Advisories from national CERTs.

Multiple vulnerabilities in Oracle Virtualization Translated from French

Multiple vulnerabilities have been discovered in Oracle Virtualization. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.

Multiple vulnerabilities in Oracle MySQL Translated from French

Multiple vulnerabilities have been discovered in Oracle MySQL. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.

Multiple vulnerabilities in Mozilla products Translated from French

Multiple vulnerabilities have been discovered in Mozilla products. Some of them allow an attacker to cause arbitrary code execution, a breach of data confidentiality and denial of service.

Vulnerability in MongoDB PHP Driver Translated from French

A vulnerability has been discovered in MongoDB PHP Driver. It allows an attacker to cause remote denial of service.

Multiple vulnerabilities in Mattermost Server Translated from French

Multiple vulnerabilities have been discovered in Mattermost Server. They allow an attacker to cause a security problem not specified by the vendor.

Vulnerability in Traefik Translated from French

A vulnerability has been discovered in Traefik. It allows an attacker to cause a breach of data confidentiality and a security policy bypass.

Multiple vulnerabilities in Apache Tomcat Translated from French

Multiple vulnerabilities have been discovered in Apache Tomcat. Some of them allow an attacker to cause a breach of data confidentiality, a security policy bypass and a security problem not specified by the vendor.

Multiple vulnerabilities in Oracle Weblogic Translated from French

Multiple vulnerabilities have been discovered in Oracle Weblogic. They allow an attacker to cause remote denial of service, a breach of data confidentiality and a breach of data integrity.

Multiple vulnerabilities in StormShield products Translated from French

Multiple vulnerabilities have been discovered in StormShield products. Some of them allow an attacker to cause arbitrary code execution, remote denial of service and a breach of data confidentiality.

Multiple vulnerabilities in PHP Translated from French

Multiple vulnerabilities have been discovered in PHP. They allow an attacker to cause remote arbitrary code execution.

Multiple vulnerabilities in Oracle Java SE Translated from French

Multiple vulnerabilities have been discovered in Oracle Java SE. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.

Multiple vulnerabilities in Oracle Systems Translated from French

Multiple vulnerabilities have been discovered in Oracle Systems. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.

Multiple vulnerabilities in Google Chrome Translated from French

Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.

Multiple vulnerabilities in Oracle Database Server Translated from French

Multiple vulnerabilities have been discovered in Oracle Database Server. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.

[Update] Multiple vulnerabilities in PHP Translated from French

[Update of 22 October 2026] CERT-FR is aware of proofs of concept for vulnerabilities CVE-2026-109618 and CVE-2026-109619 for specific PHP deployments. [Update of 21 October 2026] The security patches are available on…

Oracle Java SE: Multiple vulnerabilities Translated from German

Mozilla products (Thunderbird, Firefox ESR and Firefox): Multiple vulnerabilities Translated from German

PHP: Multiple vulnerabilities allow code execution Translated from German

Unbound: Multiple vulnerabilities Translated from German

Checkmk: Vulnerability allows privilege escalation Translated from German

Oracle TimesTen In-Memory Database: Multiple vulnerabilities Translated from German

Oracle Commerce: Multiple vulnerabilities Translated from German

Oracle Systems: Multiple vulnerabilities Translated from German

Oracle Communications: Multiple vulnerabilities Translated from German

Oracle Construction and Engineering: Multiple vulnerabilities Translated from German

Oracle E-Business Suite: Multiple vulnerabilities Translated from German

Oracle Enterprise Manager: Multiple vulnerabilities Translated from German

Oracle Financial Services Applications: Multiple vulnerabilities Translated from German

Oracle Supply Chain: Multiple vulnerabilities Translated from German

Oracle Siebel CRM: Multiple vulnerabilities Translated from German

Oracle Retail Applications: Multiple vulnerabilities Translated from German

Oracle PeopleSoft: Multiple vulnerabilities Translated from German

Oracle MySQL: Multiple vulnerabilities Translated from German

Oracle JD Edwards: Multiple vulnerabilities Translated from German

Oracle Fusion Middleware: Multiple vulnerabilities Translated from German

PowerDNS Recursor: Multiple vulnerabilities Translated from German

vllm: Multiple vulnerabilities Translated from German

Snipe-IT: Vulnerability allows information disclosure Translated from German

IBM Sterling Connect:Direct: Vulnerability allows code execution Translated from German

FreeBSD Project (caroot): Vulnerability allows bypassing security measures Translated from German

Grafana: Vulnerability allows file manipulation Translated from German

DrayTek Vigor: Multiple vulnerabilities allow code execution Translated from German

FreeRDP: Multiple vulnerabilities Translated from German

Google Chrome: Multiple vulnerabilities Translated from German

Apache Tomcat: Multiple vulnerabilities Translated from German

Red Hat Advanced Cluster Security for Kubernetes (RHACS): Vulnerability allows bypassing security measures Translated from German

Oracle Virtualization: Multiple vulnerabilities Translated from German

Oracle Utilities Applications: Multiple vulnerabilities Translated from German

Oracle Database Server: Multiple vulnerabilities Translated from German

Oracle NoSQL Database: Vulnerability threatens availability Translated from German