CVSS v3.1 - Resumo TécnicoRead more
Date: 2026-09-11
CCB AdvisoriesRead more
Date: 2026-09-08
CCB AdvisoriesRead more
Date: 2026-09-07
Source: CERT.be – Advisories
On December 3, 2025, the React Team publicly disclosed a critical security vulnerability affecting React Server Components (RSC) and related packages. The vulnerability allows for unauthenticated remote code execution (RCE) via maliciously crafted HTTP requests. It is recommended to update all affected component packages and any frameworks that integrate them.Read more
Date: 2026-07-18
[Mise à jour du 7 août 2025] Le 6 août 2025, SonicWall a remplacé une partie de son communiqué initial pour indiquer que les incidents de sécurité évoqués étaient vraisemblablement corrélés à la vulnérabilité CVE-2024-40766. Celle-ci a fait l'objet d'un bulletin de sécurité, SNWLID-2024-0015 (cf....Read more
Date: 2026-07-18
On December 3, 2025, the React Team publicly disclosed a critical security vulnerability affecting React Server Components (RSC) and related packages. The vulnerability allows for unauthenticated remote code execution (RCE) via maliciously crafted HTTP requests. It is recommended to update all affected component packages and any frameworks that integrate them.Read more
Date: 2026-02-04
[Mise à jour du 7 août 2025] Le 6 août 2025, SonicWall a remplacé une partie de son communiqué initial pour indiquer que les incidents de sécurité évoqués étaient vraisemblablement corrélés à la vulnérabilité CVE-2024-40766. Celle-ci a fait l'objet d'un bulletin de sécurité, SNWLID-2024-0015 (cf....Read more
Date: 2026-02-04
[Mise à jour du 7 août 2025] Le 6 août 2025, SonicWall a remplacé une partie de son communiqué initial pour indiquer que les incidents de sécurité évoqués étaient vraisemblablement corrélés à la vulnérabilité CVE-2024-40766. Celle-ci a fait l'objet d'un bulletin de sécurité, SNWLID-2024-0015 (cf....Read more
Date: 2025-12-26
On December 3, 2025, the React Team publicly disclosed a critical security vulnerability affecting React Server Components (RSC) and related packages. The vulnerability allows for unauthenticated remote code execution (RCE) via maliciously crafted HTTP requests. It is recommended to update all affected component packages and any frameworks that integrate them.Read more
Date: 2025-12-26
On December 3, 2025, the React Team publicly disclosed a critical security vulnerability affecting React Server Components (RSC) and related packages. The vulnerability allows for unauthenticated remote code execution (RCE) via maliciously crafted HTTP requests. It is recommended to update all affected component packages and any frameworks that integrate them.Read more
Date: 2025-12-04
Source: CERT-EU – Security Advisories
[Mise à jour du 7 août 2025] Le 6 août 2025, SonicWall a remplacé une partie de son communiqué initial pour indiquer que les incidents de sécurité évoqués étaient vraisemblablement corrélés à la vulnérabilité CVE-2024-40766. Celle-ci a fait l'objet d'un bulletin de sécurité, SNWLID-2024-0015 (cf....Read more
Date: 2025-08-05
Source: CERT-FR – Alertes
CCB AdvisoriesRead more
Date: 2026-09-11
On 9 September 2026, Check Point released emergency security updates addressing two critical vulnerabilities affecting Check Point Security Gateway, Security Management Server, and Spark Firewall deployments configured to use Remote Access VPN or Site-to-Site VPN. Both vulnerabilities carry a CVSS score of 9.8 and could allow an unauthenticated, remote attacker...Read more
Date: 2026-09-10
Source: CERT-EU – Security Advisories
On 8 September 2026, as part of its September Security Patch Day, SAP released Security Notes addressing two critical vulnerabilities affecting a broad range of SAP products[3]. The most severe, CVE-2026-44756 (CVSS 10.0), is a memory corruption vulnerability in SAP Extended Passport (EPP) processing, nicknamed "OVERPASS" by the Onapsis Research...Read more
Date: 2026-09-10
CCB AdvisoriesRead more
Date: 2026-09-09
Source: CERT.be – Advisories
On 8 September 2026, as part of its September Security Patch Day, SAP released Security Notes addressing two critical vulnerabilities affecting a broad range of SAP products[3]. The most severe, CVE-2026-44756 (CVSS 10.0), is a memory corruption vulnerability in SAP Extended Passport (EPP) processing, nicknamed "OVERPASS" by the Onapsis Research...Read more
Date: 2026-09-09
Source: CERT-EU – Security Advisories
Descrição Foram identificadas 6 vulnerabilidades no MikroTik RouterOS, divulgadas pelo CERT.PL a 5 de setembro de 2026 [1][2]. Duas delas, quando encadeadas, permitem a um atacante remoto não autenticado obter controlo total do equipamento através do serviço SSH [1].As vulnerabilidades de maior severidade são:Read more
Date: 2026-09-08
Descrição Foram identificadas múltiplas vulnerabilidades no Cisco IOS XR Software, divulgadas no boletim de segurança cisco-sa-hardening-iosxr-qg64NcM [1]. A Cisco agrupou as vulnerabilidades pela respetiva classe (CWE) e atribuiu um identificador CVE a cada grupo, pelo que cada CVE cobre várias vulnerabilidades distintas e o score corresponde...Read more
Date: 2026-09-08
CCB AdvisoriesRead more
Date: 2026-09-08
CCB AdvisoriesRead more
Date: 2026-09-08
CCB AdvisoriesRead more
Date: 2026-09-07
Source: CERT.be – Advisories
Cyber Threat Intelligence FrameworkRead more
Date: 2026-04-08
Source: CERT-EU – Threat Intelligence