Vulnerabilites critiques — 15 Juin 2026
Le Centre de Reponse aux Incidents de Securite Informatique (CIRT.cm) alerte les organisations camerounaises sur des vulnerabilites critiques identifiees recemment dans le cyberespace. Ces failles, pour certaines deja exploitees dans la nature, requerrent une attention immediate.
Cette alerte couvre les publications de la semaine du 15 Juin 2026, incluant les avis du NIST et du CISA KEV.
CVE critiques identifiees
| CVE | Score CVSS | Description | Correctif |
|---|---|---|---|
| CVE-2026-44083 | 9.8 — Critique | An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to gain unintended privileges.
We have a |
Appliquer le correctif disponible |
| CVE-2026-9698 | 9.8 — Critique | DBI versions before 1.648 for Perl saved errors in a limited-sized buffer.
Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer with |
Appliquer le correctif disponible |
| CVE-2026-42861 | 9.6 — Critique | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the variable update endpoint of FlowiseAI. Th | Appliquer le correctif disponible |
| CVE-2026-46441 | 9.6 — Critique | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the assistant update endpoint of FlowiseAI. T | Appliquer le correctif disponible |
| CVE-2026-41448 | 9.4 — Critique | AdGuard Home, when started with the –glinet flag, contains an authentication bypass vulnerability that allows unauthenticated attackers to gain full admin access by supplying a path traversal sequenc | Appliquer le correctif disponible |
Actions recommandees
- Appliquer les correctifs de securite pour toutes les CVE listees.
- Activer l’authentification multi-facteurs (MFA) sur tous les acces critiques.
- Surveiller les connexions HTTPS/SSH sortantes inhabituelles.
- Mettre a jour les navigateurs vers les dernieres versions.
- Signaler tout incident a incidents@cirt.antic.cm ou au numero vert 8202.
Sources : NVD NIST, CISA KEV
Reference CIRT : CIRT-AL-2026-06-15