cvelistv5 - cve-2026-8286

CVE-2026-8286 (GCVE-0-2026-8286)

Vulnerability from cvelistv5

Published

2026-07-03 06:14

Modified

2026-07-06 17:33

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-295 Improper Certificate Validation

Summary

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not.

References

URL

Tags

	https://curl.se/docs/CVE-2026-8286.json
	https://curl.se/docs/CVE-2026-8286.html
	https://hackerone.com/reports/3718195

Impacted products

	Vendor	Product	Version
	curl	curl	Version: 8.20.0 ≤ 8.20.0 Version: 8.19.0 ≤ 8.19.0 Version: 8.18.0 ≤ 8.18.0 Version: 8.17.0 ≤ 8.17.0 Version: 8.16.0 ≤ 8.16.0 Version: 8.15.0 ≤ 8.15.0 Version: 8.14.1 ≤ 8.14.1 Version: 8.14.0 ≤ 8.14.0 Version: 8.13.0 ≤ 8.13.0 Version: 8.12.1 ≤ 8.12.1 Version: 8.12.0 ≤ 8.12.0 Version: 8.11.1 ≤ 8.11.1 Version: 8.11.0 ≤ 8.11.0 Version: 8.10.1 ≤ 8.10.1 Version: 8.10.0 ≤ 8.10.0 Version: 8.9.1 ≤ 8.9.1 Version: 8.9.0 ≤ 8.9.0 Version: 8.8.0 ≤ 8.8.0 Version: 8.7.1 ≤ 8.7.1 Version: 8.7.0 ≤ 8.7.0 Version: 8.6.0 ≤ 8.6.0 Version: 8.5.0 ≤ 8.5.0 Version: 8.4.0 ≤ 8.4.0 Version: 8.3.0 ≤ 8.3.0 Version: 8.2.1 ≤ 8.2.1 Version: 8.2.0 ≤ 8.2.0 Version: 8.1.2 ≤ 8.1.2 Version: 8.1.1 ≤ 8.1.1 Version: 8.1.0 ≤ 8.1.0 Version: 8.0.1 ≤ 8.0.1 Version: 8.0.0 ≤ 8.0.0 Version: 7.88.1 ≤ 7.88.1 Version: 7.88.0 ≤ 7.88.0 Version: 7.87.0 ≤ 7.87.0 Version: 7.86.0 ≤ 7.86.0 Version: 7.85.0 ≤ 7.85.0 Version: 7.84.0 ≤ 7.84.0 Version: 7.83.1 ≤ 7.83.1 Version: 7.83.0 ≤ 7.83.0 Version: 7.82.0 ≤ 7.82.0 Version: 7.81.0 ≤ 7.81.0 Version: 7.80.0 ≤ 7.80.0 Version: 7.79.1 ≤ 7.79.1 Version: 7.79.0 ≤ 7.79.0 Version: 7.78.0 ≤ 7.78.0 Version: 7.77.0 ≤ 7.77.0 Version: 7.76.1 ≤ 7.76.1 Version: 7.76.0 ≤ 7.76.0 Version: 7.75.0 ≤ 7.75.0 Version: 7.74.0 ≤ 7.74.0 Version: 7.73.0 ≤ 7.73.0 Version: 7.72.0 ≤ 7.72.0 Version: 7.71.1 ≤ 7.71.1 Version: 7.71.0 ≤ 7.71.0 Version: 7.70.0 ≤ 7.70.0 Version: 7.69.1 ≤ 7.69.1 Version: 7.69.0 ≤ 7.69.0 Version: 7.68.0 ≤ 7.68.0 Version: 7.67.0 ≤ 7.67.0 Version: 7.66.0 ≤ 7.66.0 Version: 7.65.3 ≤ 7.65.3 Version: 7.65.2 ≤ 7.65.2 Version: 7.65.1 ≤ 7.65.1 Version: 7.65.0 ≤ 7.65.0 Version: 7.64.1 ≤ 7.64.1 Version: 7.64.0 ≤ 7.64.0 Version: 7.63.0 ≤ 7.63.0 Version: 7.62.0 ≤ 7.62.0 Version: 7.61.1 ≤ 7.61.1 Version: 7.61.0 ≤ 7.61.0 Version: 7.60.0 ≤ 7.60.0 Version: 7.59.0 ≤ 7.59.0 Version: 7.58.0 ≤ 7.58.0 Version: 7.57.0 ≤ 7.57.0 Version: 7.56.1 ≤ 7.56.1 Version: 7.56.0 ≤ 7.56.0 Version: 7.55.1 ≤ 7.55.1 Version: 7.55.0 ≤ 7.55.0 Version: 7.54.1 ≤ 7.54.1 Version: 7.54.0 ≤ 7.54.0 Version: 7.53.1 ≤ 7.53.1 Version: 7.53.0 ≤ 7.53.0 Version: 7.52.1 ≤ 7.52.1 Version: 7.52.0 ≤ 7.52.0 Version: 7.51.0 ≤ 7.51.0 Version: 7.50.3 ≤ 7.50.3 Version: 7.50.2 ≤ 7.50.2 Version: 7.50.1 ≤ 7.50.1 Version: 7.50.0 ≤ 7.50.0 Version: 7.49.1 ≤ 7.49.1 Version: 7.49.0 ≤ 7.49.0 Version: 7.48.0 ≤ 7.48.0 Version: 7.47.1 ≤ 7.47.1 Version: 7.47.0 ≤ 7.47.0 Version: 7.46.0 ≤ 7.46.0 Version: 7.45.0 ≤ 7.45.0 Version: 7.44.0 ≤ 7.44.0 Version: 7.43.0 ≤ 7.43.0 Version: 7.42.1 ≤ 7.42.1 Version: 7.42.0 ≤ 7.42.0 Version: 7.41.0 ≤ 7.41.0 Version: 7.40.0 ≤ 7.40.0 Version: 7.39.0 ≤ 7.39.0 Version: 7.38.0 ≤ 7.38.0 Version: 7.37.1 ≤ 7.37.1 Version: 7.37.0 ≤ 7.37.0 Version: 7.36.0 ≤ 7.36.0 Version: 7.35.0 ≤ 7.35.0 Version: 7.34.0 ≤ 7.34.0 Version: 7.33.0 ≤ 7.33.0 Version: 7.32.0 ≤ 7.32.0 Version: 7.31.0 ≤ 7.31.0 Version: 7.30.0 ≤ 7.30.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-8286",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-06T17:33:16.174641Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-06T17:33:50.416Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://hackerone.com/reports/3718195"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "curl",
          "vendor": "curl",
          "versions": [
            {
              "lessThanOrEqual": "8.20.0",
              "status": "affected",
              "version": "8.20.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.19.0",
              "status": "affected",
              "version": "8.19.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.18.0",
              "status": "affected",
              "version": "8.18.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.17.0",
              "status": "affected",
              "version": "8.17.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.16.0",
              "status": "affected",
              "version": "8.16.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.15.0",
              "status": "affected",
              "version": "8.15.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.14.1",
              "status": "affected",
              "version": "8.14.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.14.0",
              "status": "affected",
              "version": "8.14.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.13.0",
              "status": "affected",
              "version": "8.13.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.12.1",
              "status": "affected",
              "version": "8.12.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.12.0",
              "status": "affected",
              "version": "8.12.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.11.1",
              "status": "affected",
              "version": "8.11.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.11.0",
              "status": "affected",
              "version": "8.11.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.10.1",
              "status": "affected",
              "version": "8.10.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.10.0",
              "status": "affected",
              "version": "8.10.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.9.1",
              "status": "affected",
              "version": "8.9.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.9.0",
              "status": "affected",
              "version": "8.9.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.8.0",
              "status": "affected",
              "version": "8.8.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.7.1",
              "status": "affected",
              "version": "8.7.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.7.0",
              "status": "affected",
              "version": "8.7.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.6.0",
              "status": "affected",
              "version": "8.6.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.0",
              "status": "affected",
              "version": "8.5.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.4.0",
              "status": "affected",
              "version": "8.4.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.3.0",
              "status": "affected",
              "version": "8.3.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.2.1",
              "status": "affected",
              "version": "8.2.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.2.0",
              "status": "affected",
              "version": "8.2.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.2",
              "status": "affected",
              "version": "8.1.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.1",
              "status": "affected",
              "version": "8.1.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.0",
              "status": "affected",
              "version": "8.1.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.0.1",
              "status": "affected",
              "version": "8.0.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.0.0",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.88.1",
              "status": "affected",
              "version": "7.88.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.88.0",
              "status": "affected",
              "version": "7.88.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.87.0",
              "status": "affected",
              "version": "7.87.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.86.0",
              "status": "affected",
              "version": "7.86.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.85.0",
              "status": "affected",
              "version": "7.85.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.84.0",
              "status": "affected",
              "version": "7.84.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.83.1",
              "status": "affected",
              "version": "7.83.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.83.0",
              "status": "affected",
              "version": "7.83.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.82.0",
              "status": "affected",
              "version": "7.82.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.81.0",
              "status": "affected",
              "version": "7.81.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.80.0",
              "status": "affected",
              "version": "7.80.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.79.1",
              "status": "affected",
              "version": "7.79.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.79.0",
              "status": "affected",
              "version": "7.79.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.78.0",
              "status": "affected",
              "version": "7.78.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.77.0",
              "status": "affected",
              "version": "7.77.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.76.1",
              "status": "affected",
              "version": "7.76.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.76.0",
              "status": "affected",
              "version": "7.76.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.75.0",
              "status": "affected",
              "version": "7.75.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.74.0",
              "status": "affected",
              "version": "7.74.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.73.0",
              "status": "affected",
              "version": "7.73.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.72.0",
              "status": "affected",
              "version": "7.72.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.71.1",
              "status": "affected",
              "version": "7.71.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.71.0",
              "status": "affected",
              "version": "7.71.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.70.0",
              "status": "affected",
              "version": "7.70.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.69.1",
              "status": "affected",
              "version": "7.69.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.69.0",
              "status": "affected",
              "version": "7.69.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.68.0",
              "status": "affected",
              "version": "7.68.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.67.0",
              "status": "affected",
              "version": "7.67.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.66.0",
              "status": "affected",
              "version": "7.66.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.65.3",
              "status": "affected",
              "version": "7.65.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.65.2",
              "status": "affected",
              "version": "7.65.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.65.1",
              "status": "affected",
              "version": "7.65.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.65.0",
              "status": "affected",
              "version": "7.65.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.64.1",
              "status": "affected",
              "version": "7.64.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.64.0",
              "status": "affected",
              "version": "7.64.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.63.0",
              "status": "affected",
              "version": "7.63.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.62.0",
              "status": "affected",
              "version": "7.62.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.61.1",
              "status": "affected",
              "version": "7.61.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.61.0",
              "status": "affected",
              "version": "7.61.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.60.0",
              "status": "affected",
              "version": "7.60.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.59.0",
              "status": "affected",
              "version": "7.59.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.58.0",
              "status": "affected",
              "version": "7.58.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.57.0",
              "status": "affected",
              "version": "7.57.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.56.1",
              "status": "affected",
              "version": "7.56.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.56.0",
              "status": "affected",
              "version": "7.56.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.55.1",
              "status": "affected",
              "version": "7.55.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.55.0",
              "status": "affected",
              "version": "7.55.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.54.1",
              "status": "affected",
              "version": "7.54.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.54.0",
              "status": "affected",
              "version": "7.54.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.53.1",
              "status": "affected",
              "version": "7.53.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.53.0",
              "status": "affected",
              "version": "7.53.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.52.1",
              "status": "affected",
              "version": "7.52.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.52.0",
              "status": "affected",
              "version": "7.52.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.51.0",
              "status": "affected",
              "version": "7.51.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.50.3",
              "status": "affected",
              "version": "7.50.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.50.2",
              "status": "affected",
              "version": "7.50.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.50.1",
              "status": "affected",
              "version": "7.50.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.50.0",
              "status": "affected",
              "version": "7.50.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.49.1",
              "status": "affected",
              "version": "7.49.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.49.0",
              "status": "affected",
              "version": "7.49.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.48.0",
              "status": "affected",
              "version": "7.48.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.47.1",
              "status": "affected",
              "version": "7.47.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.47.0",
              "status": "affected",
              "version": "7.47.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.46.0",
              "status": "affected",
              "version": "7.46.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.45.0",
              "status": "affected",
              "version": "7.45.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.44.0",
              "status": "affected",
              "version": "7.44.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.43.0",
              "status": "affected",
              "version": "7.43.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.42.1",
              "status": "affected",
              "version": "7.42.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.42.0",
              "status": "affected",
              "version": "7.42.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.41.0",
              "status": "affected",
              "version": "7.41.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.40.0",
              "status": "affected",
              "version": "7.40.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.39.0",
              "status": "affected",
