FACTUALRISK Cyber Intelligence
Mise à jour : 29 Aug 2026 · 00:03
← Accueil
🗞 Briefing
💥 Menaces
🛡 Vulnérabilités
📋 Conformité
📚 Guides
← Retour FactualRisk
Niveau CRITIQUE · 29 August 2026
🔴 31 vulnérabilités critiques — action immédiate requise
Mis à jour le 29 August 2026 · 00:03 UTC · 31 P0 · 11 P1 · 29 KEV exploités · 8 ransomware · 39 ITW · 167 vulnérabilités analysées · Voir le tableau complet →
?
P0 Critiques
Action immédiate
?
P1 Élevés
Sous 72h
?
KEV actifs
Exploités CISA ↗
?
Ransomware
?
Analysés
167
Findings total
💥 Incidents & Attaques récentes Tout voir →
💥
INFO Zero-Day · BleepingComputer · 28 August 2026
PaperCut releases second emergency patch for exploited flaws
💥
INFO Autre · DarkReading · 28 August 2026
Hundreds of OpenAI Agents Invaded Hugging Face Servers
💥
INFO Autre · BleepingComputer · 28 August 2026
GiveWP WordPress donation plugin flaw lets hackers execute server commands
💥
📊 Top 5 types d'attaques
💥 Autre 26
⚡ Zero-Day 5
🌐 DDoS 3
🦠 Ransomware 2
⛓ Supply Chain 2
📰 Actualités cyber du jour Tout voir →
The Hacker News 28 Aug 2026
Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable
Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August 20 and August 25, 2026. The vulnerability
BleepingComputer 28 Aug 2026
PaperCut releases second emergency patch for exploited flaws
PaperCut has released a second emergency security update for two actively exploited vulnerabilities in its PaperCut NG and MF print management software after researchers discovered multiple ways to by
Dark Reading 28 Aug 2026
Hundreds of OpenAI Agents Invaded Hugging Face Servers
The Hugging Face incident was bigger and worse than previously thought, with approximately 700 agents collaborating on a sophisticated, multistage attack.
BleepingComputer 28 Aug 2026
GiveWP WordPress donation plugin flaw lets hackers execute server commands
A maximum-severity vulnerability in the GiveWP plugin for WordPress allows an unauthenticated attacker to execute arbitrary commands on the hosting server. [...]
The Hacker News 28 Aug 2026
Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication
Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company released a fresh emergency fix with additional ha
BleepingComputer 28 Aug 2026
68-year-old imprisoned after making $1.3 million by pirating IPTV services
A 68-year-old has been sentenced in the U.K. to more than six years in prison for operating an illegal IPTV (Internet Protocol Television) service that generated £980,812 ($1.3 million) over three yea
🎯 Cartographie risques CVSS × EPSS Zone rouge = critique
2468100.250.500.751.00ZONE CRITIQUECVE-2023-49105 CVSS=9.8 EPSS=0.000CVE-2026-53362 CVSS=7.8 EPSS=0.003CVE-2026-66384 CVSS=5.3 EPSS=0.003CVE-2021-23758 CVSS=9.8 EPSS=0.891CVE-2015-3246 CVSS=5.1 EPSS=0.071CVE-2015-5287 CVSS=7.8 EPSS=0.034CVE-2022-0995 CVSS=7.8 EPSS=0.063CVE-2026-8452 CVSS=9.8 EPSS=0.016CVE-2019-1068 CVSS=8.8 EPSS=0.447CVE-2026-60004 CVSS=9.8 EPSS=0.824CVE-2026-21962 CVSS=10.0 EPSS=0.420CVE-2026-73570 CVSS=8.9 EPSS=0.015CVE-2026-72530 CVSS=9.0 EPSS=0.018CVE-2026-72529 CVSS=9.8 