Vulnerabilites critiques — 15 Aout 2026
Le Centre de Reponse aux Incidents de Securite Informatique (CIRT.cm) alerte les organisations camerounaises sur des vulnerabilites critiques identifiees recemment dans le cyberespace. Ces failles, pour certaines deja exploitees dans la nature, requerrent une attention immediate.
Cette alerte couvre les publications de la semaine du 15 Aout 2026, incluant les avis du NIST et du CISA KEV.
CVE critiques identifiees
| CVE | Score CVSS | Description | Correctif |
|---|---|---|---|
| CVE-2026-73678 | 10.0 — Critique | MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting c | Appliquer le correctif disponible |
| CVE-2026-72841 | 9.9 — Critique | luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload, allowing authenticated users to perform path traversal and write arbitrary files outside the intended direc | Appliquer le correctif disponible |
| CVE-2026-17482 | 9.8 — Critique | IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths. | Appliquer le correctif disponible |
| CVE-2026-72826 | 9.8 — Critique | The getgrav/grav-plugin-api plugin before 1.0.13 fails to validate that the scopes of a newly created API key are a subset of the caller’s scopes in createApiKey. The self-target path of requireApiKey | Appliquer le correctif disponible |
| CVE-2026-17182 | 9.8 — Critique | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments. | Appliquer le correctif disponible |
Actions recommandees
- Appliquer les correctifs de securite pour toutes les CVE listees.
- Activer l’authentification multi-facteurs (MFA) sur tous les acces critiques.
- Surveiller les connexions HTTPS/SSH sortantes inhabituelles.
- Mettre a jour les navigateurs vers les dernieres versions.
- Signaler tout incident a incidents@cirt.antic.cm ou au numero vert 8202.
Sources : NVD NIST, CISA KEV
Reference CIRT : CIRT-AL-2026-08-15