              "version": "7.39.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.38.0",
              "status": "affected",
              "version": "7.38.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.37.1",
              "status": "affected",
              "version": "7.37.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.37.0",
              "status": "affected",
              "version": "7.37.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.36.0",
              "status": "affected",
              "version": "7.36.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.35.0",
              "status": "affected",
              "version": "7.35.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.34.0",
              "status": "affected",
              "version": "7.34.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.33.0",
              "status": "affected",
              "version": "7.33.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.32.0",
              "status": "affected",
              "version": "7.32.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.31.0",
              "status": "affected",
              "version": "7.31.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.30.0",
              "status": "affected",
              "version": "7.30.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Andrew Nesbitt (powered by Mythos)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Stefan Eissing"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability exists where a new transfer that uses STARTTLS to upgrade the\nconnection might reuse an existing live connection even though the TLS\nconfiguration mismatches so it should not."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-295 Improper Certificate Validation",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-03T06:14:17.541Z",
        "orgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
        "shortName": "curl"
      },
      "references": [
        {
          "name": "json",
          "url": "https://curl.se/docs/CVE-2026-8286.json"
        },
        {
          "name": "www",
          "url": "https://curl.se/docs/CVE-2026-8286.html"
        },
        {
          "name": "issue",
          "url": "https://hackerone.com/reports/3718195"
        }
      ],
      "title": "wrong STARTTLS connection reuse"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
    "assignerShortName": "curl",
    "cveId": "CVE-2026-8286",
    "datePublished": "2026-07-03T06:14:17.541Z",
    "dateReserved": "2026-05-11T07:06:37.906Z",
    "dateUpdated": "2026-07-06T17:33:50.416Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.1, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-8286\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-07-06T17:33:16.174641Z\"}}}], \"references\": [{\"url\": \"https://hackerone.com/reports/3718195\", \"tags\": [\"exploit\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-07-06T17:33:45.469Z\"}}], \"cna\": {\"title\": \"wrong STARTTLS connection reuse\", \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Andrew Nesbitt (powered by Mythos)\"}, {\"lang\": \"en\", \"type\": \"remediation developer\", \"value\": \"Stefan Eissing\"}], \"affected\": [{\"vendor\": \"curl\", \"product\": \"curl\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.20.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.20.0\"}, {\"status\": \"affected\", \"version\": \"8.19.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.19.0\"}, {\"status\": \"affected\", \"version\": \"8.18.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.18.0\"}, {\"status\": \"affected\", \"version\": \"8.17.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.17.0\"}, {\"status\": \"affected\", \"version\": \"8.16.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.16.0\"}, {\"status\": \"affected\", \"version\": \"8.15.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.15.0\"}, {\"status\": \"affected\", \"version\": \"8.14.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.14.1\"}, {\"status\": \"affected\", \"version\": \"8.14.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.14.0\"}, {\"status\": \"affected\", \"version\": \"8.13.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.13.0\"}, {\"status\": \"affected\", \"version\": \"8.12.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.12.1\"}, {\"status\": \"affected\", \"version\": \"8.12.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.12.0\"}, {\"status\": \"affected\", \"version\": \"8.11.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.11.1\"}, {\"status\": \"affected\", \"version\": \"8.11.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.11.0\"}, {\"status\": \"affected\", \"version\": \"8.10.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.10.1\"}, {\"status\": \"affected\", \"version\": \"8.10.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.10.0\"}, {\"status\": \"affected\", \"version\": \"8.9.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.9.1\"}, {\"status\": \"affected\", \"version\": \"8.9.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.9.0\"}, {\"status\": \"affected\", \"version\": \"8.8.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.8.0\"}, {\"status\": \"affected\", \"version\": \"8.7.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.7.1\"}, {\"status\": \"affected\", \"version\": \"8.7.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.7.0\"}, {\"status\": \"affected\", \"version\": \"8.6.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.6.0\"}, {\"status\": \"affected\", \"version\": \"8.5.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.5.0\"}, {\"status\": \"affected\", \"version\": \"8.4.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.4.0\"}, {\"status\": \"affected\", \"version\": \"8.3.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.3.0\"}, {\"status\": \"affected\", \"version\": \"8.2.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.2.1\"}, {\"status\": \"affected\", \"version\": \"8.2.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.2.0\"}, {\"status\": \"affected\", \"version\": \"8.1.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.1.2\"}, {\"status\": \"affected\", \"version\": \"8.1.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.1.1\"}, {\"status\": \"affected\", \"version\": \"8.1.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.1.0\"}, {\"status\": \"affected\", \"version\": \"8.0.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.0.1\"}, {\"status\": \"affected\", \"version\": \"8.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"8.0.0\"}, {\"status\": \"affected\", \"version\": \"7.88.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.88.1\"}, {\"status\": \"affected\", \"version\": \"7.88.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.88.0\"}, {\"status\": \"affected\", \"version\": \"7.87.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.87.0\"}, {\"status\": \"affected\", \"version\": \"7.86.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.86.0\"}, {\"status\": \"affected\", \"version\": \"7.85.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.85.0\"}, {\"status\": \"affected\", \"version\": \"7.84.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.84.0\"}, {\"status\": \"affected\", \"version\": \"7.83.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.83.1\"}, {\"status\": \"affected\", \"version\": \"7.83.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.83.0\"}, {\"status\": \"affected\", \"version\": \"7.82.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.82.0\"}, {\"status\": \"affected\", \"version\": \"7.81.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.81.0\"}, {\"status\": \"affected\", \"version\": \"7.80.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.80.0\"}, {\"status\": \"affected\", \"version\": \"7.79.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.79.1\"}, {\"status\": \"affected\", \"version\": \"7.79.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.79.0\"}, {\"status\": \"affected\", \"version\": \"7.78.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.78.0\"}, {\"status\": \"affected\", \"version\": \"7.77.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.77.0\"}, {\"status\": \"affected\", \"version\": \"7.76.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.76.1\"}, {\"status\": \"affected\", \"version\": \"7.76.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.76.0\"}, {\"status\": \"affected\", \"version\": \"7.75.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.75.0\"}, {\"status\": \"affected\", \"version\": \"7.74.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.74.0\"}, {\"status\": \"affected\", \"version\": \"7.73.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.73.0\"}, {\"status\": \"affected\", \"version\": \"7.72.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.72.0\"}, {\"status\": \"affected\", \"version\": \"7.71.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.71.1\"}, {\"status\": \"affected\", \"version\": \"7.71.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.71.0\"}, {\"status\": \"affected\", \"version\": \"7.70.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.70.0\"}, {\"status\": \"affected\", \"version\": \"7.69.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.69.1\"}, {\"status\": \"affected\", \"version\": \"7.69.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.69.0\"}, {\"status\": \"affected\", \"version\": \"7.68.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.68.0\"}, {\"status\": \"affected\", \"version\": \"7.67.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.67.0\"}, {\"status\": \"affected\", \"version\": \"7.66.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.66.0\"}, {\"status\": \"affected\", \"version\": \"7.65.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.65.3\"}, {\"status\": \"affected\", \"version\": \"7.65.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.65.2\"}, {\"status\": \"affected\", \"version\": \"7.65.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.65.1\"}, {\"status\": \"affected\", \"version\": \"7.65.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.65.0\"}, {\"status\": \"affected\", \"version\": \"7.64.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.64.1\"}, {\"status\": \"affected\", \"version\": \"7.64.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.64.0\"}, {\"status\": \"affected\", \"version\": \"7.63.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.63.0\"}, {\"status\": \"affected\", \"version\": \"7.62.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.62.0\"}, {\"status\": \"affected\", \"version\": \"7.61.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.61.1\"}, {\"status\": \"affected\", \"version\": \"7.61.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.61.0\"}, {\"status\": \"affected\", \"version\": \"7.60.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.60.0\"}, {\"status\": \"affected\", \"version\": \"7.59.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.59.0\"}, {\"status\": \"affected\", \"version\": \"7.58.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.58.0\"}, {\"status\": \"affected\", \"version\": \"7.57.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.57.0\"}, {\"status\": \"affected\", \"version\": \"7.56.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.56.1\"}, {\"status\": \"affected\", \"version\": \"7.56.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.56.0\"}, {\"status\": \"affected\", \"version\": \"7.55.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.55.1\"}, {\"status\": \"affected\", \"version\": \"7.55.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.55.0\"}, {\"status\": \"affected\", \"version\": \"7.54.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.54.1\"}, {\"status\": \"affected\", \"version\": \"7.54.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.54.0\"}, {\"status\": \"affected\", \"version\": \"7.53.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.53.1\"}, {\"status\": \"affected\", \"version\": \"7.53.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.53.0\"}, {\"status\": \"affected\", \"version\": \"7.52.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.52.1\"}, {\"status\": \"affected\", \"version\": \"7.52.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.52.0\"}, {\"status\": \"affected\", \"version\": \"7.51.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.51.0\"}, {\"status\": \"affected\", \"version\": \"7.50.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.50.3\"}, {\"status\": \"affected\", \"version\": \"7.50.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.50.2\"}, {\"status\": \"affected\", \"version\": \"7.50.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.50.1\"}, {\"status\": \"affected\", \"version\": \"7.50.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.50.0\"}, {\"status\": \"affected\", \"version\": \"7.49.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.49.1\"}, {\"status\": \"affected\", \"version\": \"7.49.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.49.0\"}, {\"status\": \"affected\", \"version\": \"7.48.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.48.0\"}, {\"status\": \"affected\", \"version\": \"7.47.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.47.1\"}, {\"status\": \"affected\", \"version\": \"7.47.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.47.0\"}, {\"status\": \"affected\", \"version\": \"7.46.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.46.0\"}, {\"status\": \"affected\", \"version\": \"7.45.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.45.0\"}, {\"status\": \"affected\", \"version\": \"7.44.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.44.0\"}, {\"status\": \"affected\", \"version\": \"7.43.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.43.0\"}, {\"status\": \"affected\", \"version\": \"7.42.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.42.1\"}, {\"status\": \"affected\", \"version\": \"7.42.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.42.0\"}, {\"status\": \"affected\", \"version\": \"7.41.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.41.0\"}, {\"status\": \"affected\", \"version\": \"7.40.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.40.0\"}, {\"status\": \"affected\", \"version\": \"7.39.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.39.0\"}, {\"status\": \"affected\", \"version\": \"7.38.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.38.0\"}, {\"status\": \"affected\", \"version\": \"7.37.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.37.1\"}, {\"status\": \"affected\", \"version\": \"7.37.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.37.0\"}, {\"status\": \"affected\", \"version\": \"7.36.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.36.0\"}, {\"status\": \"affected\", \"version\": \"7.35.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.35.0\"}, {\"status\": \"affected\", \"version\": \"7.34.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.34.0\"}, {\"status\": \"affected\", \"version\": \"7.33.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.33.0\"}, {\"status\": \"affected\", \"version\": \"7.32.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.32.0\"}, {\"status\": \"affected\", \"version\": \"7.31.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.31.0\"}, {\"status\": \"affected\", \"version\": \"7.30.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.30.0\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://curl.se/docs/CVE-2026-8286.json\", \"name\": \"json\"}, {\"url\": \"https://curl.se/docs/CVE-2026-8286.html\", \"name\": \"www\"}, {\"url\": \"https://hackerone.com/reports/3718195\", \"name\": \"issue\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability exists where a new transfer that uses STARTTLS to upgrade the\\nconnection might reuse an existing live connection even though the TLS\\nconfiguration mismatches so it should not.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-295 Improper Certificate Validation\"}]}], \"providerMetadata\": {\"orgId\": \"2499f714-1537-4658-8207-48ae4bb9eae9\", \"shortName\": \"curl\", \"dateUpdated\": \"2026-07-03T06:14:17.541Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-8286\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-06T17:33:50.416Z\", \"dateReserved\": \"2026-05-11T07:06:37.906Z\", \"assignerOrgId\": \"2499f714-1537-4658-8207-48ae4bb9eae9\", \"datePublished\": \"2026-07-03T06:14:17.541Z\", \"assignerShortName\": \"curl\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-0873

Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans Microsoft Azure Linux. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Microsoft	Azure Linux	azl3 libXfont2 2.0.6-1 versions antérieures à 2.0.8-1
Microsoft	Azure Linux	azl3 telegraf 1.31.0-23 versions antérieures à 1.31.0-25
Microsoft	Azure Linux	azl3 clamav 1.5.2-3 versions antérieures à 1.5.3-1
Microsoft	Azure Linux	azl3 glib 2.78.6-9 versions antérieures à 2.78.6-10
Microsoft	Azure Linux	azl3 mtr 0.95-3 versions antérieures à 0.95-4
Microsoft	Azure Linux	azl3 xorg-x11-server-Xwayland 24.1.12-1 versions antérieures à 24.1.13-1
Microsoft	Azure Linux	azl3 python-msgpack 1.0.5-2 versions antérieures à 1.0.5-3
Microsoft	Azure Linux	azl3 curl 8.11.1-9 versions antérieures à 8.11.1-10
Microsoft	Azure Linux	azl3 erlang 26.2.5.21-2 versions antérieures à 26.2.5.21-3
Microsoft	Azure Linux	azl3 openssh 9.8p1-8 versions antérieures à 9.8p1-9
Microsoft	Azure Linux	azl3 python-setuptools 69.0.3-5 versions antérieures à 69.0.3-6
Microsoft	Azure Linux	azl3 nodejs 24.17.0-1 versions antérieures à 24.17.0-2
Microsoft	Azure Linux	azl3 vim 9.2.0735-1 versions antérieures à 9.2.0782-1
Microsoft	Azure Linux	azl3 keras 3.3.3-7 versions antérieures à 3.3.3-8
Microsoft	Azure Linux	azl3 perl-DBI 1.643-5 versions antérieures à 1.650-1

