# CERT-FR publishes a series of advisories and alerts on vulnerabilities > On October 26, 2026, CERT-FR publishes its weekly vulnerability bulletin and warns of exploitation attempts targeting CVE-2026-109618 and CVE-2026-109619 affecting certain PHP deployments. On October 27, it issues several advisories concerning third‑party software, including Mozilla Firefox, Citrix NetScaler, Microsoft Edge, Palo Alto Networks, Nextcloud, Apple, Mattermost, Moxa, GLPI, and Tenable, as well as specific advisories on Apple and Palo Alto Networks products. On October 28, new advisories are released for Veeam, Samba, Docker Desktop, Palo Alto PAN-OS, Metabase, Mitel OpenScape, Microsoft Edge, Mozilla, Belden, and Axis Camera Station Pro. Some Veeam vulnerabilities allow remote arbitrary code execution and privilege escalation, while the one affecting Samba enables compromise of data confidentiality and integrity and bypass of security policy. **In brief**: Ongoing story bringing together 20 events nationwide, followed from 23 October 2026 to 28 October 2026. 84 articles from 4 sources (cyber); last updated on 28 October 2026 at 21:39. - Status: ongoing - Category: Cyber - Place: Nationwide - First detected: 23 October 2026 at 02:00 - Updated: 28 October 2026 at 21:39 - Web page: https://acturadar.com/en/stories/33-cert-fr-publishes-a-series-of-advisories-and-alerts-on-vulnerabilities ## Timeline (20 events) ### 23 October 2026 — [CERT-FR Bulletins of 23 October 2026: Multiple Software Vulnerabilities](https://acturadar.com/en/events/105-cert-fr-bulletins-of-23-october-2026-multiple-software-vulnerabilities.md) The CERT-FR publishes a series of security advisories reporting multiple vulnerabilities in third-party products, some of which allow remote code execution or privilege escalation. 1 sources, 11 articles · Nationwide ### 23 October 2026 — [CERT-FR publishes several vulnerability advisories](https://acturadar.com/en/events/90-cert-fr-publishes-several-vulnerability-advisories.md) CERT-FR has published a series of security advisories signaling multiple vulnerabilities in software products, including those of Tenable. 1 sources, 3 articles · Nationwide ### 23 October 2026 — [CERT-FR publishes a series of multiple vulnerability advisories](https://acturadar.com/en/events/89-cert-fr-publishes-a-series-of-multiple-vulnerability-advisories.md) CERT-FR publishes several security advisories signaling multiple vulnerabilities in software products (IBM, Papercut, Linux kernels, Red Hat, SUSE, Microsoft Edge). 1 sources, 8 articles · Nationwide ### 26 October 2026 — [CERT-FR publishes several vulnerability advisories on October 26, 2026](https://acturadar.com/en/events/841-cert-fr-publishes-several-vulnerability-advisories-on-october-26-2026.md) CERT-FR publishes a series of security advisories concerning vulnerabilities in software products, including Citrix XenServer, allowing security policy bypasses. 1 sources, 8 articles · Nationwide ### 26 October 2026 — [The CERT-FR publishes a series of vulnerability advisories (MongoDB, VMware, Microsoft, Citrix)](https://acturadar.com/en/events/885-the-cert-fr-publishes-a-series-of-vulnerability-advisories-mongodb-vmware.md) The CERT-FR issues several security advisories concerning vulnerabilities in third-party software products (MongoDB, VMware, Citrix, Microsoft, Tenable, Mattermost, CPython). 1 sources, 8 articles · Nationwide ### 26 October 2026 — [Le CERT-FR publie son bulletin d'actualité sur les vulnérabilités de la semaine](https://acturadar.com/en/events/884-le-cert-fr-publie-son-bulletin-d-actualite-sur-les-vulnerabilites-de-la-semaine.md) Le bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives publiées la semaine précédente. 1 sources, 1 articles · Nationwide ### 26 October 2026 — [CERT-FR warns of attempts to exploit PHP vulnerabilities](https://acturadar.com/en/events/883-cert-fr-warns-of-attempts-to-exploit-php-vulnerabilities.md) CERT-FR has reported attempts to exploit vulnerabilities CVE-2026-109618 and CVE-2026-109619, which target certain PHP deployments. 3 sources, 3 articles · Nationwide ### 27 October 2026 — [CERT-FR publishes a series of vulnerability advisories on October 27, 2026](https://acturadar.com/en/events/2009-cert-fr-publishes-a-series-of-vulnerability-advisories-on-october-27-2026.md) CERT-FR publishes several vulnerability advisories on October 27, 2026 concerning third-party software, including Mozilla Firefox, Citrix NetScaler, Microsoft Edge, Palo Alto Networks, Nextcloud, Apple, Mattermost, Moxa, GLPI and Tenable. 