Vulnérabilités citées
Les CVE mentionnées dans l’actualité, avec leur gravité. Un score élevé indique une faille sérieuse, mais pas forcément exploitée.
| CVE | Score | Description | Articles |
|---|---|---|---|
| CVE-2026-89205 | 5.3 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to… | 1 |
| CVE-2026-89208 | 6.9 | A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (Al… | 1 |
| CVE-2026-92450 | 8.7 | The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static string with… | 1 |
| CVE-2026-96616 | 8.3 | Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making the… | 1 |
| CVE-2026-108398 | 8.8 | Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally. | 1 |
| CVE-2026-96951 Exploitée activement |
8.8 | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a n… | 1 |
| CVE-2026-35273 Exploitée activement |
9.8 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are … | 2 |
| CVE-2023-45208 | 8.8 | A command injection in the parsing_xml_stasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allows attackers (within range of … | 1 |
This product uses data from the NVD API but is not endorsed or certified by the NVD.