Cyber Threat Dashboard

Veille cybersécurité : alertes, vulnérabilités, actualités et outils pour se protéger.

1794Éléments

12067 derniers jours

31Aujourd'hui

764Critique + haute

10/10/2026 07:29Dernière collecte

MoyenneVulnérabilité CVE-2026-105690

CVE-2026-105690 — Penpot is an open-source design and prototyping platform. Prior to 2.18.0, logout clears the browser's auth-t…

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, logout clears the browser's auth-token cookie without revoking the corresponding server-side session. A previously captured session token remain…

CVSS 5.9

NVD · CVE récentes05/10/2026 22:17CWE-613

HauteVulnérabilité CVE-2026-97212

CVE-2026-97212 — The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple en…

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session ident…

CVSS 7.3

NVD · CVE récentes03/10/2026 00:16CWE-613

MoyenneVulnérabilité CVE-2026-104468

CVE-2026-104468 — YesWiki before 4.6.7 contains an insufficient session expiration vulnerability that allows attackers to reuse…

YesWiki before 4.6.7 contains an insufficient session expiration vulnerability that allows attackers to reuse old password reset links because tokens lack expiry timestamps. Attackers who obtain an unused reset URL from…

CVSS 4.8

NVD · CVE récentes02/10/2026 14:17CWE-613