FACTUALRISK Cyber Intelligence
Mise à jour : 14 Oct 2026 · 12:02
← Accueil
🗞 Briefing
💥 Menaces▾
🛡 Vulnérabilités▾
📋 Conformité▾
📚 Guides🛰 Agent Vigie
← Retour FactualRisk
Niveau CRITIQUE · 14 October 2026
🔴 32 vulnérabilités critiques — action immédiate requise
Mis à jour le 14 October 2026 · 12:02 UTC · 32 P0 · 16 P1 · 31 KEV exploités · 5 ransomware · 36 ITW · 210 vulnérabilités analysées · Voir le tableau complet →
?
P0 Critiques
Action immédiate
?
P1 Élevés
Sous 72h
?
KEV actifs
Exploités CISA ↗
?
Ransomware
?
Analysés
210
Findings total
💥 Incidents & Attaques récentes Tout voir →
💥
💥
💥
INFO Autre · SecurityWeek · 14 October 2026
Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products
⚡
💥
INFO Autre · SecurityWeek · 14 October 2026
SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities
📊 Top 5 types d'attaques
💥 Autre 25
⚡ Zero-Day 6
🎣 Phishing 4
🔓 Data Breach 2
🦠 Ransomware 1
📰 Actualités cyber du jour Tout voir →
The Hacker News 14 Oct 2026
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted vi
SecurityWeek 14 Oct 2026
Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise
Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements. The post Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefo
SecurityWeek 14 Oct 2026
Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products
Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks. The post Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their
SecurityWeek 14 Oct 2026
Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild. The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Win
SecurityWeek 14 Oct 2026
SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities
The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system. The post SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities appeared first o
The Hacker News 14 Oct 2026
Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave
Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over. The protected area is a VBS enclave, an i
🎯 Cartographie risques CVSS × EPSS Zone rouge = critique
2468100.250.500.751.00ZONE CRITIQUECVE-2026-104935 CVSS=8.6 EPSS=0.000CVE-2026-96951 CVSS=8.8 EPSS=0.000CVE-2015-5477 CVSS=7.5 EPSS=0.994CVE-2016-3081 CVSS=8.1 EPSS=0.961CVE-2023-22894 CVSS=7.2 EPSS=0.036CVE-2021-3199 CVSS=9.8 EPSS=0.194CVE-2015-3306 CVSS=10.0 EPSS=0.995CVE-2026-88779 CVSS=7.5 EPSS=0.006CVE-2026-102490 CVSS=7.8 EPSS=0.005CVE-2026-102489 CVSS=9.8 EPSS=0.013CVE-2026-104286 CVSS=9.8 EPSS=0.022CVE-2026-76504 CVSS=9.8 EPSS=0.018CVE-2026-86950 CVSS=8.8 EPSS=0.012CVE-2026-88772 CVSS=8.1 EPSS=0.013CVE-2026-88771 CVSS=9.8 EPSS=0.011CVE-2026-67279 CVSS=6.5 EPSS=0.010CVE-2026-65660 CVSS=8.8 EPSS=0.021CVE-2026-87902 CVSS=8.1 EPSS=0.400CVE-2026-5430 CVSS=10.0 EPSS=0.006CVE-2026-71362 CVSS=9.1 EPSS=0.875CVE-2026-93952 CVSS=10.0 EPSS=0.011CVE-2026-94127 CVSS=9.8 