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft Azure Linux CVE-2026-58013	2026-07-01	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-9079	2026-07-04	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-56001	2026-07-09	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-20243	2026-07-11	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-60001	2026-07-09	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-20214	2026-07-11	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-8927	2026-07-04	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-20216	2026-07-11	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-54908	2026-07-09	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-58011	2026-07-01	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-58012	2026-07-01	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-8926	2026-07-04	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-59997	2026-07-09	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-56002	2026-07-09	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-60002	2026-07-09	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-8932	2026-07-04	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-57585	2026-07-03	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-12064	2026-07-04	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-20215	2026-07-11	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-56000	2026-07-09	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-56003	2026-07-09	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-14380	2026-07-11	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-58014	2026-07-01	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-8286	2026-07-04	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-58015	2026-07-01	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-8458	2026-07-04	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-11525	2026-06-27	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-59996	2026-07-09	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-10536	2026-07-04	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-20213	2026-07-11	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-59999	2026-07-09	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-59995	2026-07-09	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-20244	2026-07-11	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-14740	2026-07-11	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-14461	2026-07-11	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-58016	2026-07-01	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-12480	2026-07-07	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-58010	2026-07-01	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-59856	2026-07-11	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-60000	2026-07-09	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-14739	2026-07-11	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-54886	2026-07-07	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-59890	2026-07-11	vendor-advisory
Bulletin de sécurité Microsoft Azure Linux CVE-2026-20217	2026-07-11	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "azl3 libXfont2 2.0.6-1 versions ant\u00e9rieures \u00e0 2.0.8-1",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 telegraf 1.31.0-23 versions ant\u00e9rieures \u00e0 1.31.0-25",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 clamav 1.5.2-3 versions ant\u00e9rieures \u00e0 1.5.3-1",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 glib 2.78.6-9 versions ant\u00e9rieures \u00e0 2.78.6-10",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 mtr 0.95-3 versions ant\u00e9rieures \u00e0 0.95-4",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 xorg-x11-server-Xwayland 24.1.12-1 versions ant\u00e9rieures \u00e0 24.1.13-1",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 python-msgpack 1.0.5-2 versions ant\u00e9rieures \u00e0 1.0.5-3",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 curl 8.11.1-9 versions ant\u00e9rieures \u00e0 8.11.1-10",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 erlang 26.2.5.21-2 versions ant\u00e9rieures \u00e0 26.2.5.21-3",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 openssh 9.8p1-8 versions ant\u00e9rieures \u00e0 9.8p1-9",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 python-setuptools 69.0.3-5 versions ant\u00e9rieures \u00e0 69.0.3-6",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 nodejs 24.17.0-1 versions ant\u00e9rieures \u00e0 24.17.0-2",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 vim 9.2.0735-1 versions ant\u00e9rieures \u00e0 9.2.0782-1",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 keras 3.3.3-7 versions ant\u00e9rieures \u00e0 3.3.3-8",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 perl-DBI 1.643-5 versions ant\u00e9rieures \u00e0 1.650-1",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-14380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14380"
    },
    {
      "name": "CVE-2026-14461",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14461"
    },
    {
      "name": "CVE-2026-59996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59996"
    },
    {
      "name": "CVE-2026-59995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59995"
    },
    {
      "name": "CVE-2026-59999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59999"
    },
    {
      "name": "CVE-2026-20216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20216"
    },
    {
      "name": "CVE-2026-58013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58013"
    },
    {
      "name": "CVE-2026-8926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8926"
    },
    {
      "name": "CVE-2026-20243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20243"
    },
    {
      "name": "CVE-2026-8458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8458"
    },
    {
      "name": "CVE-2026-14739",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14739"
    },
    {
      "name": "CVE-2026-58015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58015"
    },
    {
      "name": "CVE-2026-56000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56000"
    },
    {
      "name": "CVE-2026-58014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58014"
    },
    {
      "name": "CVE-2026-20215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20215"
    },
    {
      "name": "CVE-2026-58012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58012"
    },
    {
      "name": "CVE-2026-59890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59890"
    },
    {
      "name": "CVE-2026-10536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10536"
    },
    {
      "name": "CVE-2026-20213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20213"
    },
    {
      "name": "CVE-2026-8932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8932"
    },
    {
      "name": "CVE-2026-11525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11525"
    },
    {
      "name": "CVE-2026-59997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59997"
    },
    {
      "name": "CVE-2026-58010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58010"
    },
    {
      "name": "CVE-2026-12064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12064"
    },
    {
      "name": "CVE-2026-12480",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12480"
    },
    {
      "name": "CVE-2026-20214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20214"
    },
    {
      "name": "CVE-2026-60002",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-60002"
    },
    {
      "name": "CVE-2026-9079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9079"
    },
    {
      "name": "CVE-2026-56003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56003"
    },
    {
      "name": "CVE-2026-59856",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59856"
    },
    {
      "name": "CVE-2026-20217",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20217"
    },
    {
      "name": "CVE-2026-58011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58011"
    },
    {
      "name": "CVE-2026-58016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58016"
    },
    {
      "name": "CVE-2026-60001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-60001"
    },
    {
      "name": "CVE-2026-14740",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14740"
    },
    {
      "name": "CVE-2026-20244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20244"
    },
    {
      "name": "CVE-2026-57585",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57585"
    },
    {
      "name": "CVE-2026-8927",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8927"
    },
    {
      "name": "CVE-2026-60000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-60000"
    },
    {
      "name": "CVE-2026-54908",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54908"
    },
    {
      "name": "CVE-2026-56002",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56002"
    },
    {
      "name": "CVE-2026-54886",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54886"
    },
    {
      "name": "CVE-2026-56001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56001"
    },
    {
      "name": "CVE-2026-8286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8286"
    }
  ],
  "initial_release_date": "2026-07-15T00:00:00",
  "last_revision_date": "2026-07-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0873",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-07-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Azure Linux. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Azure Linux",
  "vendor_advisories": [
    {
      "published_at": "2026-07-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-58013",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58013"
    },
    {
      "published_at": "2026-07-04",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-9079",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9079"
    },
    {
      "published_at": "2026-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-56001",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56001"
    },
    {
      "published_at": "2026-07-11",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-20243",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20243"
    },
    {
      "published_at": "2026-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-60001",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-60001"
    },
    {
      "published_at": "2026-07-11",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-20214",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20214"
    },
    {
      "published_at": "2026-07-04",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-8927",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8927"
    },
    {
      "published_at": "2026-07-11",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-20216",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20216"
    },
    {
      "published_at": "2026-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-54908",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54908"
    },
    {
      "published_at": "2026-07-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-58011",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58011"
    },
    {
      "published_at": "2026-07-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-58012",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58012"
    },
    {
      "published_at": "2026-07-04",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-8926",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8926"
    },
    {
      "published_at": "2026-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-59997",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59997"
    },
    {
      "published_at": "2026-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-56002",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56002"
    },
    {
      "published_at": "2026-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-60002",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-60002"
    },
    {
      "published_at": "2026-07-04",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-8932",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8932"
    },
    {
      "published_at": "2026-07-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-57585",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57585"
    },
    {
      "published_at": "2026-07-04",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-12064",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12064"
    },
    {
      "published_at": "2026-07-11",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-20215",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20215"
    },
    {
      "published_at": "2026-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-56000",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56000"
    },
    {
      "published_at": "2026-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-56003",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56003"
    },
    {
      "published_at": "2026-07-11",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-14380",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14380"
    },
    {
      "published_at": "2026-07-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-58014",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58014"
    },
    {
      "published_at": "2026-07-04",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-8286",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8286"
    },
    {
      "published_at": "2026-07-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-58015",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58015"
    },
    {
      "published_at": "2026-07-04",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-8458",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8458"
    },
    {
      "published_at": "2026-06-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-11525",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11525"
    },
    {
      "published_at": "2026-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-59996",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59996"
    },
    {
      "published_at": "2026-07-04",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-10536",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10536"
    },
    {
      "published_at": "2026-07-11",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-20213",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20213"
    },
    {
      "published_at": "2026-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-59999",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59999"
    },
    {
      "published_at": "2026-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-59995",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59995"
    },
    {
      "published_at": "2026-07-11",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-20244",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20244"
    },
    {
      "published_at": "2026-07-11",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-14740",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14740"
    },
    {
      "published_at": "2026-07-11",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-14461",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14461"
    },
    {
      "published_at": "2026-07-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-58016",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58016"
    },
    {
      "published_at": "2026-07-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-12480",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12480"
    },
    {
      "published_at": "2026-07-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-58010",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58010"
    },
    {
      "published_at": "2026-07-11",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-59856",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59856"
    },
    {
      "published_at": "2026-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-60000",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-60000"
    },
    {
      "published_at": "2026-07-11",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-14739",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14739"
    },
    {
      "published_at": "2026-07-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-54886",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54886"
    },
    {
      "published_at": "2026-07-11",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-59890",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59890"
    },
    {
      "published_at": "2026-07-11",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Azure Linux CVE-2026-20217",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20217"
    }
  ]
}