EPSS=0.016CVE-2026-64849 CVSS=9.3 EPSS=0.164CVE-2026-33824 CVSS=9.8 EPSS=0.727CVE-2026-59310 CVSS=9.8 EPSS=0.459CVE-2026-55040 CVSS=9.1 EPSS=0.397CVE-2026-65400 CVSS=9.8 EPSS=0.099CVE-2025-62593 CVSS=8.8 EPSS=0.169CVE-2026-20349 CVSS=8.6 EPSS=0.022CVE-2026-68820 CVSS=7.0 EPSS=0.062CVE-2026-72898 CVSS=10.0 EPSS=0.792CVE-2026-8037 CVSS=9.8 EPSS=0.996CVE-2026-63077 CVSS=9.8 EPSS=0.847CVE-2026-18556 CVSS=7.4 EPSS=0.402CVE-2026-34486 CVSS=7.5 EPSS=0.986CVE-2026-9198 CVSS=9.8 EPSS=0.347CVE-2026-18577 CVSS=8.1 EPSS=0.541CVE-2026-66908 CVSS=7.5 EPSS=0.004CVE-2026-66907 CVSS=7.5 EPSS=0.006CVE-2026-66906 CVSS=9.1 EPSS=0.005CVE-2026-46726 CVSS=7.5 EPSS=0.009CVE-2026-48203 CVSS=9.1 EPSS=0.006CVE-2026-27878 CVSS=6.5 EPSS=0.004CVE-2026-12681 CVSS=6.8 EPSS=0.002CVE-2026-55678 CVSS=0.0 EPSS=0.000CVE-2026-63621 CVSS=5.3 EPSS=0.004CVE-2026-60093 CVSS=5.5 EPSS=0.003CVE-2026-55761 CVSS=5.9 EPSS=0.005CVE-2026-55763 CVSS=0.0 EPSS=0.000CVE-2026-55891 CVSS=0.0 EPSS=0.000CVE-2026-55696 CVSS=4.3 EPSS=0.000CVE-2026-59230 CVSS=6.5 EPSS=0.004CVE-2026-49042 CVSS=7.3 EPSS=0.007CVE-2026-49086 CVSS=6.5 EPSS=0.007CVE-2026-49098 CVSS=5.3 EPSS=0.006CVE-2026-49097 CVSS=6.5 EPSS=0.007CVE-2026-49365 CVSS=5.3 EPSS=0.006CVE-2026-49099 CVSS=5.3 EPSS=0.005CVE-2026-55993 CVSS=7.5 EPSS=0.009CVE-2026-55994 CVSS=7.5 EPSS=0.006CVE-2026-56139 CVSS=5.3 EPSS=0.006CVE-2026-46588 CVSS=7.3 EPSS=0.007CVE-2026-46587 CVSS=7.3 EPSS=0.007CVE-2026-46592 CVSS=7.5 EPSS=0.006CVE-2026-48206 CVSS=5.3 EPSS=0.006CVE-2026-46591 CVSS=8.2 EPSS=0.005CVE-2026-46590 CVSS=8.8 EPSS=0.008CVE-2026-46585 CVSS=7.5 EPSS=0.006CVE-2026-46584 CVSS=3.7 EPSS=0.006CVE-2026-46457 CVSS=7.5 EPSS=0.007CVE-2026-46456 CVSS=9.8 EPSS=0.008CVE-2026-46455 CVSS=9.8 EPSS=0.007GHSA-73p9-6hrp-8qhr CVSS=0.0 EPSS=0.000CVE-2026-55484 CVSS=7.5 EPSS=0.000CVE-2026-55634 CVSS=9.9 EPSS=0.000CVE-2026-55220 CVSS=9.3 EPSS=0.000CVE-2026-55212 CVSS=7.1 EPSS=0.004CVE-2026-55208 CVSS=7.7 EPSS=0.004CVE-2026-55207 CVSS=8.8 EPSS=0.007CVE-2026-55215 CVSS=7.5 EPSS=0.000CVE-2026-55247 CVSS=9.1 EPSS=0.000CVE-2026-55622 CVSS=7.7 EPSS=0.002CVE-2026-55621 CVSS=7.7 EPSS=0.002CVE-2026-55228 CVSS=8.1 EPSS=0.002CVE-2026-55227 CVSS=4.3 EPSS=0.002CVE-2026-55520 CVSS=7.1 EPSS=0.000CVE-2026-55248 CVSS=9.1 EPSS=0.000CVE-2026-55673 CVSS=7.1 EPSS=0.000CVE-2026-55175 CVSS=7.5 EPSS=0.011CVE-2026-55407 CVSS=0.0 EPSS=0.008CVE-2026-55406 CVSS=0.0 EPSS=0.002CVE-2026-55641 CVSS=8.2 EPSS=0.003CVE-2026-13676 CVSS=7.5 EPSS=0.004CVE-2026-55638 CVSS=8.6 EPSS=0.006CVE-2026-39830 CVSS=9.1 EPSS=0.006CVE-2026-6322 CVSS=7.5 EPSS=0.005CVE-2026-35397 CVSS=7.1 EPSS=0.006CVE-2026-44020 CVSS=7.5 EPSS=0.006CVE-2026-44017 CVSS=7.5 EPSS=0.007CVE-2026-44727 CVSS=5.4 EPSS=0.004CVE-2026-48710 CVSS=6.5 EPSS=0.019CVE-2026-39835 CVSS=5.3 EPSS=0.005CVE-2026-55584 CVSS=7.5 EPSS=0.000CVE-2026-55245 CVSS=8.7 EPSS=0.000CVE-2026-55588 CVSS=2.0 EPSS=0.003CVE-2026-55485 CVSS=8.8 EPSS=0.000CVE-2026-55509 CVSS=8.8 EPSS=0.000CVE-2026-55425 CVSS=5.0 EPSS=0.000CVSSEPSSP0P1P2
CVSS = sévérité (0→10) · EPSS = probabilité exploitation (0→1)
Zone rouge : CVSS ≥ 7 et EPSS ≥ 0.5 — risque maximal immédiat.
