Conformité — Mapping CVE / NIS2, ISO 27001

Flags total

286

NIS2

DORA

ISO27001

131

Vue d'ensemble par framework

NIS2 Art.21

Mesures de gestion des risques — patch obligatoire J+30

NIS2 Art.23

Notification d'incident significatif — J+24h / J+72h

DORA Art.9

Gestion des risques TIC — prestataires ICT critiques

DORA Art.20

Tests de résilience opérationnelle numérique

ISO27001 A.12.6

131

Gestion des vulnérabilités techniques

ISO27001 A.16.1

Gestion des incidents de sécurité

PCI-DSS 6.3

Vulnerability management — systèmes critiques

ANSSI R14

Mise à jour prioritaire recommandée

NIS2 Art.21 — Mesures de gestion des risques — patch obligatoire J+30 48 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2015-5477MAJ	P0	7.5	0.994	ISC	BIND	KEVITW🦠
CVE-2015-3306MAJ	P0	10.0	0.995	ProFTPD	ProFTPD	KEVITW
CVE-2016-3081MAJ	P0	8.1	0.961	Apache	Struts	KEVITW
CVE-2026-71362	P0	9.1	0.875	Adobe	Commerce and Magento	KEVITW
CVE-2026-96951NOUVEAU	P0	8.8	0.000	Microsoft	Windows	KEVITW
CVE-2026-104935NOUVEAU	P0	8.6	0.000	Ivanti	Connect Secure	KEVITW
CVE-2026-104286MAJ	P0	9.8	0.022	Fortinet	FortiMail	KEVITW
CVE-2026-76504	P0	9.8	0.018	Cisco	Catalyst SD-WAN Manager	KEVITW
CVE-2026-102489MAJ	P0	9.8	0.013	Zammad GmbH	Zammad	KEVITW
CVE-2026-86950	P0	8.8	0.012	Apple	Multiple Products	KEVITW
CVE-2026-102490MAJ	P0	7.8	0.005	Zammad GmbH	Zammad	KEVITW
CVE-2026-88779	P0	7.5	0.006	Citrix	NetScaler	KEVITW
CVE-2025-39682MAJ	P0	9.8	0.029	Linux	Kernel	KEVITW🦠
CVE-2026-87902	P0	8.1	0.400	WordPress	Core	KEVITW
CVE-2026-93616	P0	9.8	0.197	Check Point	Multiple Products	KEVITW
CVE-2021-3199MAJ	P0	9.8	0.194	ONLYOFFICE	Docs	KEVITW
CVE-2026-76460MAJ	P0	10.0	0.140	Cisco	Identity Services Engine	KEVITW
CVE-2026-85102	P0	9.8	0.075	Check Point	Multiple Products	KEVITW
CVE-2026-93952	P0	10.0	0.011	Arista	VeloCloud Orchestrator	KEVITW
CVE-2026-88771	P0	9.8	0.011	Citrix	NetScaler	KEVITW
CVE-2026-94127	P0	9.8	0.022	F5	BIG-IP APM	KEVITW
CVE-2026-5430	P0	10.0	0.006	WSO2	Multiple Products	KEVITW
CVE-2026-65660	P0	8.8	0.021	Microsoft	SharePoint	KEVITW
CVE-2026-85097NOUVEAU	P0	9.8	0.003			ITW
CVE-2026-7273	P0	8.8	0.025	Zyxel	GS1900 Series Switches	KEVITW
CVE-2026-88772	P0	8.1	0.013	Citrix	NetScaler	KEVITW
CVE-2026-53266	P0	8.8	0.008	Linux	Kernel	KEVITW
CVE-2026-58704MAJ	P0	8.8	0.006	Google	Pixel	KEVITW
CVE-2025-39964	P0	7.8	0.013	Linux	Kernel	KEVITW
CVE-2023-22894MAJ	P0	7.2	0.036	Strapi	Strapi	KEVITW
CVE-2026-87886	P0	7.8	0.002	Acronis	Backup	KEVITW
CVE-2026-67279	P1	6.5	0.010	MikroTik	RouterOS	KEVITW
CVE-2026-106117	P0	7.5	0.004	nuget	ImageSharp	ITW
CVE-2026-105016NOUVEAU	P1	9.8	0.000	nuget	Microsoft.Native.Quic.MsQuic.Schannel
CVE-2024-56779MAJ	P1	9.8	0.005	Ubuntu
CVE-2022-49201MAJ	P1	9.8	0.005	Ubuntu
CVE-2022-49149MAJ	P1	9.8	0.005	Ubuntu
CVE-2026-96587	P1	10.0	0.003
CVE-2026-100730NOUVEAU	P1	9.8	0.006
CVE-2026-15340NOUVEAU	P1	9.8	0.006

