Liste Hebdomadaire des CVE Sévères

CVE-2026-1114 - Improper Access Control via Weak JWT Token in parisneo/lollms

CVE-2026-0740 - Ninja Forms - File Upload <= 3.3.26 - Unauthenticated Arbitrary File Upload

CVE-2026-35471 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs

CVE-2026-35393 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs POST multipart upload

CVE-2026-35392 - goshs has an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs PUT Upload

CVE-2026-35459 - pyLoad has SSRF fix bypass via HTTP redirect

CVE-2026-5687 - Tenda CX12L NatStaticSetting fromNatStaticSetting stack-based overflow

CVE-2026-5686 - Tenda CX12L RouteStatic fromRouteStatic stack-based overflow

CVE-2026-5685 - Tenda CX12L addressNat fromAddressNat stack-based overflow

CVE-2026-5465 - Amelia <= 2.1.3 - Insecure Direct Object Reference to Authenticated (Employee+) Privilege Escalation via 'externalId' Parameter

CVE-2025-65115 - Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM

CVE-2026-5709 - AWS Research and Engineering Studio (RES) FileBrowser Command Injection

CVE-2026-5708 - Improper Control of User-Modifiable Attributes in RES CreateSession API

CVE-2026-5707 - Command Injection via Virtual Desktop Session Name in AWS Research and Engineering Studio (RES)

CVE-2026-35395 - WeGIA has a SQL Injection in DespachoDAO.php via id_memorando parameter

CVE-2026-35454 - Code Extension Marketplace has a Zip Slip Path Traversal

CVE-2026-35408 - Directus is Missing Cross-Origin Opener Policy

CVE-2026-35391 - Bulwark Webmail getClientIP() trusted client-controlled X-Forwarded-For value, enabling rate limit bypass and audit log forgery

CVE-2026-35389 - Bulwark Webmail S/MIME signature verification accepted self-signed certificates

CVE-2026-35213 - Regular Expression Denial of Service (ReDoS) in @hapi/content HTTP header parsing

CVE-2026-35185 - HAX CMS's public /server-status endpoint exposes authentication tokens, user activity, and client IP addresses

CVE-2026-5684 - Tenda CX12L webExcptypemanFilter fromwebExcptypemanFilter stack-based overflow

CVE-2026-35399 - WeGIA has Stored XSS in backup file names

CVE-2026-35394 - Mobile Next has Arbitrary Android Intent Execution via mobile_open_url

CVE-2026-35442 - Directus: Authenticated Users Can Extract Concealed Fields via Aggregate Queries