🔴 Vulnérabilités P0 — Action immédiate requise Tableau complet →
CVE-2023-49105 (2026-08-27)MAJCVSS 9.8EPSS 0.0%KEVITW
ownCloud Improper Authentication Vulnerability
ownCloud ownCloud
📍 PRESS:TheHackerNews
CVE-2026-53362 (2026-08-27)MAJCVSS 7.8EPSS 0.3%KEVITW
Linux Kernel Unspecified Vulnerability
Linux Kernel
📍 PRESS:SecurityWeek
CVE-2021-23758 (2026-08-26)MAJCVSS 9.8EPSS 89.1%KEVITW
Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
Ajax.NET Professional Ajax.NET Professional
CVE-2015-5287 (2026-08-26)MAJCVSS 7.8EPSS 3.4%KEVITW
Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
Red Hat Automatic Bug Reporting Tool
CVE-2022-0995 (2026-08-26)MAJCVSS 7.8EPSS 6.3%KEVITW
Linux Kernel Out-of-Bounds Write Vulnerability
Linux Kernel
CVE-2026-8452 (2026-08-26)MAJCVSS 9.8EPSS 1.6%KEVITW
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix NetScaler ADC and NetScaler Gateway
CVE-2019-1068 (2026-08-26)MAJCVSS 8.8EPSS 44.7%KEVITW
Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft SQL Server
📍 PRESS:TheHackerNews
CVE-2026-60004 (2026-08-25)NOUVEAUCVSS 9.8EPSS 82.4%KEVITW
Gitea Code Injection Vulnerability
Gitea Gitea
📍 PRESS:TheHackerNews
CVE-2026-21962 (2026-08-24)MAJCVSS 10.0EPSS 42.0%KEVITW
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in
📍 PRESS:TheHackerNews
CVE-2026-73570 (2026-08-21)MAJCVSS 8.9EPSS 1.5%KEVITW
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
Synacor Zimbra Collaboration Suite (ZCS)
📍 PRESS:DarkReading
CVE-2026-72530 (2026-08-20)CVSS 9.0EPSS 1.8%KEVITW
TrueConf Server Code Injection Vulnerability
TrueConf Server
CVE-2026-72529 (2026-08-20)CVSS 9.8EPSS 1.6%KEVITW
TrueConf Server Missing Authentication for Critical Function Vulnerability
TrueConf Server
CVE-2026-64849 (2026-08-19)CVSS 9.3EPSS 16.4%KEVITW
MLflow Server-Side Request Forgery Vulnerability
MLflow MLflow
CVE-2026-33824 (2026-08-18)CVSS 9.8EPSS 72.7%KEVITW
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
Microsoft Internet Key Exchange (IKE) Service Extensions
CVE-2026-59310 (2026-08-18)CVSS 9.8EPSS 45.9%KEVITW
Broadcom VMware vCenter Path Traversal Vulnerability
Broadcom VMware vCenter
🏭 Éditeurs les plus exposés
maven41
composer24
Ubuntu20
go15
pip13

L'écosystème

Digimoove ESN Paris — Cyber · Cloud · Automatisation IA · Observabilité NAIvigate Veille & formation IA FactualRisk est une marque de l'écosystème Digimoove