Multiples vulnérabilités dans Qnap QNE (02 novembre 2026)
De multiples vulnérabilités ont été découvertes dans Qnap QNE. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance.
Latest
Multiples vulnérabilités dans macmon et NRSW (02 novembre 2026)
De multiples vulnérabilités ont été découvertes dans Belden macmon et NRSW. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance.
Vulnérabilité dans Microsoft Visual Studio (02 novembre 2026)
Une vulnérabilité a été découverte dans Microsoft Visual Studio. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.
Vulnérabilité dans Traefik (02 novembre 2026)
Une vulnérabilité a été découverte dans Traefik. Elle permet à un attaquant de provoquer un déni de service à distance.
Vulnerabilities
Vulnerabilities in Request Tracker and RT for Incident Response software
During its own research, CERT Polska has found 3 XSS vulnerabilities (from CVE-2026-105454 to CVE-2026-105456) in Request Tracker (RT) and RT for Incident Response software (RTIR).
Vulnerabilities
Vulnerabilities in Płatnik software
CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-110970 to CVE-2026-110972) found in Płatnik software.
Vulnerabilities
Vulnerabilities in ARKETEAM Protectel software
CERT Polska has received a report about 5 vulnerabilities (from CVE-2025-68391 to CVE-2025-68395) found in ARKETEAM Protectel software.
Vulnerabilities
Vulnerabilities in Zimbra Collaboration software
During its own research, CERT Polska has found 2 XSS vulnerabilities (CVE-2026-66911 and CVE-2026-66912) in Zimbra Collaboration software.
Belgium's tax agency confirms cyberattack, pulls services offline
Officials confirm this week’s tax deadlines extended to November as a result
Vulnerabilities
Vulnerabilities in Szafir software
CERT Polska has received a report about 3 vulnerabilities (CVE-2026-93570, CVE-2026-93571 and CVE-2026-106036) found in Szafir software.
Vulnerabilities
Cyber Vulnerabilities Besiege Italy, Absent Clear Cause
Researchers can't quite explain why cyber threats look so different in Italy compared with everywhere else.
Vulnerabilities
Vulnerability in Wing FTP Server software
Path Traversal vulnerability (CVE-2026-105420) has been found in Wing FTP Server software.
Austrian doctors to swap emails and phone calls for encrypted messages
Austria is following Germany’s lead by introducing a sovereign encrypted messaging service for healthcare professionals
Vulnerabilities
Vulnerability in KGS Software tia Viewer software
Stored Cross-Site Scripting vulnerability (CVE-2026-105987) has been found in KGS Software tia Viewer software.
Data Breaches
Attack on email hosting provider for German far right party AfD exposed 345k accounts
Alternative für Deutschland swats away scandals as reporters swarm leaked email tranche
Vulnerabilities
Vulnerabilities in twofactor_gauthenticator plugin for Roundcube
CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-107145 to CVE-2026-107147) found in twofactor_gauthenticator plugin for Roundcube.
Vulnerabilities
EU makes progress towards PHP patching, UK lags behind
Five days into the PHP2Shell incident, and patch rates are creeping upwards, but the majority of publicly visible PHP hosts remain exposed
Vulnerabilities
Vulnerabilities in boneIO products
CERT Polska has received a report about 11 vulnerabilities (from CVE-2026-77052 to CVE-2026-77062) found in boneIO products.
Chimeraz revendique des fuites visant trois partis français, dont celui du groupe présidentiel
Chimeraz revendique des données annoncées comme volées aux partis politiques de Renaissance, LFI et du PCF.
DeepSeek banni des agences fédérales US
DeepSeek banni des agences fédérales civiles américaines : portée, calendrier et risques pour les données.
Point Vision : des données de patients dérobées
Cyberattaque chez Point Vision : données de patients volées, exposition possible des motifs de rendez-vous.
Vulnerabilities
2026-018: Critical Vulnerabilities in PHP
On 20 October 2026, the PHP project announced an upcoming security release addressing two critical vulnerabilities in PHP. Public reports indicated that these vulnerabilities could lead to remote code execution (RCE)…
Technostress : une faille pour l’ingénierie sociale
Technostress et ingénierie sociale : comment la surcharge numérique peut fragiliser la vigilance face aux manipulations.
Vulnerabilities
Vulnerabilities in CGM CLININET software
CERT Polska has received a report about 11 vulnerabilities (CVE-2025-30043 and from CVE-2025-30045 to CVE-2025-30047, from CVE-2025-30049 to CVE-2025-30054 and CVE-2025-58403) found in CGM CLININET software.
Piratage de la FFTir : la Fédération confirme le vol
FFTir : la Fédération confirme une cyberattaque, le vol de 64 000 photos et de milliers de documents personnels.
Fraude bancaire : deux mails pour installer la peur
Alerte ZATAZ : deux faux mails bancaires, des milliers d'euros en jeu et une fraude téléphonique décryptée.
Vulnerabilities
Vulnerability in MTW CleanShot X software
Deserialization of Untrusted Data vulnerability (CVE-2026-16477) has been found in MTW CleanShot X software.
Vulnerabilities
2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions
On 21 October 2026, GitLab published a security advisory addressing several vulnerabilities among which a critical flaw that could allow an unauthenticated user to execute arbitrary code on a GitLab server. CERT-EU…
Vulnerabilities
Flaw in PHP computer language leads to shutdown of websites around world
Precautionary takedowns come as experts say bad actors could exploit vulnerability in language used by 70% of sitesWebsites around the globe have gone dark after a serious vulnerability was found in a computer language…
Cyberattack on French supermarkets tells us more about food security than AI safety
Experts know little about the motives of the hackers who remotely turned up the temperature on French supermarket refrigerators. Their methods, however, are far from science fiction.