 juin au 14 juin 2026

15 CVE sur 1 785

Critique 142 Élevée 821 Moyenne 745 Faible 62 Non évaluée 15 Exploitées (KEV) Tri : plus récentes
  1. CVE-2026-54095 – Non évaluée Rejetée

    Rejected reason: CVE ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-53826. Reason: This candidate is a duplicate of CVE-2025-53826. Notes: All CVE users should reference CVE-2025-53826 instead of this candidate

  2. CVE-2020-2521 – Non évaluée Rejetée

    Rejected reason: This candidate was issued in error.

  3. CVE-2026-54102 – Non évaluée Rejetée

    Rejected reason: Reserved but no longer needed.

  4. CVE-2026-54101 – Non évaluée Rejetée

    Rejected reason: Reserved but no longer needed.

  5. CVE-2026-10676 – Non évaluée Rejetée

    Rejected reason: This CVE Record has been rejected by the Zephyr Project CNA. Subsequent analysis determined that the addressed defect is not reachable in any released version of Zephyr: on every supported release branch the affected value is corrected before it is used, and the change that exposes the defect exists only in unreleased development code. As no released version is affected, this identifier is withdrawn.

  6. CVE-2026-12013 – Non évaluée Rejetée

    Rejected reason: Determined not a vulnerability

  7. CVE-2026-12038 – Non évaluée Rejetée

    Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.

  8. CVE-2026-6552 – Non évaluée Rejetée

    Rejected reason: This CVE ID has been rejected. GitLab determined that the reported behavior does not constitute a vulnerability: linking a group SAML identity requires the user to explicitly consent to that group controlling their GitLab account for sign-in, and management of group SAML identities by a group Owner is therefore expected behavior rather than an authorization bypass. No GitLab version was affected.

  9. CVE-2026-48556 – Non évaluée Rejetée

    Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  10. CVE-2026-10238 – Non évaluée Rejetée

    Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  11. CVE-2026-11577 – Non évaluée Rejetée

    Rejected reason: The reported behavior does not constitute a privilege escalation. Exploitation requires the attacker to already possess the manage-realm administrative role within the realm-management client. By design, the manage-realm role is intended to be equivalent in administrative authority to realm-admin. A user with manage-realm already has full administrative control over the realm. Therefore, importing users with realm-admin role mappings through POST /admin/realms/{realm}/partialImport does not grant any additional privileges beyond those already held by the administrator and does not represent a security vulnerability.

  12. CVE-2024-56123 – Non évaluée Rejetée

    Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  13. CVE-2024-56122 – Non évaluée Rejetée

    Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  14. CVE-2024-56121 – Non évaluée Rejetée

    Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  15. CVE-2024-56120 – Non évaluée Rejetée

    Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.