Veille CVE

Vendredi 9 octobre 2026

2 CVE

  1. CVE-2026-95610 8.5 Élevée

    UpSolution Core

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3.

  2. CVE-2026-94166 7.1 Élevée

    UpSolution Core

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution UpSolution Core us-core allows Reflected XSS.This issue affects UpSolution Core: from n/a through 8.44.