Un CERT (Computer Emergency Response Team) est l’organisme officiel chargé, dans un pays ou une organisation, de la cybersécurité et de la réponse aux incidents. Au-delà des alertes techniques, ces organismes publient aussi régulièrement des rapports, des méthodologies et des prises de position qui font référence dans le secteur — par exemple le rapport annuel NIS360 de l’ENISA sur la maturité cyber des secteurs critiques européens.
Agrégation automatique d'extraits de communiqués publiés par des CERT (Computer Emergency Response Team) gouvernementaux et organismes de cybersécurité nationaux de référence. Cette liste ne garantit ni de reprendre l'ensemble des communiqués publiés par ces organismes, ni l'intégralité du contenu de chaque annonce : seul un extrait est affiché, réuni ici à titre informatif. DCOD n'est ni l'auteur ni l'éditeur de ces contenus : cliquez sur un titre pour consulter la source originale, seule référence faisant foi. Les annonces sont conservées un an, et au plus les 500 plus récentes par source, puis retirées automatiquement.
20 communiqués sur 2624
Serial number: AV26-1077Date: October 22, 2026 As of October 21, 2026, Splunk is affected by vulnerabilities in the following products: Splunk Enterprise Prior to 10.0.11 Prior to 10.2.8 Prior to 10.4.4 Prior to 9.4.16 Splunk SOAR Prior to 8.7.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Hardening in Splunk Enterprise - October 2026 Security Vulnerabilities in Splunk SOAR - October 2026…
Serial number: AV26-1076Date: October 22, 2026 As of October 20, 2026, Atlassian is affected by vulnerabilities in the following products: Bamboo Data Center and Server Version 12.1.12 and prior Version 10.2.24 and prior Bitbucket Data Center and Server Version 10.2.8 and prior Version 10.5.1 and prior Version 9.4.26 and prior Confluence Data Center and Server Version 11.0.0 and prior Version 10.2.19 and prior Version 9.2.26 and prior Crowd Data Center and Server Version 7.2.4 and prior…
CCB Advisories
October 2026 Management series ITSM.00.125 October 2026 | Awareness series Alternate format: Managing AI token consumption for operational resilience - ITSM.00.125 (PDF, 1.43 MB) Five Eyes Table of contents Demystifying AI tokens How AI systems use tokens Risks related to AI token usage Rising and unpredictable costs Reduced access to critical services Limited visibility and oversight Overall performance Token exhaustion Denial-of-tokens and denial-of-wallet attacks Managing AI token usage…
Deserialization of Untrusted Data vulnerability (CVE-2026-16477) has been found in MTW CleanShot X software.
Gitlab har publicerat säkerhetsuppdateringar för en ny sårbarhet, CVE-2026-110264. Sårbarheten har fått en CVSS-klassning på 10.0 och kan utnyttjas av en oautentiserad användare för att köra godtycklig kod. [1][2] GitLab har rättat sårbarheterna i följande versioner av GitLab Community Edition (CE) och Enterprise Edition (EE): 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13.
De FreeBSD community heeft meerdere kwetsbaarheden verholpen in bhyve Hypervisor De kwetsbaarheden betreffen race conditions, onjuiste validatie en synchronisatieproblemen in verschillende device modellen binnen de bhyve hypervisor. Een kwaadwillende gast-virtuele machine kan deze fouten misbruiken om een denial of service te veroorzaken door het bhyve proces te laten crashen of om arbitraire code uit te voeren in de host userspace. Dit kan plaatsvinden via manipulatie van event ring size en…
Serial Number: AV26-1075Date: October 22, 2026 As of October 19, 2026, Roundcube is affected by vulnerabilities in the following product: Roundcube Webmail Prior to 1.6.20 Prior to 1.7.5 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security updates 1.6.20 and 1.7.5 released Roundcube Open Source Webmail Software
Serial Number: AV26-1074Date: October 22, 2026 As of October 21, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Community Edition (CE) and Enterprise Edition (EE) Prior to 18.11.13 Prior to 19.0.10 Prior to 19.1.9 Prior to 19.2.9 Prior to 19.3.6 Prior to 19.4.3 Prior to 19.5.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. GitLab Critical Patch Release: 19.5.1, 19.4.3…
Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Expressway Series. De kwetsbaarheden betreffen onder andere onvoldoende autorisatiecontroles tijdens Mobile en Remote Access provisioning, waardoor ongeauthenticeerde externe aanvallers toegang kunnen krijgen tot gevoelige informatie. Daarnaast is er een kwetsbaarheid in de databaseservice die het mogelijk maakt voor ongeauthenticeerde aanvallers met netwerktoegang om root-commando's uit te voeren via onvoldoende validatie van…