NIS2 Art.23 — Notification d'incident significatif — J+24h / J+72h 31 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2015-5477MAJ	P0	7.5	0.994	ISC	BIND	KEVITW🦠
CVE-2015-3306MAJ	P0	10.0	0.995	ProFTPD	ProFTPD	KEVITW
CVE-2016-3081MAJ	P0	8.1	0.961	Apache	Struts	KEVITW
CVE-2026-71362	P0	9.1	0.875	Adobe	Commerce and Magento	KEVITW
CVE-2026-96951NOUVEAU	P0	8.8	0.000	Microsoft	Windows	KEVITW
CVE-2026-104935NOUVEAU	P0	8.6	0.000	Ivanti	Connect Secure	KEVITW
CVE-2026-104286MAJ	P0	9.8	0.022	Fortinet	FortiMail	KEVITW
CVE-2026-76504	P0	9.8	0.018	Cisco	Catalyst SD-WAN Manager	KEVITW
CVE-2026-102489MAJ	P0	9.8	0.013	Zammad GmbH	Zammad	KEVITW
CVE-2026-86950	P0	8.8	0.012	Apple	Multiple Products	KEVITW
CVE-2026-102490MAJ	P0	7.8	0.005	Zammad GmbH	Zammad	KEVITW
CVE-2026-88779	P0	7.5	0.006	Citrix	NetScaler	KEVITW
CVE-2025-39682MAJ	P0	9.8	0.029	Linux	Kernel	KEVITW🦠
CVE-2026-87902	P0	8.1	0.400	WordPress	Core	KEVITW
CVE-2026-93616	P0	9.8	0.197	Check Point	Multiple Products	KEVITW
CVE-2021-3199MAJ	P0	9.8	0.194	ONLYOFFICE	Docs	KEVITW
CVE-2026-76460MAJ	P0	10.0	0.140	Cisco	Identity Services Engine	KEVITW
CVE-2026-85102	P0	9.8	0.075	Check Point	Multiple Products	KEVITW
CVE-2026-93952	P0	10.0	0.011	Arista	VeloCloud Orchestrator	KEVITW
CVE-2026-88771	P0	9.8	0.011	Citrix	NetScaler	KEVITW
CVE-2026-94127	P0	9.8	0.022	F5	BIG-IP APM	KEVITW
CVE-2026-5430	P0	10.0	0.006	WSO2	Multiple Products	KEVITW
CVE-2026-65660	P0	8.8	0.021	Microsoft	SharePoint	KEVITW
CVE-2026-7273	P0	8.8	0.025	Zyxel	GS1900 Series Switches	KEVITW
CVE-2026-88772	P0	8.1	0.013	Citrix	NetScaler	KEVITW
CVE-2026-53266	P0	8.8	0.008	Linux	Kernel	KEVITW
CVE-2026-58704MAJ	P0	8.8	0.006	Google	Pixel	KEVITW
CVE-2025-39964	P0	7.8	0.013	Linux	Kernel	KEVITW
CVE-2023-22894MAJ	P0	7.2	0.036	Strapi	Strapi	KEVITW
CVE-2026-87886	P0	7.8	0.002	Acronis	Backup	KEVITW
CVE-2026-67279	P1	6.5	0.010	MikroTik	RouterOS	KEVITW

