FACTUALRISK Cyber Intelligence
Mise à jour : 14 Oct 2026 · 12:02
← Accueil
🗞 Briefing
💥 Menaces▾
🛡 Vulnérabilités▾
📋 Conformité▾
📚 Guides🛰 Agent Vigie
← Retour FactualRisk
ITW / KEV actifs
31
exploitation confirmée
GreyNoise trending
0
scan massif actif
PoC publics
2
dans la période
Exploit-DB nouveaux
10
PoC RSS
📡 ITW confirmé
CVE-2015-3306MAJKEVITW
ProFTPD / ProFTPDCVSS 10.0EPSS 0.995Score 257
ProFTPD Improper Access Control Vulnerability
CVE-2016-3081MAJKEVITW
Apache / StrutsCVSS 8.1EPSS 0.961Score 239
Apache Struts Command Injection Vulnerability
Adobe / Commerce and Magento CVSS 9.1EPSS 0.875Score 230
Adobe Commerce and Magento Incorrect Authorization Vulnerability
CVE-2026-96951NOUVEAUKEVITW
Microsoft / WindowsCVSS 8.8EPSS 0.000Score 211
Microsoft Windows Command Injection Vulnerability
CVE-2026-104935NOUVEAUKEVITW
Ivanti / Connect SecureCVSS 8.6EPSS 0.000Score 205
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Fortinet / FortiMailCVSS 9.8EPSS 0.022Score 184
Fortinet FortiMail Path Traversal Vulnerability
Cisco / Catalyst SD-WAN ManagerCVSS 9.8EPSS 0.018Score 179
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
Zammad GmbH / ZammadCVSS 9.8EPSS 0.013Score 178
Zammad GmbH Zammad Session Fixation Vulnerability
Apple / Multiple ProductsCVSS 8.8EPSS 0.012Score 177
Apple Multiple Products Out-of-Bounds Write Vulnerability
Zammad GmbH / ZammadCVSS 7.8EPSS 0.005Score 175
Zammad GmbH Zammad Improper Privilege Management Vulnerability
Citrix / NetScalerCVSS 7.5EPSS 0.006Score 169
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
WordPress / CoreCVSS 8.1EPSS 0.400Score 167
WordPress Core Remote File Inclusion Vulnerability
Check Point / Multiple ProductsCVSS 9.8EPSS 0.197Score 157
Check Point Multiple Products Path Traversal Vulnerability
CVE-2021-3199MAJKEVITW
ONLYOFFICE / DocsCVSS 9.8EPSS 0.194Score 157
ONLYOFFICE Docs Server Path Traversal Vulnerability
Cisco / Identity Services EngineCVSS 10.0EPSS 0.140Score 147
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
Check Point / Multiple ProductsCVSS 9.8EPSS 0.075Score 138
Check Point Multiple Products Improper Certificate Validation Vulnerability
Arista / VeloCloud OrchestratorCVSS 10.0EPSS 0.011Score 136
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
Citrix / NetScalerCVSS 9.8EPSS 0.011Score 135
Citrix NetScaler Improper Input Validation Vulnerability
F5 / BIG-IP APMCVSS 9.8EPSS 0.022Score 131
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
WSO2 / Multiple ProductsCVSS 10.0EPSS 0.006Score 131
WSO2 Multiple Products Path Traversal Vulnerability
📡 GreyNoise — Scans massifs actifs
GreyNoise non configuré — ajoutez GREYNOISE_API_KEY pour voir les scans massifs actifs.
💣 Exploit-DB — PoC publics récents
[remote] Teltonika_RutOS 00.07.06.21 - command injection
📅 01 October 2026EDB-52692
Teltonika_RutOS 00.07.06.21 - command injection
[webapps] TigerGraph_Community_Edition 4.2.4 - arbitrary file write
📅 01 October 2026EDB-52691
TigerGraph_Community_Edition 4.2.4 - arbitrary file write
[webapps] WordPress 7.0.2 - Path Travesal
📅 01 October 2026EDB-52690
WordPress 7.0.2 - Path Travesal
[webapps] Food-Ordering 1.0 - LFI
📅 01 October 2026EDB-52689
Food-Ordering 1.0 - LFI
[remote] Ecava_ntegraXor IGX_16.0.701.10 - RCE
📅 01 October 2026EDB-52688
Ecava_ntegraXor IGX_16.0.701.10 - RCE
[webapps] Krayin CRM 2.2.4 - IDOR
📅 01 October 2026EDB-52687
Krayin CRM 2.2.4 - IDOR
[webapps] SuiteCRM 8.10.1 - Authenticated SSRF
📅 01 October 2026EDB-52686
SuiteCRM 8.10.1 - Authenticated SSRF
[webapps] InvoicePlane 1.7.1 - RCE
📅 01 October 2026EDB-52685
InvoicePlane 1.7.1 - RCE
[webapps] POMS oretnom23v1.0 - SQLi vulnerabilities
📅 01 October 2026EDB-52684
POMS oretnom23v1.0 - SQLi vulnerabilities
[remote] MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE
📅 24 September 2026EDB-52683
MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE
🔬 CVEs avec PoC connu
? / ?CVSS 0.0EPSS 0.003Score 8
GPZ: Windows Exploitation Techniques: Dangling COM Object Registrations
? / ?CVSS 0.0EPSS 0.003Score 8
GPZ: Windows Exploitation Techniques: Dangling COM Object Registrations

L'écosystème

Digimoove ESN Paris — Cyber · Cloud · Automatisation IA · Observabilité NAIvigate Veille & formation IA FactualRisk est une marque de l'écosystème Digimoove