De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
IBM	Db2	Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions v4.8 à v5.3.x antérieures à v5.4 patch 3
IBM	AIX	AIX versions 7.3.x sans le correctif de sécurité curl_fix11.tar
IBM	QRadar	QRadar Data Synchronization App versions antérieures à 4.0.0
IBM	QRadar	QRadar Pulse App versions antérieures à 2.2.17
IBM	WebSphere Application Server	WebSphere Application Server versions 9.0.x sans les correctifs de sécurité temporaires antérieures à 9.0.5.29 (disponibilité prévue pour le troisième trimestre 2026)
IBM	Sterling Control Center	Sterling Control Center versions 6.3.1.0 sans le correctif iFix10
IBM	WebSphere Application Server	WebSphere Application Server versions 8.5.x sans les correctifs de sécurité temporaires antérieures à 8.5.5.31 (disponibilité prévue pour le troisième trimestre 2026)
IBM	Sterling Control Center	Sterling Control Center versions 6.4.2.0 sans le correctif iFix05
IBM	Sterling	Sterling External Authentication Server versions 6.1.x antérieures à 6.1.1.4 GA
IBM	QRadar	QRadar SIEM versions 7.5.x antérieures à 7.5.0 UP15 IF05
IBM	Sterling B2B Integrator	Sterling B2B Integrator et Sterling File Gateway versions 6.2.0.x antérieures à 6.2.0.6_1
IBM	Sterling B2B Integrator	Sterling B2B Integrator et Sterling File Gateway versions 6.2.1.x antérieures à 6.2.1.2
IBM	Sterling Control Center	Sterling Control Center versions 6.4.1.0 sans le correctif iFix04
IBM	Sterling B2B Integrator	Sterling B2B Integrator et Sterling File Gateway versions 6.2.2.x antérieures à 6.2.2.1
IBM	WebSphere Application Server	WebSphere Application Server Liberty versions antérieures à 26.0.0.9 (disponibilité prévue pour le troisième trimestre 2026)

