Veille CVE

Semaine du 5 octobre au 11 octobre 2026

2 CVE

  1. CVE-2026-42719 9.8 Critique

    Sarah Giles Dynamic User Directory

    Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.

  2. CVE-2026-42720 7.6 Élevée

    Sarah Giles Dynamic User Directory

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4.