[ Advisories · last 30 days ]
ANSSI, France
French advisories (avis) and alerts with linked CVEs and vendor bulletins. CERT-FR advisories and alerts, ANSSI, Licence Ouverte 2.0.
-
CERT-FRCERTFR-2026-AVI-1360
Multiple vulnerabilities in Cisco products Translated from French
Multiple vulnerabilities have been discovered in Cisco products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1363
Multiple vulnerabilities in GitLab Translated from French
Multiple vulnerabilities have been discovered in GitLab. Some of them allow an attacker to cause remote arbitrary code execution, a breach of data confidentiality and a security policy bypass.
-
CERT-FRCERTFR-2026-AVI-1367
Multiple vulnerabilities in Node Translated from French
Multiple vulnerabilities have been discovered in Node.js. Some of them allow an attacker to cause remote arbitrary code execution, a security policy bypass and a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1366
Multiple vulnerabilities in Splunk products Translated from French
Multiple vulnerabilities have been discovered in Splunk products. Some of them allow an attacker to cause arbitrary code execution, a breach of data confidentiality and remote cross-site scripting (XSS).
-
CERT-FRCERTFR-2026-AVI-1364
Multiple vulnerabilities in SolarWinds products Translated from French
Multiple vulnerabilities have been discovered in SolarWinds products. Some of them allow an attacker to cause privilege escalation, server-side request forgery (SSRF) and remote cross-site scripting (XSS).
-
CERT-FRCERTFR-2026-AVI-1361
Vulnerability in Mozilla products Translated from French
A vulnerability has been discovered in Mozilla products. It allows an attacker to cause a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1365
Multiple vulnerabilities in ISC BIND Translated from French
Multiple vulnerabilities have been discovered in ISC BIND. They allow an attacker to cause remote arbitrary code execution and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1352
Multiple vulnerabilities in Oracle PeopleSoft Translated from French
Multiple vulnerabilities have been discovered in Oracle PeopleSoft. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1354
Multiple vulnerabilities in Oracle Virtualization Translated from French
Multiple vulnerabilities have been discovered in Oracle Virtualization. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1351
Multiple vulnerabilities in Oracle MySQL Translated from French
Multiple vulnerabilities have been discovered in Oracle MySQL. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1346
Multiple vulnerabilities in Mozilla products Translated from French
Multiple vulnerabilities have been discovered in Mozilla products. Some of them allow an attacker to cause arbitrary code execution, a breach of data confidentiality and denial of service.
-
CERT-FRCERTFR-2026-AVI-1347
Vulnerability in MongoDB PHP Driver Translated from French
A vulnerability has been discovered in MongoDB PHP Driver. It allows an attacker to cause remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1348
Multiple vulnerabilities in Mattermost Server Translated from French
Multiple vulnerabilities have been discovered in Mattermost Server. They allow an attacker to cause a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1356
Vulnerability in Traefik Translated from French
A vulnerability has been discovered in Traefik. It allows an attacker to cause a breach of data confidentiality and a security policy bypass.
-
CERT-FRCERTFR-2026-AVI-1358
Multiple vulnerabilities in Apache Tomcat Translated from French
Multiple vulnerabilities have been discovered in Apache Tomcat. Some of them allow an attacker to cause a breach of data confidentiality, a security policy bypass and a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1355
Multiple vulnerabilities in Oracle Weblogic Translated from French
Multiple vulnerabilities have been discovered in Oracle Weblogic. They allow an attacker to cause remote denial of service, a breach of data confidentiality and a breach of data integrity.
-
CERT-FRCERTFR-2026-AVI-1345
Multiple vulnerabilities in StormShield products Translated from French
Multiple vulnerabilities have been discovered in StormShield products. Some of them allow an attacker to cause arbitrary code execution, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1359
Multiple vulnerabilities in PHP Translated from French
Multiple vulnerabilities have been discovered in PHP. They allow an attacker to cause remote arbitrary code execution.
-
CERT-FRCERTFR-2026-AVI-1350
Multiple vulnerabilities in Oracle Java SE Translated from French
Multiple vulnerabilities have been discovered in Oracle Java SE. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1353
Multiple vulnerabilities in Oracle Systems Translated from French
Multiple vulnerabilities have been discovered in Oracle Systems. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1357
Multiple vulnerabilities in Google Chrome Translated from French
Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1349
Multiple vulnerabilities in Oracle Database Server Translated from French
Multiple vulnerabilities have been discovered in Oracle Database Server. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-ALE-014
[Update] Multiple vulnerabilities in PHP Translated from French
[Update of 22 October 2026] CERT-FR is aware of proofs of concept for vulnerabilities CVE-2026-109618 and CVE-2026-109619 for specific PHP deployments. [Update of 21 October 2026] The security patches are available on…
-
CERT-FRCERTFR-2026-AVI-1343
Multiple vulnerabilities in Laravel Translated from French
Multiple vulnerabilities have been discovered in Laravel. Some of them allow an attacker to cause remote denial of service, a breach of data integrity and a security policy bypass.
