Conformité — Mapping CVE / NIS2, ISO 27001

Flags total

177

NIS2

DORA

ISO27001

Vue d'ensemble par framework

NIS2 Art.21

Mesures de gestion des risques — patch obligatoire J+30

NIS2 Art.23

Notification d'incident significatif — J+24h / J+72h

DORA Art.9

Gestion des risques TIC — prestataires ICT critiques

DORA Art.20

Tests de résilience opérationnelle numérique

ISO27001 A.12.6

Gestion des vulnérabilités techniques

ISO27001 A.16.1

Gestion des incidents de sécurité

PCI-DSS 6.3

Vulnerability management — systèmes critiques

ANSSI R14

Mise à jour prioritaire recommandée

NIS2 Art.21 — Mesures de gestion des risques — patch obligatoire J+30 37 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2026-20253	P0	9.8	0.882	Splunk	Enterprise	KEVITW
CVE-2026-34910	P0	10.0	0.786	Ubiquiti	UniFi OS	KEVITW
CVE-2026-48907	P0	9.8	0.804	Widget Factory	Joomla Content Editor	KEVITW
CVE-2026-20230	P0	8.6	0.417	Cisco	Unified Communications Manager	KEVITW
CVE-2026-48282MAJ	P0	10.0	0.286	Adobe	ColdFusion	KEVITW
CVE-2026-34909	P0	10.0	0.023	Ubiquiti	UniFi OS	KEVITW
CVE-2026-56290MAJ	P0	9.8	0.029	Joomlack	Page Builder	KEVITW
CVE-2026-48908MAJ	P0	9.8	0.016	JoomShaper	SP Page Builder	KEVITW
CVE-2026-48939MAJ	P0	9.8	0.015	iCagenda	iCagenda	KEVITW
CVE-2026-12569	P0	9.8	0.012	PTC	Windchill and FlexPLM	KEVITW
CVE-2026-15409NOUVEAU	P0	10.0	0.000	SonicWall	SMA1000 Appliances	KEVITW
CVE-2025-67038	P0	9.8	0.009	Lantronix	EDS5000	KEVITW
CVE-2026-56291NOUVEAU	P0	9.8	0.008	Balbooa	Forms	KEVITW
CVE-2026-34908	P0	10.0	0.025	Ubiquiti	UniFi OS	KEVITW
CVE-2026-45659	P0	8.8	0.032	Microsoft	SharePoint Server	KEVITW
CVE-2026-48558	P0	10.0	0.012	SimpleHelp	SimpleHelp	KEVITW
CVE-2026-45414NOUVEAU	P0	8.5	0.000	rubygems	decidim	ITW🦠
CVE-2026-55255MAJ	P0	8.4	0.006	Langflow	Langflow	KEVITW
CVE-2026-15410NOUVEAU	P0	7.2	0.000	SonicWall	SMA1000 Appliances	KEVITW
CVE-2026-49259NOUVEAU	P0	8.7	0.000	composer	nukeviet/nukeviet	ITW🦠
CVE-2026-56155NOUVEAU	P0	7.8	0.000	Microsoft	Active Directory Federation Services	KEVITW
CVE-2026-56164NOUVEAU	P1	5.3	0.000	Microsoft	SharePoint Server	KEVITW
CVE-2008-4128MAJ	P1	4.3	0.000	Cisco	IOS	KEVITW
CVE-2026-59856NOUVEAU	P0	7.8	0.002	Ubuntu
CVE-2026-14324	P0	6.5	0.002	Ubuntu
CVE-2026-59857NOUVEAU	P1	5.5	0.001	Ubuntu
CVE-2026-47065MAJ	P1	9.8	0.005	maven	org.apache.mina:mina-core
CVE-2026-14330	P1	5.5	0.001	Ubuntu
GHSA-9hc2-hjx8-q6pvMAJ	P1	9.6	0.000	npm	tidgi
CVE-2026-45262NOUVEAU	P1	9.9	0.000	composer	facturascripts/facturascripts
CVE-2026-54052NOUVEAU	P1	9.9	0.000	npm	n8n-mcp
CVE-2026-50551NOUVEAU	P1	9.9	0.004	go	github.com/siyuan-note/siyuan/kernel
GHSA-hgjx-r89m-m7v4MAJ	P1	9.9	0.000	composer	facturascripts/facturascripts
CVE-2026-61667NOUVEAU	P1	9.9	0.000	pip	DIRAC
CVE-2026-41283MAJ	P1	9.9	0.007	pip	mistral
CVE-2026-54159NOUVEAU	P1	10.0	0.000	composer	prestashop/ps_facetedsearch
CVE-2026-45579NOUVEAU	P1	9.9	0.000	pip	DIRAC

