PostgreSQL JDBC: restore access controls
PostgreSQL JDBC: security control bypass. This 2026-07-06 case examines 1 version entry and 1 CVE, documented releases and checks suited to databases, using CERTFR-2026-AVI-0837.
Digital strategy
Connect technology choices, organisation, risk and business goals to build a realistic and durable digital strategy.
204 articles · Latest article updated
ClamAV: prepare service continuity
ClamAV: denial of service. This 2026-07-05 case examines 2 version entries and 8 CVEs, documented releases and checks suited to detection tools, using CERTFR-2026-AVI-0824.
Secure Endpoint Private Cloud: protect accessible data
Secure Endpoint Private Cloud: loss of confidentiality. This 2026-07-04 case examines 6 version entries and 8 CVEs, documented releases and checks suited to network access, using CERTFR-2026-AVI-0825.
FreeBSD: protect accessible data
FreeBSD: loss of confidentiality. This 2026-07-03 case examines 3 version entries and 1 CVE, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0830.
Kibana, Fleet Server: restore access controls
Kibana, Fleet Server: security control bypass. This 2026-07-02 case examines 15 version entries and 11 CVEs, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0826.
Stormshield Management Center: limit execution permissions
Stormshield Management Center: code execution. This 2026-06-29 case examines 1 version entry and 5 CVEs, documented releases and checks suited to network access, using CERTFR-2026-AVI-0816.
azl3 kernel 6.6.141.1-1: establish the remediation scope
azl3 kernel 6.6.141.1-1: impact requiring vendor clarification. This 2026-06-28 case examines 1 version entry and 2 CVEs, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0802.
Asterisk, Certified Asterisk: restore access controls
Asterisk, Certified Asterisk: security control bypass. This 2026-06-27 case examines 6 version entries and 6 CVEs, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0805.
Postfix: prepare service continuity
Postfix: denial of service. This 2026-06-22 case examines 4 version entries and 0 CVEs, documented releases and checks suited to email systems, using CERTFR-2026-AVI-0793.
Google: contain code execution
Google: remote code execution. This 2026-06-21 case examines 1 version entry and 41 CVEs, documented releases and checks suited to mobile devices, using CERTFR-2026-AVI-0779.
Apereo CAS: establish the remediation scope
Apereo CAS: impact requiring vendor clarification. This 2026-06-20 case examines 1 version entry and 0 CVEs, documented releases and checks suited to identity systems, using CERTFR-2026-AVI-0780.
Node.js: restore access controls
Node.js: security control bypass. This 2026-06-19 case examines 3 version entries and 13 CVEs, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0786.
Oracle: contain code execution
Oracle: remote code execution. This 2026-06-17 case examines 4 version entries and 11 CVEs, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0766.
NPort W2150A-W4/W2250A-W4 Series: contain code execution
NPort W2150A-W4/W2250A-W4 Series: remote code execution. This 2026-06-16 case examines 3 version entries and 3 CVEs, documented releases and checks suited to industrial systems, using CERTFR-2026-AVI-0760.
Private 5G Management Dashboard, Airwave: contain code execution
Private 5G Management Dashboard, Airwave: remote code execution. This 2026-06-15 case examines 2 version entries and 1 CVE, documented releases and checks suited to network access, using CERTFR-2026-AVI-0750.
Cloud Gateway, Cloud Sleuth: prepare service continuity
Cloud Gateway, Cloud Sleuth: denial of service. This 2026-06-14 case examines 5 version entries and 2 CVEs, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0744.
Core Server: establish the remediation scope
Core Server: impact requiring vendor clarification. This 2026-06-13 case examines 7 version entries and 0 CVEs, documented releases and checks suited to databases, using CERTFR-2026-AVI-0741.
FreeBSD branche 14.4: control privileged access
FreeBSD branche 14.4: privilege escalation. This 2026-06-12 case examines 6 version entries and 2 CVEs, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0716.
Core Server: protect accessible data
Core Server: loss of confidentiality. This 2026-06-11 case examines 4 version entries and 14 CVEs, documented releases and checks suited to databases, using CERTFR-2026-AVI-0735.
SNS: protect accessible data
SNS: loss of confidentiality. This 2026-06-10 case examines 1 version entry and 1 CVE, documented releases and checks suited to network access, using CERTFR-2026-AVI-0723.
EcoStruxure IT Data Center Expert: protect accessible data
EcoStruxure IT Data Center Expert: loss of confidentiality. This 2026-06-09 case examines 1 version entry and 1 CVE, documented releases and checks suited to industrial systems, using CERTFR-2026-AVI-0713.
Micrometer Core, Jetty11 et Jetty12: prepare service continuity
Micrometer Core, Jetty11 et Jetty12: denial of service. This 2026-06-08 case examines 5 version entries and 2 CVEs, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0702.
CPython: restore access controls
CPython: security control bypass. This 2026-06-07 case examines 1 version entry and 2 CVEs, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0691.
Traefik: restore access controls
Traefik: security control bypass. This 2026-06-06 case examines 3 version entries and 2 CVEs, documented releases and checks suited to network access, using CERTFR-2026-AVI-0690.