References

Title

Publication Time

Tags

Bulletin de sécurité IBM 7281450	2026-07-27	vendor-advisory
Bulletin de sécurité IBM 7281625	2026-07-28	vendor-advisory
Bulletin de sécurité IBM 7281949	2026-07-30	vendor-advisory
Bulletin de sécurité IBM 7277692	2026-07-27	vendor-advisory
Bulletin de sécurité IBM 7281628	2026-07-28	vendor-advisory
Bulletin de sécurité IBM 7281135	2026-07-24	vendor-advisory
Bulletin de sécurité IBM 7281375	2026-07-27	vendor-advisory
Bulletin de sécurité IBM 7281743	2026-07-29	vendor-advisory
Bulletin de sécurité IBM 7281373	2026-07-27	vendor-advisory
Bulletin de sécurité IBM 7281388	2026-07-27	vendor-advisory
Bulletin de sécurité IBM 7281721	2026-07-28	vendor-advisory
Bulletin de sécurité IBM 7281369	2026-07-27	vendor-advisory
Bulletin de sécurité IBM 7281648	2026-07-28	vendor-advisory
Bulletin de sécurité IBM 7281374	2026-07-27	vendor-advisory
Bulletin de sécurité IBM 7281136	2026-07-24	vendor-advisory
Bulletin de sécurité IBM 7281641	2026-07-28	vendor-advisory
Bulletin de sécurité IBM 7281631	2026-07-28	vendor-advisory
Bulletin de sécurité IBM 7281371	2026-07-27	vendor-advisory
Bulletin de sécurité IBM 7281633	2026-07-28	vendor-advisory
Bulletin de sécurité IBM 7281438	2026-07-27	vendor-advisory
Bulletin de sécurité IBM 7281370	2026-07-27	vendor-advisory
Bulletin de sécurité IBM 7281565	2026-07-27	vendor-advisory
Bulletin de sécurité IBM 7281368	2026-07-27	vendor-advisory
Bulletin de sécurité IBM 7281350	2026-07-27	vendor-advisory
Bulletin de sécurité IBM 7281651	2026-07-28	vendor-advisory
Bulletin de sécurité IBM 7281950	2026-07-30	vendor-advisory
Bulletin de sécurité IBM 7281567	2026-07-27	vendor-advisory
Bulletin de sécurité IBM 7280950	2026-07-23	vendor-advisory
Bulletin de sécurité IBM 7281441	2026-07-27	vendor-advisory
Bulletin de sécurité IBM 7281649	2026-07-28	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions v4.8 \u00e0 v5.3.x ant\u00e9rieures \u00e0 v5.4 patch 3",
      "product": {
        "name": "Db2",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "AIX versions 7.3.x sans le correctif de s\u00e9curit\u00e9 curl_fix11.tar",
      "product": {
        "name": "AIX",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar Data Synchronization App versions ant\u00e9rieures \u00e0 4.0.0",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar Pulse App versions ant\u00e9rieures \u00e0 2.2.17",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "WebSphere Application Server versions 9.0.x sans les correctifs de s\u00e9curit\u00e9 temporaires ant\u00e9rieures \u00e0 9.0.5.29 (disponibilit\u00e9 pr\u00e9vue pour le troisi\u00e8me trimestre 2026)",
      "product": {
        "name": "WebSphere Application Server",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Control Center versions 6.3.1.0 sans le correctif iFix10",
      "product": {
        "name": "Sterling Control Center",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "WebSphere Application Server versions 8.5.x sans les correctifs de s\u00e9curit\u00e9 temporaires ant\u00e9rieures \u00e0 8.5.5.31 (disponibilit\u00e9 pr\u00e9vue pour le troisi\u00e8me trimestre 2026)",
      "product": {
        "name": "WebSphere Application Server",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Control Center versions 6.4.2.0 sans le correctif iFix05",
      "product": {
        "name": "Sterling Control Center",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling External Authentication Server versions 6.1.x ant\u00e9rieures \u00e0 6.1.1.4 GA",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar SIEM versions 7.5.x ant\u00e9rieures \u00e0 7.5.0 UP15 IF05",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling B2B Integrator et Sterling File Gateway versions 6.2.0.x ant\u00e9rieures \u00e0 6.2.0.6_1",
      "product": {
        "name": "Sterling B2B Integrator",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling B2B Integrator et Sterling File Gateway versions 6.2.1.x ant\u00e9rieures \u00e0 6.2.1.2",
      "product": {
        "name": "Sterling B2B Integrator",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Control Center versions 6.4.1.0 sans le correctif iFix04",
      "product": {
        "name": "Sterling Control Center",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling B2B Integrator et Sterling File Gateway versions 6.2.2.x ant\u00e9rieures \u00e0 6.2.2.1",
      "product": {
        "name": "Sterling B2B Integrator",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "WebSphere Application Server Liberty versions ant\u00e9rieures \u00e0 26.0.0.9 (disponibilit\u00e9 pr\u00e9vue pour le troisi\u00e8me trimestre 2026)",
      "product": {
        "name": "WebSphere Application Server",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-5588",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5588"
    },
    {
      "name": "CVE-2026-45505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45505"
    },
    {
      "name": "CVE-2025-66199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66199"
    },
    {
      "name": "CVE-2026-3449",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3449"
    },
    {
      "name": "CVE-2026-59871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59871"
    },
    {
      "name": "CVE-2026-42588",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42588"
    },
    {
      "name": "CVE-2026-33845",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33845"
    },
    {
      "name": "CVE-2026-44025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44025"
    },
    {
      "name": "CVE-2026-42253",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42253"
    },
    {
      "name": "CVE-2026-39830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
    },
    {
      "name": "CVE-2026-42041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42041"
    },
    {
      "name": "CVE-2026-42508",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
    },
    {
      "name": "CVE-2026-41716",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41716"
    },
    {
      "name": "CVE-2026-16184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16184"
    },
    {
      "name": "CVE-2026-15328",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15328"
    },
    {
      "name": "CVE-2025-15469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15469"
    },
    {
      "name": "CVE-2020-13956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-13956"
    },
    {
      "name": "CVE-2025-47944",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47944"
    },
    {
      "name": "CVE-2025-56200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-56200"
    },
    {
      "name": "CVE-2026-59874",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59874"
    },
    {
      "name": "CVE-2026-42258",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42258"
    },
    {
      "name": "CVE-2026-7769",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7769"
    },
    {
      "name": "CVE-2026-30827",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-30827"
    },
    {
      "name": "CVE-2026-22752",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22752"
    },
    {
      "name": "CVE-2026-39833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
    },
    {
      "name": "CVE-2025-22228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22228"
    },
    {
      "name": "CVE-2026-8458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8458"
    },
    {
      "name": "CVE-2026-2391",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2391"
    },
    {
      "name": "CVE-2026-1605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1605"
    },
    {
      "name": "CVE-2026-46605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46605"
    },
    {
      "name": "CVE-2026-22013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22013"
    },
    {
      "name": "CVE-2026-53655",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53655"
    },
    {
      "name": "CVE-2026-29145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-29145"
    },
    {
      "name": "CVE-2026-22018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22018"
    },
    {
      "name": "CVE-2026-39832",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
    },
    {
      "name": "CVE-2020-13955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-13955"
    },
    {
      "name": "CVE-2026-39829",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
    },
    {
      "name": "CVE-2026-41988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41988"
    },
    {
      "name": "CVE-2026-14528",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14528"
    },
    {
      "name": "CVE-2026-6357",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6357"
    },
    {
      "name": "CVE-2026-23745",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23745"
    },
    {
      "name": "CVE-2026-2006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2006"
    },
    {
      "name": "CVE-2026-53550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53550"
    },
    {
      "name": "CVE-2026-41721",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41721"
    },
    {
      "name": "CVE-2026-54905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54905"
    },
    {
      "name": "CVE-2026-0994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0994"
    },
    {
      "name": "CVE-2026-49157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49157"
    },
    {
      "name": "CVE-2021-47154",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-47154"
    },
    {
      "name": "CVE-2026-44494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
    },
    {
      "name": "CVE-2026-54899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54899"
    },
    {
      "name": "CVE-2026-39834",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39834"
    },
    {
      "name": "CVE-2025-15284",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15284"
    },
    {
      "name": "CVE-2026-41635",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41635"
    },
    {
      "name": "CVE-2026-46595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
    },
    {
      "name": "CVE-2026-54901",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54901"
    },
    {
      "name": "CVE-2026-42036",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42036"
    },
    {
      "name": "CVE-2026-2005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2005"
    },
    {
      "name": "CVE-2022-39135",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-39135"
    },
    {
      "name": "CVE-2026-39821",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
    },
    {
      "name": "CVE-2026-33558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33558"
    },
    {
      "name": "CVE-2026-33846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33846"
    },
    {
      "name": "CVE-2021-23337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-23337"
    },
    {
      "name": "CVE-2026-5758",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5758"
    },
    {
      "name": "CVE-2026-34500",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34500"
    },
    {
      "name": "CVE-2026-54502",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54502"
    },
    {
      "name": "CVE-2026-22795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22795"
    },
    {
      "name": "CVE-2026-29146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-29146"
    },
    {
      "name": "CVE-2026-34043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34043"
    },
    {
      "name": "CVE-2025-64718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64718"
    },
    {
      "name": "CVE-2026-9277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
    },
    {
      "name": "CVE-2026-27136",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
    },
    {
      "name": "CVE-2025-62718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
    },
    {
      "name": "CVE-2026-4800",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
    },
    {
      "name": "CVE-2026-10536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10536"
    },
    {
      "name": "CVE-2026-41844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41844"
    },
    {
      "name": "CVE-2026-8932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8932"
    },
    {
      "name": "CVE-2026-4424",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4424"
    },
    {
      "name": "CVE-2026-45292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45292"
    },
    {
      "name": "CVE-2024-38820",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38820"
    },
    {
      "name": "CVE-2026-40356",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40356"
    },
    {
      "name": "CVE-2026-15325",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15325"
    },
    {
      "name": "CVE-2026-14976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14976"
    },
    {
      "name": "CVE-2026-5598",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5598"
    },
    {
      "name": "CVE-2026-42256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42256"
    },
    {
      "name": "CVE-2026-42033",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42033"
    },
    {
      "name": "CVE-2025-59375",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59375"
    },
    {
      "name": "CVE-2026-54906",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54906"
    },
    {
      "name": "CVE-2026-34040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34040"
    },
    {
      "name": "CVE-2026-42035",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42035"
    },
    {
      "name": "CVE-2026-41842",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41842"
    },
    {
      "name": "CVE-2026-44495",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
    },
    {
      "name": "CVE-2026-41695",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41695"
    },
    {
      "name": "CVE-2026-14512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14512"
    },
    {
      "name": "CVE-2026-11856",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11856"
    },
    {
      "name": "CVE-2026-44160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44160"
    },
    {
      "name": "CVE-2026-42009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42009"
    },
    {
      "name": "CVE-2026-33750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33750"
    },
    {
      "name": "CVE-2026-5038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5038"
    },
    {
      "name": "CVE-2026-34478",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34478"
    },
    {
      "name": "CVE-2026-2359",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2359"
    },
    {
      "name": "CVE-2026-42043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42043"
    },
    {
      "name": "CVE-2025-11143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11143"
    },
    {
      "name": "CVE-2026-34480",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34480"
    },
    {
      "name": "CVE-2026-59869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
    },
    {
      "name": "CVE-2025-7783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7783"
    },
    {
      "name": "CVE-2025-12758",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-12758"
    },
    {
      "name": "CVE-2026-40175",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
    },
    {
      "name": "CVE-2026-5079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5079"
    },
    {
      "name": "CVE-2026-5795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5795"
    },
    {
      "name": "CVE-2024-23953",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-23953"
    },
    {
      "name": "CVE-2025-68161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68161"
    },
    {
      "name": "CVE-2026-44930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44930"
    },
    {
      "name": "CVE-2026-14974",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14974"
    },
    {
      "name": "CVE-2024-29869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-29869"
    },
    {
      "name": "CVE-2026-42010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42010"
    },
    {
      "name": "CVE-2026-42506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42506"
    },
    {
      "name": "CVE-2026-34479",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34479"
    },
    {
      "name": "CVE-2026-22796",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22796"
    },
    {
      "name": "CVE-2026-26960",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-26960"
    },
    {
      "name": "CVE-2026-42040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42040"
    },
    {
      "name": "CVE-2026-4867",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4867"
    },
    {
      "name": "CVE-2026-2303",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2303"
    },
    {
      "name": "CVE-2024-6763",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6763"
    },
    {
      "name": "CVE-2026-27903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27903"
    },
    {
      "name": "CVE-2026-14981",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14981"
    },
    {
      "name": "CVE-2026-39831",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
    },
    {
      "name": "CVE-2026-39828",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
    },
    {
      "name": "CVE-2026-8924",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8924"
    },
    {
      "name": "CVE-2024-45337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
    },
    {
      "name": "CVE-2026-14529",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14529"
    },
    {
      "name": "CVE-2026-59875",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59875"
    },
    {
      "name": "CVE-2026-41843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41843"
    },
    {
      "name": "CVE-2026-54896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54896"
    },
    {
      "name": "CVE-2026-25680",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25680"
    },
    {
      "name": "CVE-2026-34487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34487"
    },
    {
      "name": "CVE-2026-39835",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
    },
    {
      "name": "CVE-2026-42578",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42578"
    },
    {
      "name": "CVE-2026-41850",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41850"
    },
    {
