Liste Hebdomadaire des CVE Sévères

CVE-2026-40965 - Cloud Foundry UAA EC Private Key Exposure

CVE-2025-53209 - WordPress Masteriyo LMS PRO plugin <= 2.20.0 - Privilege Escalation Vulnerability

CVE-2026-8206 - Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password'

CVE-2026-25879 - Langroid has Prompt to SQL Injection, Leading to RCE

CVE-2026-42684 - WordPress WP Job Portal plugin <= 2.5.1 - SQL Injection vulnerability

CVE-2026-34906 - Server-Side Template Injection (SSTI) in Wirtualna Uczelnia

CVE-2026-10293 - UTT HiPER 1200GW formFireWall strcpy stack-based overflow

CVE-2026-10292 - UTT HiPER 1200GW formTaskEdit strcpy stack-based overflow

CVE-2026-1784 - Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection

CVE-2026-25277 - Buffer Copy Without Checking Size of Input in Secure Processor

CVE-2026-25276 - Improper Validation of Array Index in Secure Processor

CVE-2019-25718 - Dräger Infinity Explorer C700 Privilege Escalation via Kiosk Mode Bypass

CVE-2025-48595 - Qualcomm REX Kernel Integer Overflow Code Execution

CVE-2026-24752 - Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting

CVE-2026-24088 - Missing Authentication for Critical Function in Boot

CVE-2026-49491 - Pixa Bank 2.0 SQL Injection via agence-ajax.php API

CVE-2018-25434 - WP AutoSuggest 0.24 SQL Injection via autosuggest.php

CVE-2018-25433 - Joomla JE Photo Gallery 1.1 SQL Injection via categoryid

CVE-2026-39551 - WordPress Töbel theme <= 1.8.1 - PHP Object Injection vulnerability

CVE-2026-39550 - WordPress Aperitif theme <= 1.6 - PHP Object Injection vulnerability

CVE-2025-58705 - WordPress Crafti theme <= 1.12 - Local File Inclusion vulnerability

CVE-2025-53440 - WordPress Confidant theme <= 1.4 - Local File Inclusion vulnerability

CVE-2026-0097 - Bluetooth LE Pair-Unpaired Device Logic Bypass Privilege Escalation

CVE-2026-0095 - Broadcom Bluetooth Heap Corruption Leading to Privilege Escalation

CVE-2026-0059 - SDP Heap Buffer Overflow Code Execution