Conformité — Mapping CVE / NIS2, ISO 27001

Flags total

257

NIS2

DORA

ISO27001

108

Vue d'ensemble par framework

NIS2 Art.21

Mesures de gestion des risques — patch obligatoire J+30

NIS2 Art.23

Notification d'incident significatif — J+24h / J+72h

DORA Art.9

Gestion des risques TIC — prestataires ICT critiques

DORA Art.20

Tests de résilience opérationnelle numérique

ISO27001 A.12.6

108

Gestion des vulnérabilités techniques

ISO27001 A.16.1

Gestion des incidents de sécurité

PCI-DSS 6.3

Vulnerability management — systèmes critiques

ANSSI R14

Mise à jour prioritaire recommandée

NIS2 Art.21 — Mesures de gestion des risques — patch obligatoire J+30 42 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2026-60004NOUVEAU	P0	9.8	0.824	Gitea	Gitea	KEVITW
CVE-2026-8037	P0	9.8	0.996	Progress	LoadMaster	KEVITW
CVE-2021-23758MAJ	P0	9.8	0.836	Ajax.NET Professional	Ajax.NET Professional	KEVITW
CVE-2026-63077	P0	9.8	0.847	JetBrains	TeamCity	KEVITW
CVE-2019-1068MAJ	P0	8.8	0.528	Microsoft	SQL Server	KEVITW
CVE-2026-34486	P0	7.5	0.986	Apache	Tomcat	KEVITW
CVE-2026-72898	P0	10.0	0.792	Metabase	Metabase	KEVITW
CVE-2026-21962MAJ	P0	10.0	0.420	Oracle	HTTP Server and Oracle Weblogic Server Proxy Plug-in	KEVITW
CVE-2026-33824	P0	9.8	0.727	Microsoft	Internet Key Exchange (IKE) Service Extensions	KEVITW
CVE-2023-49105MAJ	P0	9.8	0.412	ownCloud	ownCloud	KEVITW
CVE-2026-59310	P0	9.8	0.459	Broadcom	VMware vCenter	KEVITW
CVE-2026-18577	P0	8.1	0.541	N-able	N-central	KEVITW
CVE-2026-9198	P0	9.8	0.347	IBM	Langflow	KEVITW
CVE-2026-55040	P0	9.1	0.397	Microsoft	SharePoint	KEVITW
CVE-2026-18556	P0	7.4	0.402	N-able	N-central	KEVITW
CVE-2026-64849	P0	9.3	0.164	MLflow	MLflow	KEVITW
CVE-2026-73570MAJ	P0	8.9	0.015	Synacor	Zimbra Collaboration Suite (ZCS)	KEVITW
CVE-2025-62593	P0	8.8	0.169	Ray-Project	Ray	KEVITW
CVE-2026-65400	P0	9.8	0.099	Apple	macOS	KEVITW
CVE-2026-8452MAJ	P0	9.8	0.016	Citrix	NetScaler ADC and NetScaler Gateway	KEVITW
CVE-2026-72529	P0	9.8	0.016	TrueConf	Server	KEVITW
CVE-2026-74232NOUVEAU	P0	9.8	0.005			ITW
CVE-2022-0995MAJ	P0	7.8	0.095	Linux	Kernel	KEVITW
CVE-2026-74233NOUVEAU	P0	9.8	0.026			ITW
CVE-2026-72530	P0	9.0	0.018	TrueConf	Server	KEVITW
CVE-2026-53362MAJ	P0	7.8	0.003	Linux	Kernel	KEVITW
CVE-2026-68820	P0	7.0	0.062	Microsoft	Windows Ancillary Function Driver for WinSock	KEVITW
CVE-2026-20349	P0	8.6	0.022	Cisco	Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)	KEVITW
CVE-2015-5287MAJ	P0	7.8	0.050	Red Hat	Automatic Bug Reporting Tool	KEVITW
CVE-2015-3246MAJ	P1	5.1	0.088	Red Hat	Libuser	KEVITW
CVE-2026-44017MAJ	P0	7.5	0.007	pip	docling	ITW🦠
CVE-2026-19913NOUVEAU	P0	7.5	0.004			ITW🦠
CVE-2026-66384	P1	5.3	0.003	JFrog	Artifactory	KEVITW
CVE-2026-46456MAJ	P1	9.8	0.008	maven	org.apache.camel:camel-aws2-sqs
CVE-2026-71300NOUVEAU	P1	9.8	0.005	maven	org.apache.camel:camel-atmosphere-websocket
CVE-2026-78329NOUVEAU	P1	9.8	0.004	maven	org.apache.camel:camel-undertow
CVE-2026-53247NOUVEAU	P1	9.8	0.005	Ubuntu
CVE-2026-53246NOUVEAU	P1	9.8	0.004	Ubuntu
CVE-2026-57433NOUVEAU	P1	9.8	0.004	Ubuntu
CVE-2026-46455MAJ	P1	9.8	0.007	maven	org.apache.camel:camel-keycloak

