Veille CVE

Vendredi 9 octobre 2026

4 CVE

Critique 2 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « electron » ✕
  1. CVE-2026-108160 7.5 Élevée

    iflytek astron-rpa

    AstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers to deliver malicious updates by abusing the desktop client's auto-update mechanism. Attackers positioned between the client and server can serve a malicious update manifest and NSIS installer, which electron-updater installs without signature verification, executing code as the desktop user.

  2. CVE-2026-86405 9.8 Critique

    Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module

    Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects PrestaShop Virtual POS Module: from 26.8.1 before 26.9.1.

  3. CVE-2026-8374 8.5 Élevée

    SwitchBot Lock Series Lock · SwitchBot Lock Series Keypad · SwitchBot Lock Series App

    Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol.

  4. CVE-2026-85531 9.8 Critique

    Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module

    Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1.