[ Advisories · last 30 days ]
ANSSI, France
French advisories (avis) and alerts with linked CVEs and vendor bulletins. CERT-FR advisories and alerts, ANSSI, Licence Ouverte 2.0.
-
CERT-FRCERTFR-2026-AVI-1319
Vulnerability in PostgreSQL psqlODBC Translated from French
A vulnerability has been discovered in PostgreSQL psqlODBC. It allows an attacker to cause remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1301
Multiple vulnerabilities in Adobe products Translated from French
Multiple vulnerabilities have been discovered in Adobe products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1302
Multiple vulnerabilities in Xen Translated from French
Multiple vulnerabilities have been discovered in Xen. Some of them allow an attacker to cause arbitrary code execution, privilege escalation and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1303
Vulnerability in Symantec Endpoint Detection and Response Translated from French
A vulnerability has been discovered in Symantec Endpoint Detection and Response. It allows an attacker to cause remote cross-site scripting (XSS).
-
CERT-FRCERTFR-2026-AVI-1313
Multiple vulnerabilities in Microsoft .Net Translated from French
Multiple vulnerabilities have been discovered in Microsoft .Net. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1305
Multiple vulnerabilities in Mozilla products Translated from French
Multiple vulnerabilities have been discovered in Mozilla products. Some of them allow an attacker to cause privilege escalation, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1307
Multiple vulnerabilities in Curl Translated from French
Multiple vulnerabilities have been discovered in Curl. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1312
Multiple vulnerabilities in Microsoft Office Translated from French
Multiple vulnerabilities have been discovered in Microsoft Office. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality. Microsoft reports…
-
CERT-FRCERTFR-2026-AVI-1308
Multiple vulnerabilities in Google Chrome Translated from French
Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1309
Vulnerability in Zabbix Translated from French
A vulnerability has been discovered in Zabbix. It allows an attacker to cause a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1311
Multiple vulnerabilities in Ivanti products Translated from French
Multiple vulnerabilities have been discovered in Ivanti products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality. Ivanti reports that…
-
CERT-FRCERTFR-2026-AVI-1310
Multiple vulnerabilities in Citrix products Translated from French
Multiple vulnerabilities have been discovered in Citrix products. Some of them allow an attacker to cause arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1315
Multiple vulnerabilities in Microsoft Azure Translated from French
Multiple vulnerabilities have been discovered in Microsoft Azure. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1316
Multiple vulnerabilities in Microsoft products Translated from French
Multiple vulnerabilities have been discovered in Microsoft products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1304
Multiple vulnerabilities in MongoDB Server Translated from French
Multiple vulnerabilities have been discovered in MongoDB Server. They allow an attacker to cause remote arbitrary code execution and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1314
Multiple vulnerabilities in Microsoft Windows Translated from French
Multiple vulnerabilities have been discovered in Microsoft Windows. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service. Microsoft reports that…
-
CERT-FRCERTFR-2026-AVI-1306
Multiple vulnerabilities in Fortinet products Translated from French
Multiple vulnerabilities have been discovered in Fortinet products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-ALE-013
Vulnerability in Ivanti Connect Secure (ICS) Translated from French
A vulnerability has been discovered in Ivanti Connect Secure (ICS). It allows an attacker to cause remote arbitrary code execution, privilege escalation and a security policy bypass. Ivanti reports that vulnerability…
-
CERT-FRCERTFR-2026-AVI-1295
Vulnerability in NetApp StorageGRID Translated from French
A vulnerability has been discovered in NetApp StorageGRID. It allows an attacker to cause remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1296
Vulnerability in Typo3 Translated from French
A vulnerability has been discovered in Typo3. It allows an attacker to cause a security policy bypass.
-
CERT-FRCERTFR-2026-AVI-1297
Multiple vulnerabilities in Mozilla Firefox Translated from French
Multiple vulnerabilities have been discovered in Mozilla Firefox. They allow an attacker to cause remote cross-site scripting (XSS) and a security policy bypass.
-
CERT-FRCERTFR-2026-AVI-1298
Multiple vulnerabilities in Siemens products Translated from French
Multiple vulnerabilities have been discovered in Siemens products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1299
Vulnerability in Schneider Electric Harmony Translated from French
A vulnerability has been discovered in Schneider Electric Harmony. It allows an attacker to cause a security policy bypass.
-
CERT-FRCERTFR-2026-AVI-1300
Multiple vulnerabilities in SAP products Translated from French
Multiple vulnerabilities have been discovered in SAP products. Some of them allow an attacker to cause remote arbitrary code execution, a breach of data confidentiality and SQL injection (SQLi).
-
CERT-FRCERTFR-2026-AVI-1293
Multiple vulnerabilities in MongoDB Translated from French
Multiple vulnerabilities have been discovered in MongoDB products. They allow an attacker to cause remote denial of service and a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1294
Multiple vulnerabilities in GitLab Translated from French
Multiple vulnerabilities have been discovered in GitLab. Some of them allow an attacker to cause remote arbitrary code execution, a breach of data confidentiality and a breach of data integrity.
