Veille CVE

Mercredi 14 octobre 2026

2 CVE sur 2

Critique 0 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2026-0322 7.2 Élevée Exploitée

    Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Access · Paloaltonetworks pan-os

    A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not impacted by this vulnerability.

  2. CVE-2026-106931 8.5 Élevée Exploitée

    EG Secure Solutions Inc. SiteGuard Server Edition for Apache httpd · EG Secure Solutions Inc. SiteGuard Server Edition for Nginx · EG Secure Solutions Inc. SiteGuard Server Edition for IIS · EG Secure Solutions Inc. SiteGuard Server Edition for Apache httpd on FreeBSD

    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.