EPSS=0.022CVE-2026-93616 CVSS=9.8 EPSS=0.197CVE-2026-85102 CVSS=9.8 EPSS=0.075CVE-2026-7273 CVSS=8.8 EPSS=0.025CVE-2025-39964 CVSS=7.8 EPSS=0.013CVE-2026-53266 CVSS=8.8 EPSS=0.008CVE-2025-39682 CVSS=9.8 EPSS=0.029CVE-2026-58704 CVSS=8.8 EPSS=0.006CVE-2026-76460 CVSS=10.0 EPSS=0.140CVE-2026-87886 CVSS=7.8 EPSS=0.002CVE-2026-70035 CVSS=8.8 EPSS=0.000CVE-2026-70186 CVSS=7.5 EPSS=0.000CVE-2026-70007 CVSS=8.8 EPSS=0.000CVE-2026-87697 CVSS=8.8 EPSS=0.000CVE-2026-96225 CVSS=7.8 EPSS=0.000CVE-2026-96230 CVSS=8.8 EPSS=0.000CVE-2026-70179 CVSS=7.5 EPSS=0.000CVE-2026-55691 CVSS=8.6 EPSS=0.005CVE-2026-55692 CVSS=7.5 EPSS=0.005CVE-2026-57440 CVSS=7.5 EPSS=0.003CVE-2026-96224 CVSS=8.8 EPSS=0.000CVE-2026-55690 CVSS=7.5 EPSS=0.005CVE-2026-85363 CVSS=8.8 EPSS=0.000CVE-2026-96959 CVSS=7.5 EPSS=0.000CVE-2026-83520 CVSS=8.8 EPSS=0.000CVE-2026-70174 CVSS=8.8 EPSS=0.000CVE-2026-96232 CVSS=7.5 EPSS=0.000CVE-2026-96234 CVSS=5.3 EPSS=0.000CVE-2026-96229 CVSS=6.5 EPSS=0.000CVE-2026-96235 CVSS=8.8 EPSS=0.000CVE-2026-96222 CVSS=7.4 EPSS=0.000CVE-2026-96231 CVSS=7.8 EPSS=0.000CVE-2026-85790 CVSS=5.9 EPSS=0.000CVE-2026-66822 CVSS=5.9 EPSS=0.000CVE-2026-88092 CVSS=9.4 EPSS=0.000CVE-2026-70188 CVSS=9.1 EPSS=0.000CVE-2026-96236 CVSS=7.5 EPSS=0.000CVE-2026-70197 CVSS=8.1 EPSS=0.000CVE-2026-69651 CVSS=7.5 EPSS=0.000CVE-2026-102870 CVSS=8.8 EPSS=0.000CVE-2026-96960 CVSS=7.5 EPSS=0.000CVE-2026-96233 CVSS=7.5 EPSS=0.000GHSA-86xp-94pg-8r6r CVSS=5.3 EPSS=0.000CVE-2026-70162 CVSS=5.9 EPSS=0.000CVE-2026-96958 CVSS=7.5 EPSS=0.000CVE-2026-84008 CVSS=7.5 EPSS=0.000CVE-2026-58280 CVSS=7.5 EPSS=0.000CVE-2026-70194 CVSS=6.5 EPSS=0.000CVE-2026-70183 CVSS=7.5 EPSS=0.000CVE-2026-70196 CVSS=5.9 EPSS=0.000CVE-2026-105016 CVSS=9.8 EPSS=0.000CVE-2026-70181 CVSS=7.5 EPSS=0.000CVE-2026-70175 CVSS=8.1 EPSS=0.000CVE-2026-70159 CVSS=7.5 EPSS=0.000CVE-2026-54641 CVSS=7.7 EPSS=0.000CVE-2026-49264 CVSS=6.1 EPSS=0.000CVE-2026-49265 CVSS=6.8 EPSS=0.000CVE-2026-102827 CVSS=8.1 EPSS=0.004CVE-2026-106117 CVSS=7.5 EPSS=0.004CVE-2026-15830 CVSS=5.3 EPSS=0.011CVE-2026-106445 CVSS=9.2 EPSS=0.004CVE-2026-73557 CVSS=0.0 EPSS=0.004GHSA-m687-p538-r5hp CVSS=0.0 EPSS=0.000GHSA-fmmf-xq98-g327 CVSS=0.0 EPSS=0.000GHSA-pjr3-86v4-5p7w CVSS=5.4 EPSS=0.000GHSA-hjx8-qv73-f7cm CVSS=6.5 EPSS=0.000GHSA-fprf-r6rv-xg99 CVSS=5.4 EPSS=0.000GHSA-4hv6-xc92-j86g CVSS=6.5 EPSS=0.000CVE-2026-107805 CVSS=7.5 EPSS=0.004CVE-2026-107804 CVSS=5.3 EPSS=0.002CVE-2026-108259 CVSS=8.2 EPSS=0.003CVE-2026-108261 CVSS=9.3 EPSS=0.002CVE-2026-108260 CVSS=7.6 EPSS=0.002CVE-2026-108258 CVSS=6.9 EPSS=0.004GHSA-w2ch-4xgr-22ww CVSS=0.0 EPSS=0.000GHSA-8wvg-r2j4-3737 CVSS=0.0 EPSS=0.000GHSA-3hc7-r24j-rpwc CVSS=0.0 EPSS=0.000GHSA-g38j-7v97-x298 CVSS=0.0 EPSS=0.000CVE-2026-107842 CVSS=5.3 EPSS=0.003CVSSEPSSP0P1P2
CVSS = sévérité (0→10) · EPSS = probabilité exploitation (0→1)
Zone rouge : CVSS ≥ 7 et EPSS ≥ 0.5 — risque maximal immédiat.
