Cybercybersecurity watch: the flaws that hit your websites.
Advisories from CERT-FR, the French government's computer emergency response team, sorted by technology. Pick your stack, and the list keeps only what concerns you.
Updated
A year of advisories, one square a day
1,461 advisories published by CERT-FR in 2026 as of November 4. Over the past year, 339 concerned websites and APIs.
The latest advisories, sorted for you.
Advisories from the last 30 days, plus active alerts. Each line links to the full advisory on the CERT-FR website: affected versions, fixes and references.
Active alerts
- Multiple vulnerabilities in PHPPHPCritical
CERTFR-2026-ALE-014Open since October 21Code execution - Multiple vulnerabilities in Ivanti Connect Secure (ICS)Network and VPNHigh
CERTFR-2026-ALE-013Open since October 14Code execution, privilege escalation, security bypass - Incident de sécurité ciblant les contrôleurs à distance des installations de réfrigération
CERTFR-2026-ALE-012Open since October 12 - Multiple vulnerabilities in Citrix NetScaler ADC and GatewayNetwork and VPNCritical
CERTFR-2026-ALE-011Open since September 28Code execution, denial of service
- Multiple vulnerabilities in Elastic productsDatabasesCritical
CERTFR-2026-AVI-1461Code execution, data exposure, data tampering, denial of service - Multiple vulnerabilities in Symfony productsPHPMedium
CERTFR-2026-AVI-1460Security bypass, data exposure, denial of service - Multiple vulnerabilities in SolarWinds DamewareInternal toolsCritical
CERTFR-2026-AVI-1459Code execution, security bypass - Multiple vulnerabilities in Mattermost productsInternal tools
CERTFR-2026-AVI-1458 - Vulnerability in LaravelPHP
CERTFR-2026-AVI-1457Code execution - Multiple vulnerabilities in SonicWall productsNetwork and VPNCritical
CERTFR-2026-AVI-1456SQL injection, data exposure - Vulnerability in Mozilla FirefoxBrowsersHigh
CERTFR-2026-AVI-1455 - Vulnerability in MongoDBDatabasesHigh
CERTFR-2026-AVI-1454Data exposure, data tampering - Multiple vulnerabilities in NetApp StorageGRIDServers and operating systemsCritical
CERTFR-2026-AVI-1453Data exposure, data tampering - Multiple vulnerabilities in Ruby on RailsRuby on Rails
CERTFR-2026-AVI-1452Code execution, XSS, security bypass, data exposure, data tampering, denial of service - Multiple vulnerabilities in HPE Aruba Networking productsNetwork and VPNCritical
CERTFR-2026-AVI-1451Code execution, SQL injection, privilege escalation, security bypass, data exposure, data tampering, denial of service - Multiple vulnerabilities in Google ChromeBrowsers
CERTFR-2026-AVI-1450 - Multiple vulnerabilities in Citrix productsNetwork and VPNCritical
CERTFR-2026-AVI-1449Code execution, privilege escalation - Multiple vulnerabilities in Apache ZookeeperInternal toolsHigh
CERTFR-2026-AVI-1448Security bypass, denial of service
- Multiple vulnerabilities in XenServers and operating systemsMedium
CERTFR-2026-AVI-1447Data exposure, data tampering - Multiple vulnerabilities in NetApp ONTAP 9Servers and operating systemsCritical
CERTFR-2026-AVI-1446Code execution - Multiple vulnerabilities in PostgreSQLDatabasesHigh
CERTFR-2026-AVI-1445SQL injection, security bypass - Multiple vulnerabilities in GLPIPHP
CERTFR-2026-AVI-1444XSS, privilege escalation, security bypass - Multiple vulnerabilities in Google Android
CERTFR-2026-AVI-1443Code execution, privilege escalation, data exposure, denial of service
Nothing for your stack in the last 30 days. Good news. Older advisories are on the CERT-FR website.
Source: CERT-FR
Exploited right now.