NIS2 Art.23 — Notification d'incident significatif — J+24h / J+72h 21 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2026-20253	P0	9.8	0.882	Splunk	Enterprise	KEVITW
CVE-2026-34910	P0	10.0	0.786	Ubiquiti	UniFi OS	KEVITW
CVE-2026-48907	P0	9.8	0.804	Widget Factory	Joomla Content Editor	KEVITW
CVE-2026-20230	P0	8.6	0.417	Cisco	Unified Communications Manager	KEVITW
CVE-2026-48282MAJ	P0	10.0	0.286	Adobe	ColdFusion	KEVITW
CVE-2026-34909	P0	10.0	0.023	Ubiquiti	UniFi OS	KEVITW
CVE-2026-56290MAJ	P0	9.8	0.029	Joomlack	Page Builder	KEVITW
CVE-2026-48908MAJ	P0	9.8	0.016	JoomShaper	SP Page Builder	KEVITW
CVE-2026-48939MAJ	P0	9.8	0.015	iCagenda	iCagenda	KEVITW
CVE-2026-12569	P0	9.8	0.012	PTC	Windchill and FlexPLM	KEVITW
CVE-2026-15409NOUVEAU	P0	10.0	0.000	SonicWall	SMA1000 Appliances	KEVITW
CVE-2025-67038	P0	9.8	0.009	Lantronix	EDS5000	KEVITW
CVE-2026-56291NOUVEAU	P0	9.8	0.008	Balbooa	Forms	KEVITW
CVE-2026-34908	P0	10.0	0.025	Ubiquiti	UniFi OS	KEVITW
CVE-2026-45659	P0	8.8	0.032	Microsoft	SharePoint Server	KEVITW
CVE-2026-48558	P0	10.0	0.012	SimpleHelp	SimpleHelp	KEVITW
CVE-2026-55255MAJ	P0	8.4	0.006	Langflow	Langflow	KEVITW
CVE-2026-15410NOUVEAU	P0	7.2	0.000	SonicWall	SMA1000 Appliances	KEVITW
CVE-2026-56155NOUVEAU	P0	7.8	0.000	Microsoft	Active Directory Federation Services	KEVITW
CVE-2026-56164NOUVEAU	P1	5.3	0.000	Microsoft	SharePoint Server	KEVITW
CVE-2008-4128MAJ	P1	4.3	0.000	Cisco	IOS	KEVITW

DORA Art.9 — Gestion des risques TIC — prestataires ICT critiques 5 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2026-20230	P0	8.6	0.417	Cisco	Unified Communications Manager	KEVITW
CVE-2026-45659	P0	8.8	0.032	Microsoft	SharePoint Server	KEVITW
CVE-2026-56155NOUVEAU	P0	7.8	0.000	Microsoft	Active Directory Federation Services	KEVITW
CVE-2026-56164NOUVEAU	P1	5.3	0.000	Microsoft	SharePoint Server	KEVITW
CVE-2008-4128MAJ	P1	4.3	0.000	Cisco	IOS	KEVITW

