Liste Hebdomadaire des CVE Sévères

CVE-2026-7312 - CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity

CVE-2026-0611 - Spacelabs Healthcare Sentinel 10.5.x < 11.6.0 Unauthenticated RCE via .NET Remoting

CVE-2026-47117 - OpenMed < 1.5.2 Remote Code Execution via PII Model Loading

CVE-2026-7198 - CWE-284: Improper Access Control in web services in Progress Sitefinity

CVE-2026-42074 - OpenClaude: Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input

CVE-2026-42684 - WordPress WP Job Portal plugin <= 2.5.1 - SQL Injection vulnerability

CVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths

CVE-2026-9844 - Vulnerability in navify® Digital Pathology

CVE-2026-7201 - CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity

CVE-2026-7195 - CWE-20: Improper Input Validation in web services in Progress Sitefinity

CVE-2019-25719 - Dräger Infinity M540 VG4.1.1 Spoofing and DoS via Network Message Handling

CVE-2026-7313 - CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity

CVE-2026-10047 - Out-of-bounds write in Napoca real-mode hook handler via guest-controlled SS:SP (VA-13905)

CVE-2026-10046 - Out-of-bounds write in Napoca BIOS INT 0x15 E820 memory map handler (VA-13905)

CVE-2026-49754 - HTTP/2 CONTINUATION flood in Mint client via unbounded header-block accumulation

CVE-2026-48862 - Unbounded conn.streams growth in Mint HTTP/2 client via unenforced PUSH_PROMISE concurrency

CVE-2026-10611 - OTP bypass via plugin-based LDAP authentication in MISP when LDAP mixed authentication is enabled

CVE-2026-39555 - WordPress Askka theme <= 1.3.1 - PHP Object Injection vulnerability

CVE-2026-39553 - WordPress WaveRide theme <= 1.4 - Local File Inclusion vulnerability

CVE-2026-39552 - WordPress Blueprint theme < 1.1.5 - Local File Inclusion vulnerability

CVE-2025-69369 - WordPress Racquet theme <= 1.12.0 - Local File Inclusion vulnerability

CVE-2025-68886 - WordPress Cookiteer theme <= 1.4.8 - Local File Inclusion vulnerability

CVE-2025-58897 - WordPress Fermentio theme <= 1.5.0 - Local File Inclusion vulnerability

CVE-2025-58707 - WordPress Spin theme <= 1.8 - Local File Inclusion vulnerability

CVE-2026-39551 - WordPress Töbel theme <= 1.8.1 - PHP Object Injection vulnerability