      "name": "CVE-2026-4519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4519"
    },
    {
      "name": "CVE-2026-34197",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34197"
    },
    {
      "name": "CVE-2024-12905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12905"
    },
    {
      "name": "CVE-2024-52046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-52046"
    },
    {
      "name": "CVE-2026-59873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59873"
    },
    {
      "name": "CVE-2026-24842",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24842"
    },
    {
      "name": "CVE-2025-47935",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47935"
    },
    {
      "name": "CVE-2026-40198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40198"
    },
    {
      "name": "CVE-2026-4111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4111"
    },
    {
      "name": "CVE-2024-38827",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38827"
    },
    {
      "name": "CVE-2026-41694",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41694"
    },
    {
      "name": "CVE-2026-23950",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23950"
    },
    {
      "name": "CVE-2026-40046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40046"
    },
    {
      "name": "CVE-2022-22968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-22968"
    },
    {
      "name": "CVE-2026-16192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16192"
    },
    {
      "name": "CVE-2026-2950",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2950"
    },
    {
      "name": "CVE-2026-54500",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54500"
    },
    {
      "name": "CVE-2026-3304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3304"
    },
    {
      "name": "CVE-2026-40895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
    },
    {
      "name": "CVE-2018-10237",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10237"
    },
    {
      "name": "CVE-2026-14515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14515"
    },
    {
      "name": "CVE-2026-22016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22016"
    },
    {
      "name": "CVE-2026-22021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22021"
    },
    {
      "name": "CVE-2026-6100",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6100"
    },
    {
      "name": "CVE-2026-54904",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54904"
    },
    {
      "name": "CVE-2026-22007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22007"
    },
    {
      "name": "CVE-2025-68160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68160"
    },
    {
      "name": "CVE-2026-13149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
    },
    {
      "name": "CVE-2026-54897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54897"
    },
    {
      "name": "CVE-2026-34268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34268"
    },
    {
      "name": "CVE-2026-41852",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41852"
    },
    {
      "name": "CVE-2021-22569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22569"
    },
    {
      "name": "CVE-2026-3520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3520"
    },
    {
      "name": "CVE-2026-29786",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-29786"
    },
    {
      "name": "CVE-2026-41006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41006"
    },
    {
      "name": "CVE-2026-41711",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41711"
    },
    {
      "name": "CVE-2026-27830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27830"
    },
    {
      "name": "CVE-2026-44487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
    },
    {
      "name": "CVE-2026-2482",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2482"
    },
    {
      "name": "CVE-2026-42038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42038"
    },
    {
      "name": "CVE-2026-49844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49844"
    },
    {
      "name": "CVE-2026-25854",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25854"
    },
    {
      "name": "CVE-2026-2332",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2332"
    },
    {
      "name": "CVE-2026-41851",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41851"
    },
    {
      "name": "CVE-2026-42039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42039"
    },
    {
      "name": "CVE-2026-8149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8149"
    },
    {
      "name": "CVE-2026-6009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6009"
    },
    {
      "name": "CVE-2026-9358",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9358"
    },
    {
      "name": "CVE-2026-14446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14446"
    },
    {
      "name": "CVE-2026-42502",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
    },
    {
      "name": "CVE-2020-8908",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-8908"
    },
    {
      "name": "CVE-2026-42245",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42245"
    },
    {
      "name": "CVE-2026-8723",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8723"
    },
    {
      "name": "CVE-2026-40988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40988"
    },
    {
      "name": "CVE-2026-41841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41841"
    },
    {
      "name": "CVE-2026-25681",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
    },
    {
      "name": "CVE-2025-69418",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69418"
    },
    {
      "name": "CVE-2026-54903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54903"
    },
    {
      "name": "CVE-2026-39304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39304"
    },
    {
      "name": "CVE-2026-49270",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49270"
    },
    {
      "name": "CVE-2025-15468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15468"
    },
    {
      "name": "CVE-2026-25639",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25639"
    },
    {
      "name": "CVE-2026-15064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15064"
    },
    {
      "name": "CVE-2026-42044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
    },
    {
      "name": "CVE-2026-54900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54900"
    },
    {
      "name": "CVE-2018-16487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-16487"
    },
    {
      "name": "CVE-2023-22899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-22899"
    },
    {
      "name": "CVE-2026-42034",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42034"
    },
    {
      "name": "CVE-2026-8927",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8927"
    },
    {
      "name": "CVE-2026-41846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41846"
    },
    {
      "name": "CVE-2025-5889",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-5889"
    },
    {
      "name": "CVE-2026-41035",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41035"
    },
    {
      "name": "CVE-2026-40199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40199"
    },
    {
      "name": "CVE-2025-27789",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27789"
    },
    {
      "name": "CVE-2026-46598",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46598"
    },
    {
      "name": "CVE-2026-44024",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44024"
    },
    {
      "name": "CVE-2026-42246",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42246"
    },
    {
      "name": "CVE-2025-66566",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66566"
    },
    {
      "name": "CVE-2025-66168",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-66168"
    },
    {
      "name": "CVE-2026-41409",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41409"
    },
    {
      "name": "CVE-2025-11187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-11187"
    },
    {
      "name": "CVE-2026-14980",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14980"
    },
    {
      "name": "CVE-2026-54898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54898"
    },
    {
      "name": "CVE-2026-12143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
    },
    {
      "name": "CVE-2026-44431",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44431"
    },
    {
      "name": "CVE-2026-26996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-26996"
    },
    {
      "name": "CVE-2026-44486",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
    },
    {
      "name": "CVE-2026-33227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33227"
    },
    {
      "name": "CVE-2026-42264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
    },
    {
      "name": "CVE-2026-46597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
    },
    {
      "name": "CVE-2026-44161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44161"
    },
    {
      "name": "CVE-2026-4786",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4786"
    },
    {
      "name": "CVE-2025-64756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64756"
    },
    {
      "name": "CVE-2026-34483",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34483"
    },
    {
      "name": "CVE-2026-44496",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
    },
    {
      "name": "CVE-2026-0636",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0636"
    },
    {
      "name": "CVE-2026-44492",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
    },
    {
      "name": "CVE-2025-48997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48997"
    },
    {
      "name": "CVE-2026-24880",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24880"
    },
    {
      "name": "CVE-2021-22570",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22570"
    },
    {
      "name": "CVE-2026-9547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9547"
    },
    {
      "name": "CVE-2026-41007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41007"
    },
    {
      "name": "CVE-2026-42037",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42037"
    },
    {
      "name": "CVE-2026-2004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2004"
    },
    {
      "name": "CVE-2026-42042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42042"
    },
    {
      "name": "CVE-2025-21502",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21502"
    },
    {
      "name": "CVE-2026-35554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-35554"
    },
    {
      "name": "CVE-2025-48387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48387"
    },
    {
      "name": "CVE-2026-12590",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12590"
    },
    {
      "name": "CVE-2026-27727",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27727"
    },
    {
      "name": "CVE-2026-34477",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34477"
    },
    {
      "name": "CVE-2026-54902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54902"
    },
    {
      "name": "CVE-2026-44490",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44490"
    },
    {
      "name": "CVE-2026-54592",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54592"
    },
    {
      "name": "CVE-2023-5752",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5752"
    },
    {
      "name": "CVE-2026-39827",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39827"
    },
    {
      "name": "CVE-2025-12183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-12183"
    },
    {
      "name": "CVE-2025-7338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7338"
    },
    {
      "name": "CVE-2026-15280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15280"
    },
    {
      "name": "CVE-2026-41848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41848"
    },
    {
      "name": "CVE-2025-14813",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14813"
    },
    {
      "name": "CVE-2026-31802",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31802"
    },
    {
      "name": "CVE-2025-13465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
    },
    {
      "name": "CVE-2026-13311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13311"
    },
    {
      "name": "CVE-2026-41907",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41907"
    },
    {
      "name": "CVE-2026-44488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
    },
    {
      "name": "CVE-2025-59343",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59343"
    },
    {
      "name": "CVE-2026-34481",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34481"
    },
    {
      "name": "CVE-2026-27904",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27904"
    },
    {
      "name": "CVE-2026-8286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8286"
    },
    {
      "name": "CVE-2026-42257",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42257"
    },
    {
      "name": "CVE-2026-42338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
    }
  ],
  "initial_release_date": "2026-07-31T00:00:00",
  "last_revision_date": "2026-07-31T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0958",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-07-31T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Injection SQL (SQLi)"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
  "vendor_advisories": [
    {
      "published_at": "2026-07-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281450",
      "url": "https://www.ibm.com/support/pages/node/7281450"
    },
    {
      "published_at": "2026-07-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281625",
      "url": "https://www.ibm.com/support/pages/node/7281625"
    },
    {
      "published_at": "2026-07-30",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281949",
      "url": "https://www.ibm.com/support/pages/node/7281949"
    },
    {
      "published_at": "2026-07-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7277692",
      "url": "https://www.ibm.com/support/pages/node/7277692"
    },
    {
      "published_at": "2026-07-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281628",
      "url": "https://www.ibm.com/support/pages/node/7281628"
    },
    {
      "published_at": "2026-07-24",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281135",
      "url": "https://www.ibm.com/support/pages/node/7281135"
    },
    {
      "published_at": "2026-07-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281375",
      "url": "https://www.ibm.com/support/pages/node/7281375"
    },
    {
      "published_at": "2026-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281743",
      "url": "https://www.ibm.com/support/pages/node/7281743"
    },
    {
      "published_at": "2026-07-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281373",
      "url": "https://www.ibm.com/support/pages/node/7281373"
    },
    {
      "published_at": "2026-07-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281388",
      "url": "https://www.ibm.com/support/pages/node/7281388"
    },
    {
      "published_at": "2026-07-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281721",
      "url": "https://www.ibm.com/support/pages/node/7281721"
    },
    {
      "published_at": "2026-07-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281369",
      "url": "https://www.ibm.com/support/pages/node/7281369"
    },
    {
      "published_at": "2026-07-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281648",
      "url": "https://www.ibm.com/support/pages/node/7281648"
    },
    {
      "published_at": "2026-07-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281374",
      "url": "https://www.ibm.com/support/pages/node/7281374"
    },
    {
      "published_at": "2026-07-24",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281136",
      "url": "https://www.ibm.com/support/pages/node/7281136"
    },
    {
      "published_at": "2026-07-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281641",
      "url": "https://www.ibm.com/support/pages/node/7281641"
    },
    {
      "published_at": "2026-07-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281631",
      "url": "https://www.ibm.com/support/pages/node/7281631"
    },
    {
      "published_at": "2026-07-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281371",
      "url": "https://www.ibm.com/support/pages/node/7281371"
    },
    {
      "published_at": "2026-07-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281633",
      "url": "https://www.ibm.com/support/pages/node/7281633"
    },
    {
      "published_at": "2026-07-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281438",
      "url": "https://www.ibm.com/support/pages/node/7281438"
    },
    {
      "published_at": "2026-07-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281370",
      "url": "https://www.ibm.com/support/pages/node/7281370"
    },
    {
      "published_at": "2026-07-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281565",
      "url": "https://www.ibm.com/support/pages/node/7281565"
    },
    {
      "published_at": "2026-07-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281368",
      "url": "https://www.ibm.com/support/pages/node/7281368"
    },
    {
      "published_at": "2026-07-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281350",
      "url": "https://www.ibm.com/support/pages/node/7281350"
    },
    {
      "published_at": "2026-07-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281651",
      "url": "https://www.ibm.com/support/pages/node/7281651"
    },
    {
      "published_at": "2026-07-30",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281950",
      "url": "https://www.ibm.com/support/pages/node/7281950"
    },
    {
      "published_at": "2026-07-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281567",
      "url": "https://www.ibm.com/support/pages/node/7281567"
    },
    {
      "published_at": "2026-07-23",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7280950",
      "url": "https://www.ibm.com/support/pages/node/7280950"
    },
    {
      "published_at": "2026-07-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281441",
      "url": "https://www.ibm.com/support/pages/node/7281441"
    },
    {
      "published_at": "2026-07-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7281649",
      "url": "https://www.ibm.com/support/pages/node/7281649"
    }
  ]
}

