Assistant: protect accessible data
Assistant: loss of confidentiality. This 2026-08-10 case examines 1 version entry and 1 CVE, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0988.
Digital strategy
Connect technology choices, organisation, risk and business goals to build a realistic and durable digital strategy.
204 articles · Latest article updated
Keycloak: control privileged access
Keycloak: privilege escalation. This 2026-08-09 case examines 3 version entries and 7 CVEs, documented releases and checks suited to identity systems, using CERTFR-2026-AVI-0976.
macOS Tahoe, macOS Sonoma: restore access controls
macOS Tahoe, macOS Sonoma: security control bypass. This 2026-08-08 case examines 3 version entries and 1 CVE, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0980.
SonicOS: restore access controls
SonicOS: security control bypass. This 2026-08-06 case examines 8 version entries and 1 CVE, documented releases and checks suited to network access, using CERTFR-2026-AVI-0972.
EdgeConnect SD-WAN Orchestrator: restore access controls
EdgeConnect SD-WAN Orchestrator: security control bypass. This 2026-08-05 case examines 3 version entries and 2 CVEs, documented releases and checks suited to network access, using CERTFR-2026-AVI-0969.
Security Management: contain code execution
Security Management: remote code execution. This 2026-08-04 case examines 6 version entries and 1 CVE, documented releases and checks suited to network access, using CERTFR-2026-AVI-0965.
Office: contain code execution
Office: remote code execution. This 2026-08-03 case examines 10 version entries and 1 CVE, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0961.
Xen: control privileged access
Xen: privilege escalation. This 2026-08-02 case examines 1 version entry and 18 CVEs, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0942.
Firewall Management Center: restore access controls
Firewall Management Center: security control bypass. This 2026-08-01 case examines 6 version entries and 1 CVE, documented releases and checks suited to network access, using CERTFR-2026-AVI-0950.
activestorage: contain code execution
activestorage: remote code execution. This 2026-07-30 case examines 3 version entries and 1 CVE, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0948.
Tomcat: prepare service continuity
Tomcat: denial of service. This 2026-07-29 case examines 3 version entries and 1 CVE, documented releases and checks suited to web applications, using CERTFR-2026-AVI-0940.
iOS, tvOS: limit execution permissions
iOS, tvOS: code execution. This 2026-07-28 case examines 9 version entries and 210 CVEs, documented releases and checks suited to mobile devices, using CERTFR-2026-AVI-0938.
Traefik: restore access controls · 2026-07-27
Traefik: security control bypass. This 2026-07-27 case examines 3 version entries and 0 CVEs, documented releases and checks suited to network access, using CERTFR-2026-AVI-0936.
Moxa: control privileged access
Moxa: privilege escalation. This 2026-07-26 case examines 1 version entry and 1 CVE, documented releases and checks suited to industrial systems, using CERTFR-2026-AVI-0931.
Endpoint Security pour macOS: control privileged access
Endpoint Security pour macOS: privilege escalation. This 2026-07-25 case examines 4 version entries and 2 CVEs, documented releases and checks suited to detection tools, using CERTFR-2026-AVI-0932.
Oracle Java SE, Oracle GraalVM for JDK: protect accessible data
Oracle Java SE, Oracle GraalVM for JDK: loss of confidentiality. This 2026-07-23 case examines 10 version entries and 19 CVEs, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0915.
Firefox ESR, Firefox: contain code execution
Firefox ESR, Firefox: remote code execution. This 2026-07-22 case examines 3 version entries and 66 CVEs, documented releases and checks suited to browsers, using CERTFR-2026-AVI-0910.
Mattermost Server: establish the remediation scope
Mattermost Server: impact requiring vendor clarification. This 2026-07-20 case examines 4 version entries and 0 CVEs, documented releases and checks suited to web applications, using CERTFR-2026-AVI-0902.
RoomOS: restore access controls
RoomOS: security control bypass. This 2026-07-19 case examines 2 version entries and 6 CVEs, documented releases and checks suited to network access, using CERTFR-2026-AVI-0890.
Microsoft SharePoint Server 2019: restore access controls
Microsoft SharePoint Server 2019: security control bypass. This 2026-07-17 case examines 4 version entries and 2 CVEs, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0896.
Junos OS Evolved, Junos OS: limit execution permissions
Junos OS Evolved, Junos OS: code execution. This 2026-07-14 case examines 31 version entries and 23 CVEs, documented releases and checks suited to network access, using CERTFR-2026-AVI-0852.
CPython: prepare service continuity
CPython: denial of service. This 2026-07-13 case examines 1 version entry and 1 CVE, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0858.
CPCI85 Central Processing/Communication: limit execution permissions
CPCI85 Central Processing/Communication: code execution. This 2026-07-12 case examines 2 version entries and 4 CVEs, documented releases and checks suited to industrial systems, using CERTFR-2026-AVI-0860.
ONTAP 9 (formerly Clustered Data ONTAP): verify data integrity
ONTAP 9 (formerly Clustered Data ONTAP): data integrity compromise. This 2026-07-10 case examines 2 version entries and 1 CVE, documented releases and checks suited to backup systems, using CERTFR-2026-AVI-0857.