[ Advisories · last 30 days ]
ANSSI, France
French advisories (avis) and alerts with linked CVEs and vendor bulletins. CERT-FR advisories and alerts, ANSSI, Licence Ouverte 2.0.
-
CERT-FRCERTFR-2026-AVI-1278
Multiple vulnerabilities in Veeam products Translated from French
Multiple vulnerabilities have been discovered in Veeam products. They allow an attacker to cause remote arbitrary code execution, a breach of data confidentiality and remote cross-site scripting (XSS).
-
CERT-FRCERTFR-2026-AVI-1276
Multiple vulnerabilities in Elastic products Translated from French
Multiple vulnerabilities have been discovered in Elastic products. Some of them allow an attacker to cause privilege escalation, a breach of data confidentiality and a security policy bypass.
-
CERT-FRCERTFR-2026-AVI-1275
Multiple vulnerabilities in Sonicwall Secure Mobile Access Translated from French
Multiple vulnerabilities have been discovered in Sonicwall Secure Mobile Access. Some of them allow an attacker to cause remote arbitrary code execution, server-side request forgery (SSRF) and remote cross-site…
-
CERT-FRCERTFR-2026-AVI-1264
Vulnerability in Atlassian products Translated from French
A vulnerability has been discovered in Atlassian products. It allows an attacker to cause a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1265
Multiple vulnerabilities in Google Android Translated from French
Multiple vulnerabilities have been discovered in Google Android. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1266
Vulnerability in Microsoft Office Translated from French
A vulnerability has been discovered in Microsoft Office. It allows an attacker to cause remote arbitrary code execution.
-
CERT-FRCERTFR-2026-AVI-1261
Multiple vulnerabilities in Zabbix Translated from French
Multiple vulnerabilities have been discovered in Zabbix. Some of them allow an attacker to cause remote denial of service, a breach of data confidentiality and a breach of data integrity.
-
CERT-FRCERTFR-2026-AVI-1260
Multiple vulnerabilities in OpenOffice Translated from French
Multiple vulnerabilities have been discovered in OpenOffice. They allow an attacker to cause remote arbitrary code execution.
-
CERT-FRCERTFR-2026-AVI-1259
Multiple vulnerabilities in Google Chrome Translated from French
Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1262
Vulnerability in GitLab Translated from French
A vulnerability has been discovered in GitLab. It allows an attacker to cause remote arbitrary code execution.
-
CERT-FRCERTFR-2026-AVI-1258
Vulnerability in Microsoft Exchange Server Translated from French
A vulnerability has been discovered in Microsoft Exchange Server. It allows an attacker to cause privilege escalation.
-
CERT-FRCERTFR-2026-AVI-1263
Vulnerability in Citrix NetScaler ADC and Gateway Translated from French
A vulnerability has been discovered in Citrix NetScaler ADC and Gateway. It allows an attacker to cause remote denial of service. CISA reports that vulnerability CVE-2026-88779 is being actively exploited.
-
CERT-FRCERTFR-2026-AVI-1248
Multiple vulnerabilities in Apache HTTP Server Translated from French
Multiple vulnerabilities have been discovered in Apache HTTP Server. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1249
Multiple vulnerabilities in VMware products Translated from French
Multiple vulnerabilities have been discovered in VMware products. They allow an attacker to cause a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1253
Multiple vulnerabilities in the Debian Linux kernel Translated from French
Multiple vulnerabilities have been discovered in the Debian Linux kernel. Some of them allow an attacker to cause privilege escalation, a breach of data confidentiality and denial of service.
-
CERT-FRCERTFR-2026-AVI-1254
Multiple vulnerabilities in the Red Hat Linux kernel Translated from French
Multiple vulnerabilities have been discovered in the Red Hat Linux kernel. Some of them allow an attacker to cause arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1255
Multiple vulnerabilities in the SUSE Linux kernel Translated from French
Multiple vulnerabilities have been discovered in the SUSE Linux kernel. Some of them allow an attacker to cause arbitrary code execution, a breach of data confidentiality and a breach of data integrity.