CERTFR-2026-AVI-0797

Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans cURL et libcurl. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Curl	cURL et libcurl	cURL et libcurl versions antérieures à 8.21.0

References

Title

Publication Time

Tags

Bulletin de sécurité Curl CVE-2026-12064	2026-06-24	vendor-advisory
Bulletin de sécurité Curl CVE-2026-9547	2026-06-24	vendor-advisory
Bulletin de sécurité Curl CVE-2026-10536	2026-06-24	vendor-advisory
Bulletin de sécurité Curl CVE-2026-8286	2026-06-24	vendor-advisory
Bulletin de sécurité Curl CVE-2026-8927	2026-06-24	vendor-advisory
Bulletin de sécurité Curl CVE-2026-11586	2026-06-24	vendor-advisory
Bulletin de sécurité Curl CVE-2026-9079	2026-06-24	vendor-advisory
Bulletin de sécurité Curl CVE-2026-11856	2026-06-24	vendor-advisory
Bulletin de sécurité Curl CVE-2026-8924	2026-06-24	vendor-advisory
Bulletin de sécurité Curl CVE-2026-8458	2026-06-24	vendor-advisory
Bulletin de sécurité Curl CVE-2026-9546	2026-06-24	vendor-advisory
Bulletin de sécurité Curl CVE-2026-9080	2026-06-24	vendor-advisory
Bulletin de sécurité Curl CVE-2026-11352	2026-06-24	vendor-advisory
Bulletin de sécurité Curl CVE-2026-8932	2026-06-24	vendor-advisory
Bulletin de sécurité Curl CVE-2026-8926	2026-06-24	vendor-advisory
Bulletin de sécurité Curl CVE-2026-9545	2026-06-24	vendor-advisory
Bulletin de sécurité Curl CVE-2026-8925	2026-06-24	vendor-advisory
Bulletin de sécurité Curl CVE-2026-11564	2026-06-24	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "cURL et libcurl versions ant\u00e9rieures \u00e0 8.21.0",
      "product": {
        "name": "cURL et libcurl",
        "vendor": {
          "name": "Curl",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-8926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8926"
    },
    {
      "name": "CVE-2026-11352",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11352"
    },
    {
      "name": "CVE-2026-8458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8458"
    },
    {
      "name": "CVE-2026-9546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9546"
    },
    {
      "name": "CVE-2022-27782",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27782"
    },
    {
      "name": "CVE-2026-10536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10536"
    },
    {
      "name": "CVE-2026-8932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8932"
    },
    {
      "name": "CVE-2026-11856",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11856"
    },
    {
      "name": "CVE-2026-11586",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11586"
    },
    {
      "name": "CVE-2026-12064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12064"
    },
    {
      "name": "CVE-2026-8924",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8924"
    },
    {
      "name": "CVE-2026-9079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9079"
    },
    {
      "name": "CVE-2026-9080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9080"
    },
    {
      "name": "CVE-2026-9545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9545"
    },
    {
      "name": "CVE-2026-8925",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8925"
    },
    {
      "name": "CVE-2026-8927",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8927"
    },
    {
      "name": "CVE-2026-11564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11564"
    },
    {
      "name": "CVE-2026-9547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9547"
    },
    {
      "name": "CVE-2026-7168",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7168"
    },
    {
      "name": "CVE-2026-8286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8286"
    },
    {
      "name": "CVE-2026-5545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5545"
    }
  ],
  "initial_release_date": "2026-06-24T00:00:00",
  "last_revision_date": "2026-06-24T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0797",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-06-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans cURL et libcurl. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans cURL et libcurl",
  "vendor_advisories": [
    {
      "published_at": "2026-06-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-12064",
      "url": "https://curl.se/docs/CVE-2026-12064.html"
    },
    {
      "published_at": "2026-06-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-9547",
      "url": "https://curl.se/docs/CVE-2026-9547.html"
    },
    {
      "published_at": "2026-06-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-10536",
      "url": "https://curl.se/docs/CVE-2026-10536.html"
    },
    {
      "published_at": "2026-06-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-8286",
      "url": "https://curl.se/docs/CVE-2026-8286.html"
    },
    {
      "published_at": "2026-06-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-8927",
      "url": "https://curl.se/docs/CVE-2026-8927.html"
    },
    {
      "published_at": "2026-06-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-11586",
      "url": "https://curl.se/docs/CVE-2026-11586.html"
    },
    {
      "published_at": "2026-06-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-9079",
      "url": "https://curl.se/docs/CVE-2026-9079.html"
    },
    {
      "published_at": "2026-06-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-11856",
      "url": "https://curl.se/docs/CVE-2026-11856.html"
    },
    {
      "published_at": "2026-06-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-8924",
      "url": "https://curl.se/docs/CVE-2026-8924.html"
    },
    {
      "published_at": "2026-06-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-8458",
      "url": "https://curl.se/docs/CVE-2026-8458.html"
    },
    {
      "published_at": "2026-06-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-9546",
      "url": "https://curl.se/docs/CVE-2026-9546.html"
    },
    {
      "published_at": "2026-06-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-9080",
      "url": "https://curl.se/docs/CVE-2026-9080.html"
    },
    {
      "published_at": "2026-06-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-11352",
      "url": "https://curl.se/docs/CVE-2026-11352.html"
    },
    {
      "published_at": "2026-06-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-8932",
      "url": "https://curl.se/docs/CVE-2026-8932.html"
    },
    {
      "published_at": "2026-06-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-8926",
      "url": "https://curl.se/docs/CVE-2026-8926.html"
    },
    {
      "published_at": "2026-06-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-9545",
      "url": "https://curl.se/docs/CVE-2026-9545.html"
    },
    {
      "published_at": "2026-06-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-8925",
      "url": "https://curl.se/docs/CVE-2026-8925.html"
    },
    {
      "published_at": "2026-06-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Curl CVE-2026-11564",
      "url": "https://curl.se/docs/CVE-2026-11564.html"
    }
  ]
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2026-8286 (GCVE-0-2026-8286)

Vulnerability from cvelistv5

CERTFR-2026-AVI-0873

Vulnerability from certfr_avis

Solutions

CERTFR-2026-AVI-0958

Vulnerability from certfr_avis

Solutions

CERTFR-2026-AVI-0797

Vulnerability from certfr_avis

Solutions

Tags

Sightings

Nomenclature