Veille CVE

Octobre 2026

4 CVE

  1. CVE-2026-114236 3.3 Faible

    Red Hat Confidential Compute Attestation · Red Hat DPU kit for NVIDIA · Red Hat Exploit Intelligence · Red Hat Multicluster Engine for Kubernetes

    storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit

  2. CVE-2026-40808 6.5 Moyenne

    Automattic Jetpack VideoPress

    Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.

  3. CVE-2026-106602 4.8 Moyenne

    Automattic Jetpack

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2.

  4. CVE-2026-106601 5.4 Moyenne

    Automattic Jetpack

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2.