The latest entries in the catalog kept by CISA, the US cybersecurity agency: these flaws are known to be exploited. If your site runs one of these products, patching comes first.
- Apple Multiple ProductsMedium
CVE-2024-27834added November 4Apple Multiple Products Improper Authentication Vulnerability - WordPress CoreWordPressHigh
CVE-2026-119977added November 3WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability - Ivanti Connect SecureNetwork and VPNMedium
CVE-2026-118527added October 30Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability - Ivanti Connect SecureNetwork and VPNHigh
CVE-2026-111357added October 30Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability - GitLab Community Edition and Enterprise EditionInternal toolsCritical
CVE-2026-97229added October 29GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability - Cisco Secure Firewall ASA Software and Cisco Secure FTD SoftwareNetwork and VPNHigh
CVE-2026-76418added October 29Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability - Linux KernelServers and operating systemsHigh
CVE-2026-46300added October 28Linux Kernel Missing Initialization of a Variable Vulnerability - Broadcom VMware ESXServers and operating systemsLow
CVE-2026-41709added October 28Broadcom VMWare ESX Insufficient Logging Vulnerability - Adobe Commerce and MagentoCMS and e-commerceCritical
CVE-2026-48356added October 27Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability - Google BrotliCritical
CVE-2026-111497added October 27Google Brotli Unchecked Return Value Vulnerability
No recently exploited flaw for your stack. The full list is on the CISA website.
Source: CISA
Where these advisories come from.
Three public sources, read again every 30 minutes, plus the CVE records for severity. We don't write or summarize any advisory: every line links back to its source.
CERT-FR advisories
Every working day, CERT-FR publishes its security advisories: a product, the affected versions, what an attacker can do with the flaw, and the fix to apply.
CERT-FR alerts
Rarer: a flaw already exploited, or about to be, in a widely used product. They stay at the top of the list until CERT-FR closes them.
The CISA catalog
The US cybersecurity agency lists the flaws with proven exploitation. Once a flaw makes that list, it's no longer a theoretical threat.
What we do with this watch.
It earns its keep during tests, and after an attack.
During a test, we record the version of everything running on your site: CMS, plugins, framework, server, database. Each one is checked against published advisories. A critical flaw doesn't wait for the report: you hear about it the same day.
After we step in on a hacked site, the same list helps find the door the attacker came through, so it's shut before the site goes back online.
A list of advisories can't tell you whether your site is vulnerable. A version can be affected while the flaw stays out of reach on your setup. And a flaw specific to your application, in your code or your access rules, will never show up in an advisory.
That's the difference between a watch and a test. We explain it in detail in Pentest or vulnerability scan.
What is CERT-FR?
The French government's computer emergency response team, part of ANSSI, the national cybersecurity agency. It publishes security advisories on the products most used in France, and alerts when a flaw is being actively exploited.
My site uses a listed product. Is it vulnerable?
Not necessarily. Check your version first: each advisory lists the affected versions and the fix. If yours is affected, apply the update. If you're unsure, write to us. If you already see signs of a break-in, follow the first steps.
How often is this page updated?
Continuously. Our server reads the sources every 30 minutes, and the page shows when it last did. To follow advisories to the minute, CERT-FR offers RSS feeds.
Where does the severity come from?
From the public CVE records. For each advisory, we show the highest CVSS rating published for its flaws: Critical, High, Medium or Low. CERT-FR doesn't rate its advisories. When no rating is published, or when an advisory covers more than 100 flaws, none is shown. A Critical rating doesn't mean your site is affected: it tells you what's at stake for a site that is.
Does my browser contact these sources?
No. Our server reads the public sources, every 30 minutes. Your browser only talks to bughunter.pro. Your stack choice stays on your device and is never sent anywhere.
Does an advisory concern you? Let's talk.
Tell us what runs on your site. We'll tell you what the advisory means for you, and whether a test makes sense. The first conversation comes with no commitment.