NIS2 Art.23 — Notification d'incident significatif — J+24h / J+72h 29 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2026-60004NOUVEAU	P0	9.8	0.824	Gitea	Gitea	KEVITW
CVE-2026-8037	P0	9.8	0.996	Progress	LoadMaster	KEVITW
CVE-2021-23758MAJ	P0	9.8	0.836	Ajax.NET Professional	Ajax.NET Professional	KEVITW
CVE-2026-63077	P0	9.8	0.847	JetBrains	TeamCity	KEVITW
CVE-2019-1068MAJ	P0	8.8	0.528	Microsoft	SQL Server	KEVITW
CVE-2026-34486	P0	7.5	0.986	Apache	Tomcat	KEVITW
CVE-2026-72898	P0	10.0	0.792	Metabase	Metabase	KEVITW
CVE-2026-21962MAJ	P0	10.0	0.420	Oracle	HTTP Server and Oracle Weblogic Server Proxy Plug-in	KEVITW
CVE-2026-33824	P0	9.8	0.727	Microsoft	Internet Key Exchange (IKE) Service Extensions	KEVITW
CVE-2023-49105MAJ	P0	9.8	0.412	ownCloud	ownCloud	KEVITW
CVE-2026-59310	P0	9.8	0.459	Broadcom	VMware vCenter	KEVITW
CVE-2026-18577	P0	8.1	0.541	N-able	N-central	KEVITW
CVE-2026-9198	P0	9.8	0.347	IBM	Langflow	KEVITW
CVE-2026-55040	P0	9.1	0.397	Microsoft	SharePoint	KEVITW
CVE-2026-18556	P0	7.4	0.402	N-able	N-central	KEVITW
CVE-2026-64849	P0	9.3	0.164	MLflow	MLflow	KEVITW
CVE-2026-73570MAJ	P0	8.9	0.015	Synacor	Zimbra Collaboration Suite (ZCS)	KEVITW
CVE-2025-62593	P0	8.8	0.169	Ray-Project	Ray	KEVITW
CVE-2026-65400	P0	9.8	0.099	Apple	macOS	KEVITW
CVE-2026-8452MAJ	P0	9.8	0.016	Citrix	NetScaler ADC and NetScaler Gateway	KEVITW
CVE-2026-72529	P0	9.8	0.016	TrueConf	Server	KEVITW
CVE-2022-0995MAJ	P0	7.8	0.095	Linux	Kernel	KEVITW
CVE-2026-72530	P0	9.0	0.018	TrueConf	Server	KEVITW
CVE-2026-53362MAJ	P0	7.8	0.003	Linux	Kernel	KEVITW
CVE-2026-68820	P0	7.0	0.062	Microsoft	Windows Ancillary Function Driver for WinSock	KEVITW
CVE-2026-20349	P0	8.6	0.022	Cisco	Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)	KEVITW
CVE-2015-5287MAJ	P0	7.8	0.050	Red Hat	Automatic Bug Reporting Tool	KEVITW
CVE-2015-3246MAJ	P1	5.1	0.088	Red Hat	Libuser	KEVITW
CVE-2026-66384	P1	5.3	0.003	JFrog	Artifactory	KEVITW