-
CERT-FRCERTFR-2026-AVI-1250
Multiple vulnerabilities in Moxa products Translated from French
Multiple vulnerabilities have been discovered in Moxa products. They allow an attacker to cause a breach of data confidentiality, a breach of data integrity and a security policy bypass.
-
CERT-FRCERTFR-2026-AVI-1257
Vulnerability in Fortinet FortiMail Translated from French
A vulnerability has been discovered in Fortinet FortiMail. It allows an attacker to cause remote arbitrary code execution. Fortinet reports that vulnerability CVE-2026-104286 is being actively exploited. Indicators of…
-
CERT-FRCERTFR-2026-AVI-1252
Multiple vulnerabilities in the Ubuntu Linux kernel Translated from French
Multiple vulnerabilities have been discovered in the Ubuntu Linux kernel. Some of them allow an attacker to cause arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1251
Multiple vulnerabilities in Microsoft Edge Translated from French
Multiple vulnerabilities have been discovered in Microsoft Edge. They allow an attacker to cause a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1256
Multiple vulnerabilities in IBM products Translated from French
Multiple vulnerabilities have been discovered in IBM products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1247
Multiple vulnerabilities in Tenable Nessus Translated from French
Multiple vulnerabilities have been discovered in Tenable Nessus. Some of them allow an attacker to cause remote denial of service, a breach of data confidentiality and a breach of data integrity.
-
CERT-FRCERTFR-2026-AVI-1243
Multiple vulnerabilities in CPython Translated from French
Multiple vulnerabilities have been discovered in CPython. They allow an attacker to cause remote denial of service and a security policy bypass.
-
CERT-FRCERTFR-2026-AVI-1244
Multiple vulnerabilities in Mozilla Thunderbird Translated from French
Multiple vulnerabilities have been discovered in Mozilla Thunderbird. Some of them allow an attacker to cause privilege escalation, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1245
Multiple vulnerabilities in Redmine Translated from French
Multiple vulnerabilities have been discovered in Redmine. They allow an attacker to cause a breach of data confidentiality and remote cross-site scripting (XSS).
-
CERT-FRCERTFR-2026-AVI-1246
Vulnerability in Cisco Catalyst SD-WAN Translated from French
A vulnerability has been discovered in Cisco Catalyst SD-WAN. It allows an attacker to cause a security policy bypass. Cisco reports that vulnerability CVE-2026-76504 is being actively exploited.
-
CERT-FRCERTFR-2026-AVI-1239
Vulnerability in CPython Translated from French
A vulnerability has been discovered in CPython. It allows an attacker to cause a breach of data integrity.
-
CERT-FRCERTFR-2026-AVI-1238
Multiple vulnerabilities in HPE Aruba Networking Instant On Translated from French
Multiple vulnerabilities have been discovered in HPE Aruba Networking Instant On. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1240
Multiple vulnerabilities in Mozilla products Translated from French
Multiple vulnerabilities have been discovered in Mozilla products. Some of them allow an attacker to cause privilege escalation, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1241
Multiple vulnerabilities in OpenSSL Translated from French
Multiple vulnerabilities have been discovered in OpenSSL. Some of them allow an attacker to cause remote denial of service, a breach of data confidentiality and a breach of data integrity.
-
CERT-FRCERTFR-2026-AVI-1237
Multiple vulnerabilities in Google Chrome Translated from French
Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1242
Multiple vulnerabilities in GitLab Translated from French
Multiple vulnerabilities have been discovered in GitLab. They allow an attacker to cause a breach of data confidentiality and a security policy bypass. Gitlab reports that vulnerability CVE-2026-85706 is being actively…
-
CERT-FRCERTFR-2026-AVI-1236
Vulnerability in Apple products Translated from French
A vulnerability has been discovered in Apple products. It allows an attacker to cause remote arbitrary code execution. Apple reports that vulnerability CVE-2026-86950 is being actively exploited.
