FactualRisk — 📋 Compliance — Mapping réglementaire CVEs

Flags total

131

NIS2

DORA

ISO27001

Vue d'ensemble par framework

NIS2 Art.21

Mesures de gestion des risques — patch obligatoire J+30

NIS2 Art.23

Notification d'incident significatif — J+24h / J+72h

DORA Art.9

Gestion des risques TIC — prestataires ICT critiques

DORA Art.20

Tests de résilience opérationnelle numérique

ISO27001 A.12.6

Gestion des vulnérabilités techniques

ISO27001 A.16.1

Gestion des incidents de sécurité

PCI-DSS 6.3

Vulnerability management — systèmes critiques

ANSSI R14

Mise à jour prioritaire recommandée

NIS2 Art.21 — Mesures de gestion des risques — patch obligatoire J+30 19 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2025-32432	P0	10.0	0.877	Craft CMS	Craft CMS	KEVITW🦠
CVE-2026-1340	P0	9.8	0.677	Ivanti	Endpoint Manager Mobile (EPMM)	KEVITW🦠
CVE-2025-54068	P0	9.8	0.583	Laravel	Livewire	KEVITW🦠
CVE-2026-3055	P0	9.8	0.443	Citrix	NetScaler	KEVITW🦠
CVE-2025-53521	P0	9.8	0.414	F5	BIG-IP	KEVITW🦠
CVE-2026-33634	P0	8.8	0.212	Aquasecurity	Trivy	KEVITW🦠
CVE-2026-20963	P0	9.8	0.060	Microsoft	SharePoint	KEVITW🦠
CVE-2026-33017	P0	9.8	0.057	Langflow	Langflow	KEVITW🦠
CVE-2026-20131	P0	10.0	0.008	Cisco	Secure Firewall Management Center (FMC)	KEVITW🦠
CVE-2026-35616	P0	9.8	0.060	Fortinet	FortiClient EMS	KEVITW🦠
CVE-2026-5281	P0	8.8	0.033	Google	Dawn	KEVITW🦠
CVE-2025-66376	P0	7.2	0.100	Synacor	Zimbra Collaboration Suite (ZCS)	KEVITW🦠
CVE-2026-3910	P0	8.8	0.008	Google	Chromium V8	KEVITW🦠
CVE-2026-3909	P0	8.8	0.003	Google	Skia	KEVITW🦠
CVE-2025-31277	P0	8.8	0.002	Apple	Multiple Products	KEVITW🦠
CVE-2025-47813	P0	4.3	0.255	Wing FTP Server	Wing FTP Server	KEVITW🦠
CVE-2026-3502	P0	7.8	0.015	TrueConf	Client	KEVITW🦠
CVE-2025-43510	P0	7.8	0.005	Apple	Multiple Products	KEVITW🦠
CVE-2025-43520	P0	5.5	0.003	Apple	Multiple Products	KEVITW🦠

NIS2 Art.23 — Notification d'incident significatif — J+24h / J+72h 19 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2025-32432	P0	10.0	0.877	Craft CMS	Craft CMS	KEVITW🦠
CVE-2026-1340	P0	9.8	0.677	Ivanti	Endpoint Manager Mobile (EPMM)	KEVITW🦠
CVE-2025-54068	P0	9.8	0.583	Laravel	Livewire	KEVITW🦠
CVE-2026-3055	P0	9.8	0.443	Citrix	NetScaler	KEVITW🦠
CVE-2025-53521	P0	9.8	0.414	F5	BIG-IP	KEVITW🦠
CVE-2026-33634	P0	8.8	0.212	Aquasecurity	Trivy	KEVITW🦠
CVE-2026-20963	P0	9.8	0.060	Microsoft	SharePoint	KEVITW🦠
CVE-2026-33017	P0	9.8	0.057	Langflow	Langflow	KEVITW🦠
CVE-2026-20131	P0	10.0	0.008	Cisco	Secure Firewall Management Center (FMC)	KEVITW🦠
CVE-2026-35616	P0	9.8	0.060	Fortinet	FortiClient EMS	KEVITW🦠
CVE-2026-5281	P0	8.8	0.033	Google	Dawn	KEVITW🦠
CVE-2025-66376	P0	7.2	0.100	Synacor	Zimbra Collaboration Suite (ZCS)	KEVITW🦠
CVE-2026-3910	P0	8.8	0.008	Google	Chromium V8	KEVITW🦠
CVE-2026-3909	P0	8.8	0.003	Google	Skia	KEVITW🦠
CVE-2025-31277	P0	8.8	0.002	Apple	Multiple Products	KEVITW🦠
CVE-2025-47813	P0	4.3	0.255	Wing FTP Server	Wing FTP Server	KEVITW🦠
CVE-2026-3502	P0	7.8	0.015	TrueConf	Client	KEVITW🦠
CVE-2025-43510	P0	7.8	0.005	Apple	Multiple Products	KEVITW🦠
CVE-2025-43520	P0	5.5	0.003	Apple	Multiple Products	KEVITW🦠