DORA Art.9 — Gestion des risques TIC — prestataires ICT critiques 9 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2019-1068MAJ	P0	8.8	0.528	Microsoft	SQL Server	KEVITW
CVE-2026-21962MAJ	P0	10.0	0.420	Oracle	HTTP Server and Oracle Weblogic Server Proxy Plug-in	KEVITW
CVE-2026-33824	P0	9.8	0.727	Microsoft	Internet Key Exchange (IKE) Service Extensions	KEVITW
CVE-2026-59310	P0	9.8	0.459	Broadcom	VMware vCenter	KEVITW
CVE-2026-9198	P0	9.8	0.347	IBM	Langflow	KEVITW
CVE-2026-55040	P0	9.1	0.397	Microsoft	SharePoint	KEVITW
CVE-2026-8452MAJ	P0	9.8	0.016	Citrix	NetScaler ADC and NetScaler Gateway	KEVITW
CVE-2026-68820	P0	7.0	0.062	Microsoft	Windows Ancillary Function Driver for WinSock	KEVITW
CVE-2026-20349	P0	8.6	0.022	Cisco	Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)	KEVITW

ISO27001 A.12.6 — Gestion des vulnérabilités techniques 108 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2026-60004NOUVEAU	P0	9.8	0.824	Gitea	Gitea	KEVITW
CVE-2026-8037	P0	9.8	0.996	Progress	LoadMaster	KEVITW
CVE-2021-23758MAJ	P0	9.8	0.836	Ajax.NET Professional	Ajax.NET Professional	KEVITW
CVE-2026-63077	P0	9.8	0.847	JetBrains	TeamCity	KEVITW
CVE-2019-1068MAJ	P0	8.8	0.528	Microsoft	SQL Server	KEVITW
CVE-2026-34486	P0	7.5	0.986	Apache	Tomcat	KEVITW
CVE-2026-72898	P0	10.0	0.792	Metabase	Metabase	KEVITW
CVE-2026-21962MAJ	P0	10.0	0.420	Oracle	HTTP Server and Oracle Weblogic Server Proxy Plug-in	KEVITW
CVE-2026-33824	P0	9.8	0.727	Microsoft	Internet Key Exchange (IKE) Service Extensions	KEVITW
CVE-2023-49105MAJ	P0	9.8	0.412	ownCloud	ownCloud	KEVITW
CVE-2026-59310	P0	9.8	0.459	Broadcom	VMware vCenter	KEVITW
CVE-2026-18577	P0	8.1	0.541	N-able	N-central	KEVITW
CVE-2026-9198	P0	9.8	0.347	IBM	Langflow	KEVITW
CVE-2026-55040	P0	9.1	0.397	Microsoft	SharePoint	KEVITW
CVE-2026-18556	P0	7.4	0.402	N-able	N-central	KEVITW
CVE-2026-64849	P0	9.3	0.164	MLflow	MLflow	KEVITW
CVE-2026-73570MAJ	P0	8.9	0.015	Synacor	Zimbra Collaboration Suite (ZCS)	KEVITW
CVE-2025-62593	P0	8.8	0.169	Ray-Project	Ray	KEVITW
CVE-2026-65400	P0	9.8	0.099	Apple	macOS	KEVITW
CVE-2026-8452MAJ	P0	9.8	0.016	Citrix	NetScaler ADC and NetScaler Gateway	KEVITW
CVE-2026-72529	P0	9.8	0.016	TrueConf	Server	KEVITW
CVE-2026-74232NOUVEAU	P0	9.8	0.005			ITW
CVE-2022-0995MAJ	P0	7.8	0.095	Linux	Kernel	KEVITW
CVE-2026-74233NOUVEAU	P0	9.8	0.026			ITW
CVE-2026-72530	P0	9.0	0.018	TrueConf	Server	KEVITW
CVE-2026-53362MAJ	P0	7.8	0.003	Linux	Kernel	KEVITW
CVE-2026-68820	P0	7.0	0.062	Microsoft	Windows Ancillary Function Driver for WinSock	KEVITW
CVE-2026-20349	P0	8.6	0.022	Cisco	Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)	KEVITW
CVE-2015-5287MAJ	P0	7.8	0.050	Red Hat	Automatic Bug Reporting Tool	KEVITW
CVE-2015-3246MAJ	P1	5.1	0.088	Red Hat	Libuser	KEVITW
CVE-2026-44017MAJ	P0	7.5	0.007	pip	docling	ITW🦠
CVE-2026-19913NOUVEAU	P0	7.5	0.004			ITW🦠
CVE-2026-66384	P1	5.3	0.003	JFrog	Artifactory	KEVITW
CVE-2026-46456MAJ	P1	9.8	0.008	maven	org.apache.camel:camel-aws2-sqs
CVE-2026-71300NOUVEAU	P1	9.8	0.005	maven	org.apache.camel:camel-atmosphere-websocket
CVE-2026-78329NOUVEAU	P1	9.8	0.004	maven	org.apache.camel:camel-undertow
CVE-2026-53247NOUVEAU	P1	9.8	0.005	Ubuntu
CVE-2026-53246NOUVEAU	P1	9.8	0.004	Ubuntu
CVE-2026-57433NOUVEAU	P1	9.8	0.004	Ubuntu
CVE-2026-48203MAJ	P2	9.1	0.006	maven	org.apache.camel:camel-solr

