Veille CVE

Mercredi 9 septembre 2026

2 CVE sur 19

Critique 0 Élevée 6 Moyenne 2 Faible 2 Non évaluée 9 Exploitées (KEV) Tri : plus récentes « Linux » ✕
  1. CVE-2026-87876 3.0 Faible

    Red Hat Hardened Images · Red Hat Enterprise Linux 10 · Red Hat Enterprise Linux 6 · Red Hat Enterprise Linux 7

    Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler (printer ACL validation and private-attribute filtering) could allow bypass of username-based access controls in certain configurations.

  2. CVE-2026-86564 3.3 Faible

    Red Hat Fast Datapath for RHEL 10 · Red Hat Fast Datapath for RHEL 8 · Red Hat Fast Datapath for RHEL 9 · Red Hat Enterprise Linux 10

    A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.