DORA Art.9 — Gestion des risques TIC — prestataires ICT critiques 8 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2026-96951NOUVEAU	P0	8.8	0.000	Microsoft	Windows	KEVITW
CVE-2026-104286MAJ	P0	9.8	0.022	Fortinet	FortiMail	KEVITW
CVE-2026-76504	P0	9.8	0.018	Cisco	Catalyst SD-WAN Manager	KEVITW
CVE-2026-88779	P0	7.5	0.006	Citrix	NetScaler	KEVITW
CVE-2026-76460MAJ	P0	10.0	0.140	Cisco	Identity Services Engine	KEVITW
CVE-2026-88771	P0	9.8	0.011	Citrix	NetScaler	KEVITW
CVE-2026-65660	P0	8.8	0.021	Microsoft	SharePoint	KEVITW
CVE-2026-88772	P0	8.1	0.013	Citrix	NetScaler	KEVITW

ISO27001 A.12.6 — Gestion des vulnérabilités techniques 131 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2015-5477MAJ	P0	7.5	0.994	ISC	BIND	KEVITW🦠
CVE-2015-3306MAJ	P0	10.0	0.995	ProFTPD	ProFTPD	KEVITW
CVE-2016-3081MAJ	P0	8.1	0.961	Apache	Struts	KEVITW
CVE-2026-71362	P0	9.1	0.875	Adobe	Commerce and Magento	KEVITW
CVE-2026-96951NOUVEAU	P0	8.8	0.000	Microsoft	Windows	KEVITW
CVE-2026-104935NOUVEAU	P0	8.6	0.000	Ivanti	Connect Secure	KEVITW
CVE-2026-104286MAJ	P0	9.8	0.022	Fortinet	FortiMail	KEVITW
CVE-2026-76504	P0	9.8	0.018	Cisco	Catalyst SD-WAN Manager	KEVITW
CVE-2026-102489MAJ	P0	9.8	0.013	Zammad GmbH	Zammad	KEVITW
CVE-2026-86950	P0	8.8	0.012	Apple	Multiple Products	KEVITW
CVE-2026-102490MAJ	P0	7.8	0.005	Zammad GmbH	Zammad	KEVITW
CVE-2026-88779	P0	7.5	0.006	Citrix	NetScaler	KEVITW
CVE-2025-39682MAJ	P0	9.8	0.029	Linux	Kernel	KEVITW🦠
CVE-2026-87902	P0	8.1	0.400	WordPress	Core	KEVITW
CVE-2026-93616	P0	9.8	0.197	Check Point	Multiple Products	KEVITW
CVE-2021-3199MAJ	P0	9.8	0.194	ONLYOFFICE	Docs	KEVITW
CVE-2026-76460MAJ	P0	10.0	0.140	Cisco	Identity Services Engine	KEVITW
CVE-2026-85102	P0	9.8	0.075	Check Point	Multiple Products	KEVITW
CVE-2026-93952	P0	10.0	0.011	Arista	VeloCloud Orchestrator	KEVITW
CVE-2026-88771	P0	9.8	0.011	Citrix	NetScaler	KEVITW
CVE-2026-94127	P0	9.8	0.022	F5	BIG-IP APM	KEVITW
CVE-2026-5430	P0	10.0	0.006	WSO2	Multiple Products	KEVITW
CVE-2026-65660	P0	8.8	0.021	Microsoft	SharePoint	KEVITW
CVE-2026-85097NOUVEAU	P0	9.8	0.003			ITW
CVE-2026-7273	P0	8.8	0.025	Zyxel	GS1900 Series Switches	KEVITW
CVE-2026-88772	P0	8.1	0.013	Citrix	NetScaler	KEVITW
CVE-2026-53266	P0	8.8	0.008	Linux	Kernel	KEVITW
CVE-2026-58704MAJ	P0	8.8	0.006	Google	Pixel	KEVITW
CVE-2025-39964	P0	7.8	0.013	Linux	Kernel	KEVITW
CVE-2023-22894MAJ	P0	7.2	0.036	Strapi	Strapi	KEVITW
CVE-2026-87886	P0	7.8	0.002	Acronis	Backup	KEVITW
CVE-2026-67279	P1	6.5	0.010	MikroTik	RouterOS	KEVITW
CVE-2026-106117	P0	7.5	0.004	nuget	ImageSharp	ITW
CVE-2026-105016NOUVEAU	P1	9.8	0.000	nuget	Microsoft.Native.Quic.MsQuic.Schannel
CVE-2026-70035NOUVEAU	P2	8.8	0.000	nuget	Microsoft.WindowsDesktop.App.Runtime.win-arm64
CVE-2026-70007NOUVEAU	P2	8.8	0.000	nuget	Microsoft.WindowsDesktop.App.Runtime.win-arm64
CVE-2026-87697NOUVEAU	P2	8.8	0.000	nuget	Microsoft.WindowsDesktop.App.Runtime.win-arm64
CVE-2026-96230NOUVEAU	P2	8.8	0.000	nuget	Microsoft.AspNetCore.Components.WebAssembly.Server
CVE-2026-96224NOUVEAU	P2	8.8	0.000	nuget	Microsoft.WindowsDesktop.App.Runtime.win-arm64
CVE-2026-85363NOUVEAU	P2	8.8	0.000	nuget	Microsoft.WindowsDesktop.App.Runtime.win-arm64