🔴 Vulnérabilités P0 — Action immédiate requise Tableau complet →
CVE-2026-104935 (2026-10-13)NOUVEAUCVSS 8.6EPSS 0.0%KEVITW
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Ivanti Connect Secure
📍 PRESS:CISA Advisories
CVE-2026-96951 (2026-10-13)NOUVEAUCVSS 8.8EPSS 0.0%KEVITW
Microsoft Windows Command Injection Vulnerability
Microsoft Windows
📍 PRESS:CISA Advisories
CVE-2015-5477 (2026-10-08)MAJCVSS 7.5EPSS 99.4%KEVRWITW
ISC BIND Data Processing Errors Vulnerability
ISC BIND · Hive
CVE-2016-3081 (2026-10-08)MAJCVSS 8.1EPSS 96.1%KEVITW
Apache Struts Command Injection Vulnerability
Apache Struts
CVE-2023-22894 (2026-10-08)MAJCVSS 7.2EPSS 3.6%KEVITW
Strapi Cleartext Storage of Sensitive Information Vulnerability
Strapi Strapi
CVE-2021-3199 (2026-10-08)MAJCVSS 9.8EPSS 19.4%KEVITW
ONLYOFFICE Docs Server Path Traversal Vulnerability
ONLYOFFICE Docs
CVE-2015-3306 (2026-10-08)MAJCVSS 10.0EPSS 99.5%KEVITW
ProFTPD Improper Access Control Vulnerability
ProFTPD ProFTPD
📍 PRESS:TheHackerNews
CVE-2026-88779 (2026-10-04)CVSS 7.5EPSS 0.6%KEVITW
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix NetScaler
📍 PRESS:CISA Advisories
CVE-2026-102490 (2026-10-02)MAJCVSS 7.8EPSS 0.5%KEVITW
Zammad GmbH Zammad Improper Privilege Management Vulnerability
Zammad GmbH Zammad
📍 PRESS:CISA Advisories
CVE-2026-102489 (2026-10-02)MAJCVSS 9.8EPSS 1.3%KEVITW
Zammad GmbH Zammad Session Fixation Vulnerability
Zammad GmbH Zammad
📍 PRESS:CISA Advisories
CVE-2026-104286 (2026-10-01)MAJCVSS 9.8EPSS 2.2%KEVITW
Fortinet FortiMail Path Traversal Vulnerability
Fortinet FortiMail
📍 PRESS:CISA Advisories
CVE-2026-76504 (2026-09-30)CVSS 9.8EPSS 1.8%KEVITW
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
Cisco Catalyst SD-WAN Manager
📍 PRESS:CISA Advisories
CVE-2026-86950 (2026-09-29)CVSS 8.8EPSS 1.2%KEVITW
Apple Multiple Products Out-of-Bounds Write Vulnerability
Apple Multiple Products
📍 PRESS:CISA Advisories
CVE-2026-88772 (2026-09-27)CVSS 8.1EPSS 1.3%KEVITW
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix NetScaler
CVE-2026-88771 (2026-09-27)CVSS 9.8EPSS 1.1%KEVITW
Citrix NetScaler Improper Input Validation Vulnerability
Citrix NetScaler
🏭 Éditeurs les plus exposés
nuget41
go37
Ubuntu21
composer11
pip5

L'écosystème

Digimoove ESN Paris — Cyber · Cloud · Automatisation IA · Observabilité NAIvigate Veille & formation IA FactualRisk est une marque de l'écosystème Digimoove