ISO27001 A.16.1 — Gestion des incidents de sécurité 38 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2026-60004NOUVEAU	P0	9.8	0.824	Gitea	Gitea	KEVITW
CVE-2026-8037	P0	9.8	0.996	Progress	LoadMaster	KEVITW
CVE-2021-23758MAJ	P0	9.8	0.836	Ajax.NET Professional	Ajax.NET Professional	KEVITW
CVE-2026-63077	P0	9.8	0.847	JetBrains	TeamCity	KEVITW
CVE-2019-1068MAJ	P0	8.8	0.528	Microsoft	SQL Server	KEVITW
CVE-2026-34486	P0	7.5	0.986	Apache	Tomcat	KEVITW
CVE-2026-72898	P0	10.0	0.792	Metabase	Metabase	KEVITW
CVE-2026-21962MAJ	P0	10.0	0.420	Oracle	HTTP Server and Oracle Weblogic Server Proxy Plug-in	KEVITW
CVE-2026-33824	P0	9.8	0.727	Microsoft	Internet Key Exchange (IKE) Service Extensions	KEVITW
CVE-2023-49105MAJ	P0	9.8	0.412	ownCloud	ownCloud	KEVITW
CVE-2026-59310	P0	9.8	0.459	Broadcom	VMware vCenter	KEVITW
CVE-2026-18577	P0	8.1	0.541	N-able	N-central	KEVITW
CVE-2026-9198	P0	9.8	0.347	IBM	Langflow	KEVITW
CVE-2026-55040	P0	9.1	0.397	Microsoft	SharePoint	KEVITW
CVE-2026-18556	P0	7.4	0.402	N-able	N-central	KEVITW
CVE-2026-64849	P0	9.3	0.164	MLflow	MLflow	KEVITW
CVE-2026-73570MAJ	P0	8.9	0.015	Synacor	Zimbra Collaboration Suite (ZCS)	KEVITW
CVE-2025-62593	P0	8.8	0.169	Ray-Project	Ray	KEVITW
CVE-2026-65400	P0	9.8	0.099	Apple	macOS	KEVITW
CVE-2026-8452MAJ	P0	9.8	0.016	Citrix	NetScaler ADC and NetScaler Gateway	KEVITW
CVE-2026-72529	P0	9.8	0.016	TrueConf	Server	KEVITW
CVE-2026-74232NOUVEAU	P0	9.8	0.005			ITW
CVE-2022-0995MAJ	P0	7.8	0.095	Linux	Kernel	KEVITW
CVE-2026-74233NOUVEAU	P0	9.8	0.026			ITW
CVE-2026-72530	P0	9.0	0.018	TrueConf	Server	KEVITW
CVE-2026-53362MAJ	P0	7.8	0.003	Linux	Kernel	KEVITW
CVE-2026-68820	P0	7.0	0.062	Microsoft	Windows Ancillary Function Driver for WinSock	KEVITW
CVE-2026-20349	P0	8.6	0.022	Cisco	Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)	KEVITW
CVE-2015-5287MAJ	P0	7.8	0.050	Red Hat	Automatic Bug Reporting Tool	KEVITW
CVE-2015-3246MAJ	P1	5.1	0.088	Red Hat	Libuser	KEVITW
CVE-2026-44017MAJ	P0	7.5	0.007	pip	docling	ITW🦠
CVE-2026-19913NOUVEAU	P0	7.5	0.004			ITW🦠
CVE-2026-66384	P1	5.3	0.003	JFrog	Artifactory	KEVITW
CVE-2026-55761NOUVEAU	P2	5.9	0.005	go	github.com/portainer/portainer	ITW🦠
CVE-2026-44727MAJ	P2	5.4	0.004	pip	jupyter-server	ITW🦠
CVE-2026-55779NOUVEAU	P2	5.4	0.000	composer	silverstripe/versioned	ITW🦠
CVE-2026-55474NOUVEAU	P3	0.0	0.005	composer	snipe/snipe-it	ITW🦠
CVE-2026-19912NOUVEAU	P3	0.0	0.002			ITW🦠