-
CERT-FRCERTFR-2026-AVI-1292
Multiple vulnerabilities in PostgreSQL JDBC Translated from French
Multiple vulnerabilities have been discovered in PostgreSQL JDBC. They allow an attacker to cause a breach of data confidentiality and a security policy bypass.
-
CERT-FRCERTFR-2026-ALE-012
Security incident targeting remote controllers of refrigeration installations Translated from French
CERT-FR is aware of many compromises of remote controllers for refrigeration installations: the Danfoss AK-SM and AK-SC series, as well as Copeland xweb and Dixell xweb. In general, exposing a management interface on…
-
CERT-FRCERTFR-2026-AVI-1289
Multiple vulnerabilities in the Debian LTS Linux kernel Translated from French
Multiple vulnerabilities have been discovered in the Debian LTS Linux kernel. Some of them allow an attacker to cause privilege escalation, a breach of data confidentiality and denial of service.
-
CERT-FRCERTFR-2026-AVI-1291
Multiple vulnerabilities in IBM products Translated from French
Multiple vulnerabilities have been discovered in IBM products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1284
Vulnerability in Tenable products Translated from French
A vulnerability has been discovered in Tenable products. It allows an attacker to cause remote arbitrary code execution. The vendor states that a component must be reinstalled after the update.
-
CERT-FRCERTFR-2026-AVI-1286
Multiple vulnerabilities in the Ubuntu Linux kernel Translated from French
Multiple vulnerabilities have been discovered in the Ubuntu Linux kernel. Some of them allow an attacker to cause privilege escalation, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1287
Multiple vulnerabilities in the Red Hat Linux kernel Translated from French
Multiple vulnerabilities have been discovered in the Red Hat Linux kernel. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1283
Multiple vulnerabilities in Nextcloud products Translated from French
Multiple vulnerabilities have been discovered in Nextcloud products. Some of them allow an attacker to cause privilege escalation, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1290
Multiple vulnerabilities in Apache Struts Translated from French
Multiple vulnerabilities have been discovered in Apache Struts. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality. The vendor states…
-
CERT-FRCERTFR-2026-AVI-1285
Vulnerability in Citrix NetScaler ADC and Gateway Translated from French
A vulnerability has been discovered in Citrix NetScaler ADC and Gateway. It allows an attacker to cause remote arbitrary code execution and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1288
Multiple vulnerabilities in the SUSE Linux kernel Translated from French
Multiple vulnerabilities have been discovered in the SUSE Linux kernel. Some of them allow an attacker to cause arbitrary code execution, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1280
Vulnerability in Ceph Translated from French
A vulnerability has been discovered in Ceph. It allows an attacker to cause remote arbitrary code execution and privilege escalation.
-
CERT-FRCERTFR-2026-AVI-1281
Multiple vulnerabilities in Splunk products Translated from French
Multiple vulnerabilities have been discovered in Splunk products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1282
Multiple vulnerabilities in Cisco products Translated from French
Multiple vulnerabilities have been discovered in Cisco products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1274
Multiple vulnerabilities in Traefik Translated from French
Multiple vulnerabilities have been discovered in Traefik. Some of them allow an attacker to cause remote denial of service, a breach of data confidentiality and a breach of data integrity.
-
CERT-FRCERTFR-2026-AVI-1270
Multiple vulnerabilities in Google Pixel Translated from French
Multiple vulnerabilities have been discovered in Google Pixel. They allow an attacker to cause privilege escalation and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1272
Vulnerability in Mozilla products Translated from French
A vulnerability has been discovered in Mozilla products. It allows an attacker to cause a security policy bypass.
-
CERT-FRCERTFR-2026-AVI-1273
Multiple vulnerabilities in WordPress Translated from French
Multiple vulnerabilities have been discovered in WordPress. Some of them allow an attacker to cause remote denial of service, a breach of data confidentiality and a breach of data integrity.
-
CERT-FRCERTFR-2026-AVI-1279
Multiple vulnerabilities in SPIP Translated from French
Multiple vulnerabilities have been discovered in SPIP. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1267
Multiple vulnerabilities in Microsoft Edge Translated from French
Multiple vulnerabilities have been discovered in Microsoft Edge. They allow an attacker to cause a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1271
Multiple vulnerabilities in OpenSSH Translated from French
Multiple vulnerabilities have been discovered in OpenSSH. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1269
Multiple vulnerabilities in GLPI Translated from French
Multiple vulnerabilities have been discovered in GLPI. It allows an attacker to cause a breach of data confidentiality, remote cross-site scripting (XSS) and a security policy bypass.
-
CERT-FRCERTFR-2026-AVI-1268
Multiple vulnerabilities in Google Chrome Translated from French
Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1277
Multiple vulnerabilities in HPE Aruba Networking products Translated from French
Multiple vulnerabilities have been discovered in HPE Aruba Networking products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.