ISO27001 A.16.1 — Gestion des incidents de sécurité 36 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2015-5477MAJ	P0	7.5	0.994	ISC	BIND	KEVITW🦠
CVE-2015-3306MAJ	P0	10.0	0.995	ProFTPD	ProFTPD	KEVITW
CVE-2016-3081MAJ	P0	8.1	0.961	Apache	Struts	KEVITW
CVE-2026-71362	P0	9.1	0.875	Adobe	Commerce and Magento	KEVITW
CVE-2026-96951NOUVEAU	P0	8.8	0.000	Microsoft	Windows	KEVITW
CVE-2026-104935NOUVEAU	P0	8.6	0.000	Ivanti	Connect Secure	KEVITW
CVE-2026-104286MAJ	P0	9.8	0.022	Fortinet	FortiMail	KEVITW
CVE-2026-76504	P0	9.8	0.018	Cisco	Catalyst SD-WAN Manager	KEVITW
CVE-2026-102489MAJ	P0	9.8	0.013	Zammad GmbH	Zammad	KEVITW
CVE-2026-86950	P0	8.8	0.012	Apple	Multiple Products	KEVITW
CVE-2026-102490MAJ	P0	7.8	0.005	Zammad GmbH	Zammad	KEVITW
CVE-2026-88779	P0	7.5	0.006	Citrix	NetScaler	KEVITW
CVE-2025-39682MAJ	P0	9.8	0.029	Linux	Kernel	KEVITW🦠
CVE-2026-87902	P0	8.1	0.400	WordPress	Core	KEVITW
CVE-2026-93616	P0	9.8	0.197	Check Point	Multiple Products	KEVITW
CVE-2021-3199MAJ	P0	9.8	0.194	ONLYOFFICE	Docs	KEVITW
CVE-2026-76460MAJ	P0	10.0	0.140	Cisco	Identity Services Engine	KEVITW
CVE-2026-85102	P0	9.8	0.075	Check Point	Multiple Products	KEVITW
CVE-2026-93952	P0	10.0	0.011	Arista	VeloCloud Orchestrator	KEVITW
CVE-2026-88771	P0	9.8	0.011	Citrix	NetScaler	KEVITW
CVE-2026-94127	P0	9.8	0.022	F5	BIG-IP APM	KEVITW
CVE-2026-5430	P0	10.0	0.006	WSO2	Multiple Products	KEVITW
CVE-2026-65660	P0	8.8	0.021	Microsoft	SharePoint	KEVITW
CVE-2026-85097NOUVEAU	P0	9.8	0.003			ITW
CVE-2026-7273	P0	8.8	0.025	Zyxel	GS1900 Series Switches	KEVITW
CVE-2026-88772	P0	8.1	0.013	Citrix	NetScaler	KEVITW
CVE-2026-53266	P0	8.8	0.008	Linux	Kernel	KEVITW
CVE-2026-58704MAJ	P0	8.8	0.006	Google	Pixel	KEVITW
CVE-2025-39964	P0	7.8	0.013	Linux	Kernel	KEVITW
CVE-2023-22894MAJ	P0	7.2	0.036	Strapi	Strapi	KEVITW
CVE-2026-87886	P0	7.8	0.002	Acronis	Backup	KEVITW
CVE-2026-67279	P1	6.5	0.010	MikroTik	RouterOS	KEVITW
GHSA-p4h8-xg7f-xqrcMAJ	P2	6.5	0.000	go	github.com/go-vikunja/vikunja	ITW🦠
GHSA-jmr8-r558-3jhxMAJ	P2	4.3	0.000	go	code.vikunja.io/api	ITW🦠
CVE-2026-106117	P0	7.5	0.004	nuget	ImageSharp	ITW
CVE-2026-91979NOUVEAU	P3	0.0	0.004	go	code.vikunja.io/api	ITW🦠