1 sources, 10 articles · Nationwide ### 27 October 2026 — [Le CERT-FR publie un avis sur des vulnérabilités dans les produits Apple](https://acturadar.com/en/events/2179-le-cert-fr-publie-un-avis-sur-des-vulnerabilites-dans-les-produits-apple.md) Le CERT-FR publie l'avis CERTFR-2026-AVI-1387 signalant de multiples vulnérabilités dans les produits Apple. 1 sources, 1 articles · Nationwide ### 27 October 2026 — [CERT-FR publishes advisory on vulnerability in Palo Alto Networks products](https://acturadar.com/en/events/2178-cert-fr-publishes-advisory-on-vulnerability-in-palo-alto-networks-products.md) CERT-FR published advisory CERTFR-2026-AVI-1396 reporting a vulnerability affecting Palo Alto Networks products. 1 sources, 9 articles · Nationwide ### 28 October 2026 — [CERT-FR issues advisory on vulnerabilities in Veeam products](https://acturadar.com/en/events/3017-cert-fr-issues-advisory-on-vulnerabilities-in-veeam-products.md) CERT-FR issued an advisory on October 28, 2026 flagging multiple vulnerabilities in Veeam products, some of which allow remote arbitrary code execution and privilege escalation. 2 sources, 10 articles · Nationwide ### 28 October 2026 — [CERT-FR issues advisory on a vulnerability in Samba](https://acturadar.com/en/events/3018-cert-fr-issues-advisory-on-a-vulnerability-in-samba.md) CERT-FR reports a vulnerability in Samba allowing an attacker to compromise the confidentiality and integrity of data and bypass security policy. 2 sources, 4 articles · Nationwide ### 28 October 2026 — [Le CERT-FR publie un avis sur des vulnérabilités dans Docker Desktop](https://acturadar.com/en/events/3271-le-cert-fr-publie-un-avis-sur-des-vulnerabilites-dans-docker-desktop.md) Le CERT-FR publie l'avis CERTFR-2026-AVI-1401 signalant de multiples vulnérabilités dans Docker Desktop. 1 sources, 1 articles · Nationwide ### 28 October 2026 — [Le CERT-FR publie un avis sur des vulnérabilités dans Palo Alto PAN-OS](https://acturadar.com/en/events/3270-le-cert-fr-publie-un-avis-sur-des-vulnerabilites-dans-palo-alto-pan-os.md) Le CERT-FR publie l'avis CERTFR-2026-AVI-1402 signalant de multiples vulnérabilités dans Palo Alto Networks PAN-OS. 1 sources, 1 articles · Nationwide ### 28 October 2026 — [Le CERT-FR publie un avis sur des vulnérabilités dans Metabase](https://acturadar.com/en/events/3269-le-cert-fr-publie-un-avis-sur-des-vulnerabilites-dans-metabase.md) Le CERT-FR publie l'avis CERTFR-2026-AVI-1403 signalant de multiples vulnérabilités dans Metabase. 1 sources, 1 articles · Nationwide ### 28 October 2026 — [Le CERT-FR publie un avis sur des vulnérabilités dans Mitel OpenScape](https://acturadar.com/en/events/3268-le-cert-fr-publie-un-avis-sur-des-vulnerabilites-dans-mitel-openscape.md) Le CERT-FR publie l'avis CERTFR-2026-AVI-1404 signalant de multiples vulnérabilités dans Mitel OpenScape Endpoint Management. 1 sources, 1 articles · Nationwide ### 28 October 2026 — [Le CERT-FR publie un avis sur des vulnérabilités dans Microsoft Edge](https://acturadar.com/en/events/3267-le-cert-fr-publie-un-avis-sur-des-vulnerabilites-dans-microsoft-edge.md) Le CERT-FR publie l'avis CERTFR-2026-AVI-1405 signalant de multiples vulnérabilités dans Microsoft Edge. 1 sources, 1 articles · Nationwide ### 28 October 2026 — [Le CERT-FR publie un avis sur des vulnérabilités dans les produits Mozilla](https://acturadar.com/en/events/3266-le-cert-fr-publie-un-avis-sur-des-vulnerabilites-dans-les-produits-mozilla.md) Le CERT-FR publie l'avis CERTFR-2026-AVI-1406 relatif à de multiples vulnérabilités dans les produits Mozilla. 1 sources, 1 articles · Nationwide ### 28 October 2026 — [Le CERT-FR publie un avis sur une vulnérabilité dans les produits Belden](https://acturadar.com/en/events/3265-le-cert-fr-publie-un-avis-sur-une-vulnerabilite-dans-les-produits-belden.md) Le CERT-FR publie l'avis CERTFR-2026-AVI-1407 relatif à une vulnérabilité dans les produits Belden. 1 sources, 1 articles · Nationwide ### 28 October 2026 — [Le CERT-FR publie un avis sur une vulnérabilité dans Axis Camera Station Pro](https://acturadar.com/en/events/3264-le-cert-fr-publie-un-avis-sur-une-vulnerabilite-dans-axis-camera-station-pro.md) Le CERT-FR publie l'avis CERTFR-2026-AVI-1408 relatif à une vulnérabilité dans Axis Camera Station Pro. 1 sources, 1 articles · Nationwide --- Cite as: Acturadar, “CERT-FR publishes a series of advisories and alerts on vulnerabilities”, https://acturadar.com/en/stories/33-cert-fr-publishes-a-series-of-advisories-and-alerts-on-vulnerabilities Methodology: https://acturadar.com/en/methodology