-
CERT-FRCERTFR-2026-AVI-1344
Multiple vulnerabilities in Mattermost Server Translated from French
Multiple vulnerabilities have been discovered in Mattermost Server. They allow an attacker to cause a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1339
Multiple vulnerabilities in Stormshield Network Security Translated from French
Multiple vulnerabilities have been discovered in Stormshield Network Security. Some of them allow an attacker to cause a breach of data integrity, remote cross-site scripting (XSS) and a security policy bypass.
-
CERT-FRCERTFR-2026-AVI-1337
Multiple vulnerabilities in Juniper Networks Session Smart Router Translated from French
Multiple vulnerabilities have been discovered in Juniper Networks Session Smart Router. They allow an attacker to cause a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1338
Vulnerability in Mattermost Server Translated from French
A vulnerability has been discovered in Mattermost Server. It allows an attacker to cause a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1341
Multiple vulnerabilities in F5 products Translated from French
Multiple vulnerabilities have been discovered in F5 products. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1340
Multiple vulnerabilities in Roundcube Webmail Translated from French
Multiple vulnerabilities have been discovered in Roundcube Webmail. Some of them allow an attacker to cause remote arbitrary code execution, server-side request forgery (SSRF) and remote cross-site scripting (XSS).
-
CERT-FRCERTFR-2026-AVI-1342
Multiple vulnerabilities in Microsoft Edge Translated from French
Multiple vulnerabilities have been discovered in Microsoft Edge. They allow an attacker to cause remote arbitrary code execution and a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1332
Multiple vulnerabilities in Microsoft products Translated from French
Multiple vulnerabilities have been discovered in Microsoft products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1330
Multiple vulnerabilities in Traefik Translated from French
Multiple vulnerabilities have been discovered in Traefik. They allow an attacker to cause a breach of data confidentiality and a security policy bypass.
-
CERT-FRCERTFR-2026-AVI-1331
Multiple vulnerabilities in Microsoft Office Translated from French
Multiple vulnerabilities have been discovered in Microsoft Office. They allow an attacker to cause remote arbitrary code execution, a breach of data confidentiality and a security policy bypass.
-
CERT-FRCERTFR-2026-AVI-1329
Multiple vulnerabilities in Google Chrome Translated from French
Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1335
Multiple vulnerabilities in the SUSE Linux kernel Translated from French
Multiple vulnerabilities have been discovered in the SUSE Linux kernel. Some of them allow an attacker to cause privilege escalation, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1333
Multiple vulnerabilities in the Ubuntu Linux kernel Translated from French
Multiple vulnerabilities have been discovered in the Ubuntu Linux kernel. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1327
Multiple vulnerabilities in Moxa AIG-302 Series Translated from French
Multiple vulnerabilities have been discovered in Moxa AIG-302 Series. Some of them allow an attacker to cause a breach of data confidentiality, a breach of data integrity and a security policy bypass.
-
CERT-FRCERTFR-2026-AVI-1336
Multiple vulnerabilities in IBM products Translated from French
Multiple vulnerabilities have been discovered in IBM products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1328
Multiple vulnerabilities in Mattermost products Translated from French
Multiple vulnerabilities have been discovered in Mattermost products. They allow an attacker to cause a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1334
Multiple vulnerabilities in the Red Hat Linux kernel Translated from French
Multiple vulnerabilities have been discovered in the Red Hat Linux kernel. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1326
Multiple vulnerabilities in Palo Alto Networks products Translated from French
Multiple vulnerabilities have been discovered in Palo Alto Networks products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service. Palo Alto…
-
CERT-FRCERTFR-2026-AVI-1317
Multiple vulnerabilities in F5 products Translated from French
Multiple vulnerabilities have been discovered in F5 products. Some of them allow an attacker to cause remote arbitrary code execution, a breach of data confidentiality and a breach of data integrity.
-
CERT-FRCERTFR-2026-AVI-1322
Multiple vulnerabilities in Juniper Networks products Translated from French
Multiple vulnerabilities have been discovered in Juniper Networks products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1323
Vulnerability in Microsoft products Translated from French
A vulnerability has been discovered in Microsoft products. It allows an attacker to cause privilege escalation.
-
CERT-FRCERTFR-2026-AVI-1324
Multiple vulnerabilities in Symfony products Translated from French
Multiple vulnerabilities have been discovered in Symfony products. They allow an attacker to cause remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1318
Multiple vulnerabilities in Moodle Translated from French
Multiple vulnerabilities have been discovered in Moodle. They allow an attacker to cause remote cross-site scripting (XSS) and a security policy bypass.
-
CERT-FRCERTFR-2026-AVI-1321
Multiple vulnerabilities in Drupal Translated from French
Multiple vulnerabilities have been discovered in Drupal. They allow an attacker to cause remote arbitrary code execution and remote cross-site scripting (XSS).
-
CERT-FRCERTFR-2026-AVI-1325
Vulnerability in Cisco AsyncOS Software for Secure Email Gateway Translated from French
A vulnerability has been discovered in Cisco AsyncOS Software for Secure Email Gateway. It allows an attacker to cause remote arbitrary code execution and a breach of data integrity. Cisco reports that vulnerability…
-
CERT-FRCERTFR-2026-AVI-1320
Multiple vulnerabilities in Sonicwall Network Security Manager Translated from French
Multiple vulnerabilities have been discovered in Sonicwall Network Security Manager. They allow an attacker to cause remote arbitrary code execution and a security policy bypass.