ISO27001 A.12.6 — Gestion des vulnérabilités techniques 66 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2026-20253	P0	9.8	0.882	Splunk	Enterprise	KEVITW
CVE-2026-34910	P0	10.0	0.786	Ubiquiti	UniFi OS	KEVITW
CVE-2026-48907	P0	9.8	0.804	Widget Factory	Joomla Content Editor	KEVITW
CVE-2026-20230	P0	8.6	0.417	Cisco	Unified Communications Manager	KEVITW
CVE-2026-48282MAJ	P0	10.0	0.286	Adobe	ColdFusion	KEVITW
CVE-2026-34909	P0	10.0	0.023	Ubiquiti	UniFi OS	KEVITW
CVE-2026-56290MAJ	P0	9.8	0.029	Joomlack	Page Builder	KEVITW
CVE-2026-48908MAJ	P0	9.8	0.016	JoomShaper	SP Page Builder	KEVITW
CVE-2026-48939MAJ	P0	9.8	0.015	iCagenda	iCagenda	KEVITW
CVE-2026-12569	P0	9.8	0.012	PTC	Windchill and FlexPLM	KEVITW
CVE-2026-15409NOUVEAU	P0	10.0	0.000	SonicWall	SMA1000 Appliances	KEVITW
CVE-2025-67038	P0	9.8	0.009	Lantronix	EDS5000	KEVITW
CVE-2026-56291NOUVEAU	P0	9.8	0.008	Balbooa	Forms	KEVITW
CVE-2026-34908	P0	10.0	0.025	Ubiquiti	UniFi OS	KEVITW
CVE-2026-45659	P0	8.8	0.032	Microsoft	SharePoint Server	KEVITW
CVE-2026-48558	P0	10.0	0.012	SimpleHelp	SimpleHelp	KEVITW
CVE-2026-45414NOUVEAU	P0	8.5	0.000	rubygems	decidim	ITW🦠
CVE-2026-55255MAJ	P0	8.4	0.006	Langflow	Langflow	KEVITW
CVE-2026-15410NOUVEAU	P0	7.2	0.000	SonicWall	SMA1000 Appliances	KEVITW
CVE-2026-49259NOUVEAU	P0	8.7	0.000	composer	nukeviet/nukeviet	ITW🦠
CVE-2026-56155NOUVEAU	P0	7.8	0.000	Microsoft	Active Directory Federation Services	KEVITW
CVE-2026-56164NOUVEAU	P1	5.3	0.000	Microsoft	SharePoint Server	KEVITW
CVE-2008-4128MAJ	P1	4.3	0.000	Cisco	IOS	KEVITW
CVE-2026-59856NOUVEAU	P0	7.8	0.002	Ubuntu
CVE-2026-47065MAJ	P1	9.8	0.005	maven	org.apache.mina:mina-core
GHSA-9hc2-hjx8-q6pvMAJ	P1	9.6	0.000	npm	tidgi
CVE-2026-45262NOUVEAU	P1	9.9	0.000	composer	facturascripts/facturascripts
CVE-2026-54052NOUVEAU	P1	9.9	0.000	npm	n8n-mcp
CVE-2026-50131NOUVEAU	P3	8.6	0.003	npm	@fedify/fedify
CVE-2026-50551NOUVEAU	P1	9.9	0.004	go	github.com/siyuan-note/siyuan/kernel
GHSA-hgjx-r89m-m7v4MAJ	P1	9.9	0.000	composer	facturascripts/facturascripts
CVE-2026-61667NOUVEAU	P1	9.9	0.000	pip	DIRAC
GHSA-g936-7jqj-mwv8MAJ	P3	9.0	0.000	go	github.com/almeidapaulopt/tsdproxy
CVE-2026-48779MAJ	P3	7.5	0.008	npm	ws
CVE-2026-41283MAJ	P1	9.9	0.007	pip	mistral
CVE-2026-59955NOUVEAU	P3	7.5	0.000	maven	com.ctrip.framework.apollo:apollo
CVE-2026-59954NOUVEAU	P3	7.5	0.000	maven	com.ctrip.framework.apollo:apollo
CVE-2026-54159NOUVEAU	P1	10.0	0.000	composer	prestashop/ps_facetedsearch
CVE-2026-54174NOUVEAU	P3	8.3	0.000	go	chainguard.dev/apko
CVE-2026-50006NOUVEAU	P3	9.1	0.000	go	github.com/julien040/anyquery

