Veille CVE

Octobre 2026

7 CVE

Critique 2 Élevée 4 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2026-102764 9.8 Critique Exploitée

    BeyondTrust Remote Support

    The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.

  2. CVE-2026-110936 6.7 Moyenne Exploitée

    Siemens Software Center

    A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

  3. CVE-2026-0322 7.2 Élevée Exploitée

    Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Access · Paloaltonetworks pan-os

    A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not impacted by this vulnerability.

  4. CVE-2026-106931 8.5 Élevée Exploitée

    EG Secure Solutions Inc. SiteGuard Server Edition for Apache httpd · EG Secure Solutions Inc. SiteGuard Server Edition for Nginx · EG Secure Solutions Inc. SiteGuard Server Edition for IIS · EG Secure Solutions Inc. SiteGuard Server Edition for Apache httpd on FreeBSD

    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.

  5. CVE-2026-96951 8.8 Élevée Exploitée

    Microsoft Outlook.com · Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2

    Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

  6. CVE-2026-105134 10.0 Critique Exploitée

    AhsayCBS · Ahsay cloud backup suite

    A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. Upgrading to version 10.3.4 is able to resolve this issue. Upgrading the affected component is advised.

  7. CVE-2026-105133 7.3 Élevée Exploitée

    AhsayCBS · Ahsay cloud backup suite

    A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 10.3.4 is able to mitigate this issue. It is recommended to upgrade the affected component.