DORA Art.9 — Gestion des risques TIC — prestataires ICT critiques 4 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2026-3055	P0	9.8	0.443	Citrix	NetScaler	KEVITW🦠
CVE-2026-20963	P0	9.8	0.060	Microsoft	SharePoint	KEVITW🦠
CVE-2026-20131	P0	10.0	0.008	Cisco	Secure Firewall Management Center (FMC)	KEVITW🦠
CVE-2026-35616	P0	9.8	0.060	Fortinet	FortiClient EMS	KEVITW🦠

ISO27001 A.12.6 — Gestion des vulnérabilités techniques 42 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2025-32432	P0	10.0	0.877	Craft CMS	Craft CMS	KEVITW🦠
CVE-2026-1340	P0	9.8	0.677	Ivanti	Endpoint Manager Mobile (EPMM)	KEVITW🦠
CVE-2025-54068	P0	9.8	0.583	Laravel	Livewire	KEVITW🦠
CVE-2026-3055	P0	9.8	0.443	Citrix	NetScaler	KEVITW🦠
CVE-2025-53521	P0	9.8	0.414	F5	BIG-IP	KEVITW🦠
CVE-2026-33634	P0	8.8	0.212	Aquasecurity	Trivy	KEVITW🦠
CVE-2026-20963	P0	9.8	0.060	Microsoft	SharePoint	KEVITW🦠
CVE-2026-33017	P0	9.8	0.057	Langflow	Langflow	KEVITW🦠
CVE-2026-20131	P0	10.0	0.008	Cisco	Secure Firewall Management Center (FMC)	KEVITW🦠
CVE-2026-35616	P0	9.8	0.060	Fortinet	FortiClient EMS	KEVITW🦠
CVE-2026-5281	P0	8.8	0.033	Google	Dawn	KEVITW🦠
CVE-2025-66376	P0	7.2	0.100	Synacor	Zimbra Collaboration Suite (ZCS)	KEVITW🦠
CVE-2026-3910	P0	8.8	0.008	Google	Chromium V8	KEVITW🦠
CVE-2026-3909	P0	8.8	0.003	Google	Skia	KEVITW🦠
CVE-2025-31277	P0	8.8	0.002	Apple	Multiple Products	KEVITW🦠
CVE-2025-47813	P0	4.3	0.255	Wing FTP Server	Wing FTP Server	KEVITW🦠
CVE-2026-3502	P0	7.8	0.015	TrueConf	Client	KEVITW🦠
CVE-2025-43510	P0	7.8	0.005	Apple	Multiple Products	KEVITW🦠
CVE-2025-43520	P0	5.5	0.003	Apple	Multiple Products	KEVITW🦠
CVE-2026-33478	P2	10.0	0.148	composer	wwbn/avideo
CVE-2025-67030	P3	8.8	0.002	maven	org.codehaus.plexus:plexus-utils
CVE-2026-25044	P3	8.8	0.001	npm	@budibase/server
CVE-2026-39974	P3	8.5	0.000	npm	n8n-mcp
CVE-2026-39890	P2	9.8	0.003	pip	praisonai
CVE-2026-40088	P2	9.7	0.000	pip	PraisonAI
CVE-2026-39983	P3	8.6	0.000	npm	basic-ftp
CVE-2026-39942	P3	8.5	0.000	npm	directus
CVE-2026-39888	P2	10.0	0.001	pip	praisonaiagents
CVE-2026-39885	P3	7.5	0.000	npm	mcp-from-openapi
CVE-2026-35035	P3	9.1	0.001	composer	ci4-cms-erp/ci4ms
CVE-2026-40070	P3	8.1	0.000	rubygems	bsv-sdk
CVE-2026-39891	P3	8.8	0.000	pip	praisonai
CVE-2026-39981	P3	8.8	0.000	pip	agixt
CVE-2026-40069	P3	7.5	0.000	rubygems	bsv-sdk
GHSA-2m67-wjpj-xhg9	P3	7.5	0.000	maven	tools.jackson.core:jackson-core
CVE-2026-39959	P3	7.1	0.000	nuget	Tmds.DBus
CVE-2026-34202	P3	7.5	0.003	rust	zebrad
CVE-2025-45691	P3	7.5	0.001	pip	ragas
CVE-2026-39429	P3	8.2	0.001	go	github.com/kcp-dev/kcp
CVE-2026-34377	P3	8.1	0.000	rust	zebrad