ANSSI R14 — Mise à jour prioritaire recommandée 31 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2026-60004NOUVEAU	P0	9.8	0.824	Gitea	Gitea	KEVITW
CVE-2026-8037	P0	9.8	0.996	Progress	LoadMaster	KEVITW
CVE-2021-23758MAJ	P0	9.8	0.836	Ajax.NET Professional	Ajax.NET Professional	KEVITW
CVE-2026-63077	P0	9.8	0.847	JetBrains	TeamCity	KEVITW
CVE-2019-1068MAJ	P0	8.8	0.528	Microsoft	SQL Server	KEVITW
CVE-2026-34486	P0	7.5	0.986	Apache	Tomcat	KEVITW
CVE-2026-72898	P0	10.0	0.792	Metabase	Metabase	KEVITW
CVE-2026-21962MAJ	P0	10.0	0.420	Oracle	HTTP Server and Oracle Weblogic Server Proxy Plug-in	KEVITW
CVE-2026-33824	P0	9.8	0.727	Microsoft	Internet Key Exchange (IKE) Service Extensions	KEVITW
CVE-2023-49105MAJ	P0	9.8	0.412	ownCloud	ownCloud	KEVITW
CVE-2026-59310	P0	9.8	0.459	Broadcom	VMware vCenter	KEVITW
CVE-2026-18577	P0	8.1	0.541	N-able	N-central	KEVITW
CVE-2026-9198	P0	9.8	0.347	IBM	Langflow	KEVITW
CVE-2026-55040	P0	9.1	0.397	Microsoft	SharePoint	KEVITW
CVE-2026-18556	P0	7.4	0.402	N-able	N-central	KEVITW
CVE-2026-64849	P0	9.3	0.164	MLflow	MLflow	KEVITW
CVE-2026-73570MAJ	P0	8.9	0.015	Synacor	Zimbra Collaboration Suite (ZCS)	KEVITW
CVE-2025-62593	P0	8.8	0.169	Ray-Project	Ray	KEVITW
CVE-2026-65400	P0	9.8	0.099	Apple	macOS	KEVITW
CVE-2026-8452MAJ	P0	9.8	0.016	Citrix	NetScaler ADC and NetScaler Gateway	KEVITW
CVE-2026-72529	P0	9.8	0.016	TrueConf	Server	KEVITW
CVE-2026-74232NOUVEAU	P0	9.8	0.005			ITW
CVE-2022-0995MAJ	P0	7.8	0.095	Linux	Kernel	KEVITW
CVE-2026-74233NOUVEAU	P0	9.8	0.026			ITW
CVE-2026-72530	P0	9.0	0.018	TrueConf	Server	KEVITW
CVE-2026-53362MAJ	P0	7.8	0.003	Linux	Kernel	KEVITW
CVE-2026-68820	P0	7.0	0.062	Microsoft	Windows Ancillary Function Driver for WinSock	KEVITW
CVE-2026-20349	P0	8.6	0.022	Cisco	Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)	KEVITW
CVE-2015-5287MAJ	P0	7.8	0.050	Red Hat	Automatic Bug Reporting Tool	KEVITW
CVE-2015-3246MAJ	P1	5.1	0.088	Red Hat	Libuser	KEVITW
CVE-2026-66384	P1	5.3	0.003	JFrog	Artifactory	KEVITW

ℹ️ À propos

Mapping automatique indicatif — ne constitue pas un avis juridique.
KEV+P0/P1 → NIS2 Art.21 · KEV+ransomware/ITW → NIS2 Art.23 · P0/P1 prestataires critiques → DORA Art.9 · CVSS≥7 → ISO27001 A.12.6 · ITW/ransomware → ISO27001 A.16.1 · CVSS≥9+REMOTE → PCI-DSS 6.3 · KEV ou CVSS≥9+ITW → ANSSI R14.
Pour un audit complet, rapprochez-vous de votre RSSI ou DPO.

L'écosystème