ISO27001 A.16.1 — Gestion des incidents de sécurité 27 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2026-20253	P0	9.8	0.882	Splunk	Enterprise	KEVITW
CVE-2026-34910	P0	10.0	0.786	Ubiquiti	UniFi OS	KEVITW
CVE-2026-48907	P0	9.8	0.804	Widget Factory	Joomla Content Editor	KEVITW
CVE-2026-20230	P0	8.6	0.417	Cisco	Unified Communications Manager	KEVITW
CVE-2026-48282MAJ	P0	10.0	0.286	Adobe	ColdFusion	KEVITW
CVE-2026-34909	P0	10.0	0.023	Ubiquiti	UniFi OS	KEVITW
CVE-2026-56290MAJ	P0	9.8	0.029	Joomlack	Page Builder	KEVITW
CVE-2026-48908MAJ	P0	9.8	0.016	JoomShaper	SP Page Builder	KEVITW
CVE-2026-48939MAJ	P0	9.8	0.015	iCagenda	iCagenda	KEVITW
CVE-2026-12569	P0	9.8	0.012	PTC	Windchill and FlexPLM	KEVITW
CVE-2026-15409NOUVEAU	P0	10.0	0.000	SonicWall	SMA1000 Appliances	KEVITW
CVE-2025-67038	P0	9.8	0.009	Lantronix	EDS5000	KEVITW
CVE-2026-56291NOUVEAU	P0	9.8	0.008	Balbooa	Forms	KEVITW
CVE-2026-34908	P0	10.0	0.025	Ubiquiti	UniFi OS	KEVITW
CVE-2026-45659	P0	8.8	0.032	Microsoft	SharePoint Server	KEVITW
CVE-2026-48558	P0	10.0	0.012	SimpleHelp	SimpleHelp	KEVITW
CVE-2026-45414NOUVEAU	P0	8.5	0.000	rubygems	decidim	ITW🦠
CVE-2026-55255MAJ	P0	8.4	0.006	Langflow	Langflow	KEVITW
CVE-2026-15410NOUVEAU	P0	7.2	0.000	SonicWall	SMA1000 Appliances	KEVITW
CVE-2026-49259NOUVEAU	P0	8.7	0.000	composer	nukeviet/nukeviet	ITW🦠
CVE-2026-56155NOUVEAU	P0	7.8	0.000	Microsoft	Active Directory Federation Services	KEVITW
CVE-2026-45377NOUVEAU	P2	6.5	0.000	rubygems	decidim-core	ITW🦠
CVE-2026-56164NOUVEAU	P1	5.3	0.000	Microsoft	SharePoint Server	KEVITW
CVE-2008-4128MAJ	P1	4.3	0.000	Cisco	IOS	KEVITW
CVE-2026-54250NOUVEAU	P2	5.8	0.001	go	github.com/k3s-io/k3s	ITW🦠
CVE-2026-50157NOUVEAU	P2	6.5	0.000	composer	auth0/symfony	ITW🦠
CVE-2026-54448NOUVEAU	P3	0.0	0.003	go	github.com/aquasecurity/trivy	ITW🦠

ANSSI R14 — Mise à jour prioritaire recommandée 21 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2026-20253	P0	9.8	0.882	Splunk	Enterprise	KEVITW
CVE-2026-34910	P0	10.0	0.786	Ubiquiti	UniFi OS	KEVITW
CVE-2026-48907	P0	9.8	0.804	Widget Factory	Joomla Content Editor	KEVITW
CVE-2026-20230	P0	8.6	0.417	Cisco	Unified Communications Manager	KEVITW
CVE-2026-48282MAJ	P0	10.0	0.286	Adobe	ColdFusion	KEVITW
CVE-2026-34909	P0	10.0	0.023	Ubiquiti	UniFi OS	KEVITW
CVE-2026-56290MAJ	P0	9.8	0.029	Joomlack	Page Builder	KEVITW
CVE-2026-48908MAJ	P0	9.8	0.016	JoomShaper	SP Page Builder	KEVITW
CVE-2026-48939MAJ	P0	9.8	0.015	iCagenda	iCagenda	KEVITW
CVE-2026-12569	P0	9.8	0.012	PTC	Windchill and FlexPLM	KEVITW
CVE-2026-15409NOUVEAU	P0	10.0	0.000	SonicWall	SMA1000 Appliances	KEVITW
CVE-2025-67038	P0	9.8	0.009	Lantronix	EDS5000	KEVITW
CVE-2026-56291NOUVEAU	P0	9.8	0.008	Balbooa	Forms	KEVITW
CVE-2026-34908	P0	10.0	0.025	Ubiquiti	UniFi OS	KEVITW
CVE-2026-45659	P0	8.8	0.032	Microsoft	SharePoint Server	KEVITW
CVE-2026-48558	P0	10.0	0.012	SimpleHelp	SimpleHelp	KEVITW
CVE-2026-55255MAJ	P0	8.4	0.006	Langflow	Langflow	KEVITW
CVE-2026-15410NOUVEAU	P0	7.2	0.000	SonicWall	SMA1000 Appliances	KEVITW
CVE-2026-56155NOUVEAU	P0	7.8	0.000	Microsoft	Active Directory Federation Services	KEVITW
CVE-2026-56164NOUVEAU	P1	5.3	0.000	Microsoft	SharePoint Server	KEVITW
CVE-2008-4128MAJ	P1	4.3	0.000	Cisco	IOS	KEVITW

ℹ️ À propos

Mapping automatique indicatif — ne constitue pas un avis juridique.
KEV+P0/P1 → NIS2 Art.21 · KEV+ransomware/ITW → NIS2 Art.23 · P0/P1 prestataires critiques → DORA Art.9 · CVSS≥7 → ISO27001 A.12.6 · ITW/ransomware → ISO27001 A.16.1 · CVSS≥9+REMOTE → PCI-DSS 6.3 · KEV ou CVSS≥9+ITW → ANSSI R14.
Pour un audit complet, rapprochez-vous de votre RSSI ou DPO.

L'écosystème