ISO27001 A.16.1 — Gestion des incidents de sécurité 28 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2025-32432	P0	10.0	0.877	Craft CMS	Craft CMS	KEVITW🦠
CVE-2026-1340	P0	9.8	0.677	Ivanti	Endpoint Manager Mobile (EPMM)	KEVITW🦠
CVE-2025-54068	P0	9.8	0.583	Laravel	Livewire	KEVITW🦠
CVE-2026-3055	P0	9.8	0.443	Citrix	NetScaler	KEVITW🦠
CVE-2025-53521	P0	9.8	0.414	F5	BIG-IP	KEVITW🦠
CVE-2026-33634	P0	8.8	0.212	Aquasecurity	Trivy	KEVITW🦠
CVE-2026-20963	P0	9.8	0.060	Microsoft	SharePoint	KEVITW🦠
CVE-2026-33017	P0	9.8	0.057	Langflow	Langflow	KEVITW🦠
CVE-2026-20131	P0	10.0	0.008	Cisco	Secure Firewall Management Center (FMC)	KEVITW🦠
CVE-2026-35616	P0	9.8	0.060	Fortinet	FortiClient EMS	KEVITW🦠
CVE-2026-5281	P0	8.8	0.033	Google	Dawn	KEVITW🦠
CVE-2025-66376	P0	7.2	0.100	Synacor	Zimbra Collaboration Suite (ZCS)	KEVITW🦠
CVE-2026-3910	P0	8.8	0.008	Google	Chromium V8	KEVITW🦠
CVE-2026-3909	P0	8.8	0.003	Google	Skia	KEVITW🦠
CVE-2025-31277	P0	8.8	0.002	Apple	Multiple Products	KEVITW🦠
CVE-2025-47813	P0	4.3	0.255	Wing FTP Server	Wing FTP Server	KEVITW🦠
CVE-2026-3502	P0	7.8	0.015	TrueConf	Client	KEVITW🦠
CVE-2025-43510	P0	7.8	0.005	Apple	Multiple Products	KEVITW🦠
CVE-2025-43520	P0	5.5	0.003	Apple	Multiple Products	KEVITW🦠
GHSA-68m9-983m-f3v5	P2	6.5	0.000	go	github.com/openfga/openfga	ITW🦠
GHSA-w8g9-x8gx-crmm	P2	0.0	0.000	npm	openclaw	ITW🦠
GHSA-fqrj-m88p-qf3v	P2	0.0	0.000	npm	openclaw	ITW🦠
GHSA-3vvq-q2qc-7rmp	P2	0.0	0.000	npm	openclaw	ITW🦠
GHSA-qx8j-g322-qj6m	P2	0.0	0.000	npm	openclaw	ITW🦠
GHSA-68x5-xx89-w9mm	P2	0.0	0.000	npm	openclaw	ITW🦠
GHSA-hhq4-97c2-p447	P2	0.0	0.000	npm	openclaw	ITW🦠
GHSA-cg6c-q2hx-69h7	P2	0.0	0.000	npm	openclaw	ITW🦠
CVE-2026-39892	P2	0.0	0.000	pip	cryptography	ITW🦠

ANSSI R14 — Mise à jour prioritaire recommandée 19 CVE(s)

CVE	Prio	CVSS	EPSS	Vendor	Produit	Signaux
CVE-2025-32432	P0	10.0	0.877	Craft CMS	Craft CMS	KEVITW🦠
CVE-2026-1340	P0	9.8	0.677	Ivanti	Endpoint Manager Mobile (EPMM)	KEVITW🦠
CVE-2025-54068	P0	9.8	0.583	Laravel	Livewire	KEVITW🦠
CVE-2026-3055	P0	9.8	0.443	Citrix	NetScaler	KEVITW🦠
CVE-2025-53521	P0	9.8	0.414	F5	BIG-IP	KEVITW🦠
CVE-2026-33634	P0	8.8	0.212	Aquasecurity	Trivy	KEVITW🦠
CVE-2026-20963	P0	9.8	0.060	Microsoft	SharePoint	KEVITW🦠
CVE-2026-33017	P0	9.8	0.057	Langflow	Langflow	KEVITW🦠
CVE-2026-20131	P0	10.0	0.008	Cisco	Secure Firewall Management Center (FMC)	KEVITW🦠
CVE-2026-35616	P0	9.8	0.060	Fortinet	FortiClient EMS	KEVITW🦠
CVE-2026-5281	P0	8.8	0.033	Google	Dawn	KEVITW🦠
CVE-2025-66376	P0	7.2	0.100	Synacor	Zimbra Collaboration Suite (ZCS)	KEVITW🦠
CVE-2026-3910	P0	8.8	0.008	Google	Chromium V8	KEVITW🦠
CVE-2026-3909	P0	8.8	0.003	Google	Skia	KEVITW🦠
CVE-2025-31277	P0	8.8	0.002	Apple	Multiple Products	KEVITW🦠
CVE-2025-47813	P0	4.3	0.255	Wing FTP Server	Wing FTP Server	KEVITW🦠
CVE-2026-3502	P0	7.8	0.015	TrueConf	Client	KEVITW🦠
CVE-2025-43510	P0	7.8	0.005	Apple	Multiple Products	KEVITW🦠
CVE-2025-43520	P0	5.5	0.003	Apple	Multiple Products	KEVITW🦠

ℹ️ À propos

Mapping automatique indicatif — ne constitue pas un avis juridique.
KEV+P0/P1 → NIS2 Art.21 · KEV+ransomware/ITW → NIS2 Art.23 · P0/P1 prestataires critiques → DORA Art.9 · CVSS≥7 → ISO27001 A.12.6 · ITW/ransomware → ISO27001 A.16.1 · CVSS≥9+REMOTE → PCI-DSS 6.3 · KEV ou CVSS≥9+ITW → ANSSI R14.
Pour un audit complet, rapprochez-vous de votre RSSI ou DPO.