Cisco heeft meerdere kwetsbaarheden verholpen in Snort 3, het open source intrusion detection en prevention systeem dat in diverse Cisco-producten wordt gebruikt. De kwetsbaarheden bevinden zich in verschillende componenten van de Snort 3 Detection Engine, waaronder de SMTP MIME Decoder, NetFlow Detection Engine, GRE Detection Engine, Teredo Detection Engine, VBA Decompression Engine, en de memory management. Ongeauthenticeerde remote aanvallers kunnen speciaal vervaardigde pakketten of…
Oracle heeft meerdere kwetsbaarheden verholpen in Oracle Java. In Oracle Java SE, JavaFX en GraalVM Enterprise Edition zijn diverse kwetsbaarheden aanwezig die door ongeauthenticeerde netwerkaanvallers kunnen worden misbruikt via blootgestelde API's of sandboxed Java-applicaties. Deze kwetsbaarheden maken het mogelijk om denial of service te veroorzaken, ongeautoriseerde lees- en schrijfacties op data uit te voeren, en in sommige gevallen beperkte data toegang te verkrijgen. Exploitatie kan…
View CSAF Summary Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends mitigations for products where fixes are not or not yet available. The following versions of Siemens WinCC…
View CSAF Summary Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens recommends to contact customer support to receive patch and update information. The following versions of Siemens RUGGEDCOM APE1808 Devices are affected: RUGGEDCOM APE1808 vers:all/* (CVE-2026-33387, CVE-2026-33388, CVE-2026-33389, CVE-2026-33391, CVE-2026-33920) CVSS Vendor Equipment v3 7.5…
View CSAF Summary SENTRON 3NA COM Fuse contains a Denial-of-Service vulnerability. Improper handling of a network management message could allow an attacker to trigger a denial-of-service (DoS) condition. Successful exploitation may require the affected network to be re-established to restore normal operation. The following versions of Siemens SENTRON 3NA COM Fuse are affected: SENTRON 3NA COM Fuse vers:intdot/
View CSAF Summary The products listed below contain an out-of-bounds read vulnerability that could allow an attacker to cause abnormal product behavior, instability, or denial of service. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends updating to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. The following versions of Siemens Capital Embedded…
View CSAF Summary The products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens SIMATIC IPCs are affected: SIMATIC IPC BX-21A vers:intdot/
View CSAF Summary Siemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available. The following versions of Siemens Industrial Edge Devices are…
37 CERT (Computer Emergency Response Team) et organismes de cybersécurité nationaux dont DCOD agrège les communiqués et alertes de sécurité, avec leur site officiel et la disponibilité de leurs flux.
37 CERT référencés
| CERT | Pays | Communiqués | Actus | Alertes |
|---|---|---|---|---|
| AusCERT | 🇦🇺 Australia | 500 | 📶 | |
| BGD e-GOV CIRT | 🇧🇩 Bangladesh | 0 | 📶 | |
| Canadian Centre for Cyber Security | 🇨🇦 Canada | 270 | 📶 | 📶 |
| CCN-CERT | 🇪🇸 Spain | 0 | 📶 | |
| CERT-EE | 🇪🇪 Estonia | 22 | 📶 | |
| CERT-EU | 🇪🇺 EU | 10 | 📶 | 📶 |
| CERT-FR | 🇫🇷 France | 304 | 📶 | |
| CERT-IL | 🇮🇱 Israel | 0 | ||
| CERT-SE | 🇸🇪 Sweden | 24 | 📶 | |
| CERT-UA | 🇺🇦 Ukraine | 1 | 📶 | |
| CERT.at | 🇦🇹 Austria | 3 | 📶 | |
| CERT.BE | 🇧🇪 Belgium | 90 | 📶 | 📶 |
| CERT.br | 🇧🇷 Brazil | 1 | 📶 | |
| CERT.hr | 🇭🇷 Croatia | 18 | 📶 | |
| CERT.LV | 🇱🇻 Latvia | 2 | 📶 | |
| CERT.PL | 🇵🇱 Poland | 32 | 📶 | |
| CERT.RO | 🇷🇴 Romania | 45 | 📶 | |
| CISA | 🇺🇸 USA | 152 | 📶 | 📶 |
| CNCS Portugal | 🇵🇹 Portugal | 6 | 📶 | |
| CSIRT Italia | 🇮🇹 Italy | 354 | 📶 | |
| DKCERT | 🇩🇰 Denmark | 65 | 📶 | |
| EG-CERT | 🇪🇬 Egypt | 0 | 📶 | |
| GovCERT.HK | 🇭🇰 Hong Kong | 109 | 📶 | 📶 |
| HKCERT | 🇭🇰 Hong Kong | 97 | 📶 | 📶 |
| INCIBE-CERT | 🇪🇸 Spain | 34 | 📶 | 📶 |
| JPCERT | 🇯🇵 Japan | 5 | 📶 | 📶 |
| NCSC Hungary | 🇭🇺 Hungary | 12 | 📶 | |
| NCSC NL | 🇳🇱 Netherlands | 202 | 📶 | 📶 |
| NCSC-FI | 🇫🇮 Finland | 223 | 📶 | 📶 |
| NISSA | 🇱🇾 Libya | 0 | 📶 | |
| NSM NCSC | 🇳🇴 Norway | 8 | 📶 | 📶 |
| NUKIB | 🇨🇿 Czech Republic | 13 | 📶 | |
| SI-CERT | 🇸🇮 Slovenia | 0 | 📶 | |
| SingCERT | 🇸🇬 Singapore | 0 | 📶 | |
| SK-CERT | 🇸🇰 Slovakia | 0 | ||
| Swiss GovCERT | 🇨🇭 Switzerland | 7 | 📶 | |
| UK NCSC | 🇬🇧 UK | 0 | 📶 | 📶 |
Aucun CERT ne correspond à cette recherche.