Veille CVE

Semaine du 19 octobre au 25 octobre 2026

2 CVE

Critique 2 Élevée 0 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft access » ✕
  1. CVE-2026-110063 10.0 Critique

    Microsoft VM Inspector for Azure Virtual Machines

    Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.

  2. CVE-2026-114119 9.8 Critique

    Best Practice Software Bp Premier

    Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application. Attackers with network access to the database instance can authenticate as sysadmin, bypass application authentication, and execute operating system commands as SYSTEM.