-
CERT-FRCERTFR-2026-AVI-1235
Multiple vulnerabilities in Citrix NetScaler ADC and Gateway Translated from French
Multiple vulnerabilities have been discovered in Citrix NetScaler ADC and Gateway. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a security policy bypass. Citrix…
-
CERT-FRCERTFR-2026-AVI-1234
Multiple vulnerabilities in MongoDB Translated from French
Multiple vulnerabilities have been discovered in MongoDB. They allow an attacker to cause a breach of data integrity, a security policy bypass and a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-ALE-011
Multiple vulnerabilities in Citrix NetScaler ADC and Gateway Translated from French
[Update of 5 October 2026] On 4 October 2026, Citrix published an advisory about a new vulnerability (CVE-2026-88779) allowing remote denial of service. CISA reports that this vulnerability is being actively exploited…
-
CERT-FRCERTFR-2026-AVI-1230
Multiple vulnerabilities in the Red Hat Linux kernel Translated from French
Multiple vulnerabilities have been discovered in the Red Hat Linux kernel. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1229
Multiple vulnerabilities in the Ubuntu Linux kernel Translated from French
Multiple vulnerabilities have been discovered in the Ubuntu Linux kernel. Some of them allow an attacker to cause privilege escalation, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1233
Multiple vulnerabilities in IBM products Translated from French
Multiple vulnerabilities have been discovered in IBM products. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1232
Multiple vulnerabilities in the Debian LTS Linux kernel Translated from French
Multiple vulnerabilities have been discovered in the Debian LTS Linux kernel. Some of them allow an attacker to cause privilege escalation, a breach of data confidentiality and denial of service.
-
CERT-FRCERTFR-2026-AVI-1231
Multiple vulnerabilities in the SUSE Linux kernel Translated from French
Multiple vulnerabilities have been discovered in the SUSE Linux kernel. Some of them allow an attacker to cause arbitrary code execution, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1228
Multiple vulnerabilities in Elastic products Translated from French
Multiple vulnerabilities have been discovered in Elastic products. Some of them allow an attacker to cause privilege escalation, remote denial of service and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1226
Multiple vulnerabilities in Zabbix Agent Translated from French
Multiple vulnerabilities have been discovered in Zabbix Agent. They allow an attacker to cause a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1224
Vulnerability in Microsoft Office Translated from French
A vulnerability has been discovered in Microsoft Office. It allows an attacker to cause remote arbitrary code execution.
-
CERT-FRCERTFR-2026-AVI-1222
Multiple vulnerabilities in LibreNMS Translated from French
Multiple vulnerabilities have been discovered in LibreNMS. Some of them allow an attacker to cause privilege escalation, a breach of data confidentiality and a breach of data integrity.
-
CERT-FRCERTFR-2026-AVI-1221
Multiple vulnerabilities in Wireshark Translated from French
Multiple vulnerabilities have been discovered in Wireshark. They allow an attacker to cause remote arbitrary code execution and remote denial of service.
-
CERT-FRCERTFR-2026-AVI-1227
Multiple vulnerabilities in PHP Translated from French
Multiple vulnerabilities have been discovered in PHP. Some of them allow an attacker to cause remote denial of service, a breach of data confidentiality and a breach of data integrity.
-
CERT-FRCERTFR-2026-AVI-1225
Multiple vulnerabilities in GitLab Translated from French
Multiple vulnerabilities have been discovered in GitLab. Some of them allow an attacker to cause arbitrary code execution, a breach of data confidentiality and remote cross-site scripting (XSS).
-
CERT-FRCERTFR-2026-AVI-1223
Multiple vulnerabilities in Papercut Translated from French
Multiple vulnerabilities have been discovered in Papercut. Some of them allow an attacker to cause remote arbitrary code execution, a breach of data confidentiality and remote cross-site scripting (XSS).