ANSSI R14 — Mise à jour prioritaire recommandée 32 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2015-5477MAJ	P0	7.5	0.994	ISC	BIND	KEVITW🦠
CVE-2015-3306MAJ	P0	10.0	0.995	ProFTPD	ProFTPD	KEVITW
CVE-2016-3081MAJ	P0	8.1	0.961	Apache	Struts	KEVITW
CVE-2026-71362	P0	9.1	0.875	Adobe	Commerce and Magento	KEVITW
CVE-2026-96951NOUVEAU	P0	8.8	0.000	Microsoft	Windows	KEVITW
CVE-2026-104935NOUVEAU	P0	8.6	0.000	Ivanti	Connect Secure	KEVITW
CVE-2026-104286MAJ	P0	9.8	0.022	Fortinet	FortiMail	KEVITW
CVE-2026-76504	P0	9.8	0.018	Cisco	Catalyst SD-WAN Manager	KEVITW
CVE-2026-102489MAJ	P0	9.8	0.013	Zammad GmbH	Zammad	KEVITW
CVE-2026-86950	P0	8.8	0.012	Apple	Multiple Products	KEVITW
CVE-2026-102490MAJ	P0	7.8	0.005	Zammad GmbH	Zammad	KEVITW
CVE-2026-88779	P0	7.5	0.006	Citrix	NetScaler	KEVITW
CVE-2025-39682MAJ	P0	9.8	0.029	Linux	Kernel	KEVITW🦠
CVE-2026-87902	P0	8.1	0.400	WordPress	Core	KEVITW
CVE-2026-93616	P0	9.8	0.197	Check Point	Multiple Products	KEVITW
CVE-2021-3199MAJ	P0	9.8	0.194	ONLYOFFICE	Docs	KEVITW
CVE-2026-76460MAJ	P0	10.0	0.140	Cisco	Identity Services Engine	KEVITW
CVE-2026-85102	P0	9.8	0.075	Check Point	Multiple Products	KEVITW
CVE-2026-93952	P0	10.0	0.011	Arista	VeloCloud Orchestrator	KEVITW
CVE-2026-88771	P0	9.8	0.011	Citrix	NetScaler	KEVITW
CVE-2026-94127	P0	9.8	0.022	F5	BIG-IP APM	KEVITW
CVE-2026-5430	P0	10.0	0.006	WSO2	Multiple Products	KEVITW
CVE-2026-65660	P0	8.8	0.021	Microsoft	SharePoint	KEVITW
CVE-2026-85097NOUVEAU	P0	9.8	0.003			ITW
CVE-2026-7273	P0	8.8	0.025	Zyxel	GS1900 Series Switches	KEVITW
CVE-2026-88772	P0	8.1	0.013	Citrix	NetScaler	KEVITW
CVE-2026-53266	P0	8.8	0.008	Linux	Kernel	KEVITW
CVE-2026-58704MAJ	P0	8.8	0.006	Google	Pixel	KEVITW
CVE-2025-39964	P0	7.8	0.013	Linux	Kernel	KEVITW
CVE-2023-22894MAJ	P0	7.2	0.036	Strapi	Strapi	KEVITW
CVE-2026-87886	P0	7.8	0.002	Acronis	Backup	KEVITW
CVE-2026-67279	P1	6.5	0.010	MikroTik	RouterOS	KEVITW

ℹ️ À propos

Mapping automatique indicatif — ne constitue pas un avis juridique.
KEV+P0/P1 → NIS2 Art.21 · KEV+ransomware/ITW → NIS2 Art.23 · P0/P1 prestataires critiques → DORA Art.9 · CVSS≥7 → ISO27001 A.12.6 · ITW/ransomware → ISO27001 A.16.1 · CVSS≥9+REMOTE → PCI-DSS 6.3 · KEV ou CVSS≥9+ITW → ANSSI R14.
Pour un audit complet, rapprochez-vous de votre RSSI ou DPO.

L'écosystème