{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "macmon versions 6.x et 7.x sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "macmon",
        "vendor": {
          "name": "Belden",
          "scada": true
        }
      }
    },
    {
      "description": " NRSW versions ant\u00e9rieures \u00e0 5.0.0.104",
      "product": {
        "name": "NetModule Router Software",
        "vendor": {
          "name": "Belden",
          "scada": true
        }
      }
    }
  ],
  "affected_systems_content": "Belden indique que les versions 6.x doivent \u00eatre mises \u00e0 jour en 7.x avant de pouvoir appliquer le dernier correctif de s\u00e9curit\u00e9.",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-109619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109619"
    },
    {
      "name": "CVE-2026-109618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109618"
    }
  ],
  "initial_release_date": "2026-11-02T00:00:00",
  "last_revision_date": "2026-11-02T00:00:00",
  "links": [
    {
      "title": "Alerte CERT-FR CERTFR-2026-ALE-014 du 21 octobre 2026",
      "url": "/alerte/CERTFR-2026-ALE-014/"
    }
  ],
  "reference": "CERTFR-2026-AVI-1438",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-11-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Belden macmon et NRSW. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans macmon et NRSW",
  "vendor_advisories": [
    {
      "published_at": "2026-10-22",
      "title": "Bulletin de s\u00e9curit\u00e9 Belden PSIRT-10-Critical-PHP-Vulnerabilities-in-macmon-and-NRSW",
      "url": "https://assets.belden.com/asset/0e20ea6c-c1f5-4269-b765-e160a2bf4965/PSIRT-10-Critical-PHP-Vulnerabilities-in-macmon-and-NRSW.pdf"
    }
  ]
}