Story no.33OngoingCyberLow23 Oct → 27 Oct10 facts · 60 art.
CERT-FR publishes a series of vulnerability advisories in late October 2026
On 23 October 2026, CERT-FR published a series of security advisories reporting multiple vulnerabilities in third-party products, some of which allow remote code execution or privilege escalation. On 26 October, it issued new advisories concerning in particular Citrix XenServer, MongoDB, VMware, Microsoft and Citrix, as well as its weekly vulnerability bulletin. The same day, it reported exploitation attempts targeting vulnerabilities CVE-2026-109618 and CVE-2026-109619 against certain PHP deployments. On 27 October, CERT-FR published several additional advisories, notably on Mozilla Firefox, Citrix NetScaler, Palo Alto Networks, Nextcloud, Apple, Mattermost, Moxa, GLPI and Tenable, including a specific advisory on Apple products and another on Palo Alto Networks.
60 articles · 2 sources · no rated outlet covers this topic yet (public service, agencies, official accounts…)
Angle comparison for the whole story
A comparison is written as soon as the story is covered by at least two sides (left, centre, right).
Timeline
newest firstOutlets:LeftCentreRightUncategorised· badge = severity
- 16h43
LatestCERT-FR publishes advisory on vulnerability in Palo Alto Networks products
CERT-FR published advisory CERTFR-2026-AVI-1396 reporting a vulnerability affecting Palo Alto Networks products.
X (Twitter)Uncategorised
- 16h43
Le CERT-FR publie un avis sur des vulnérabilités dans les produits Apple
Le CERT-FR publie l'avis CERTFR-2026-AVI-1387 signalant de multiples vulnérabilités dans les produits Apple.
X (Twitter)Uncategorised
- 01h00
CERT-FR publishes a series of vulnerability advisories on October 27, 2026
CERT-FR publishes several vulnerability advisories on October 27, 2026 concerning third-party software, including Mozilla Firefox, Citrix NetScaler, Microsoft Edge, Palo Alto Networks, Nextcloud, Apple, Mattermost, Moxa, GLPI and Tenable.
Sites gouvernementaux (gouv.fr)Uncategorised
- 17h09
Le CERT-FR alerte sur des tentatives d'exploitation de vulnérabilités PHP
Le CERT-FR signale des tentatives d'exploitation des vulnérabilités CVE-2026-109618 et CVE-2026-109619 ciblant certains déploiements de PHP.
X (Twitter)Uncategorised
- 17h09
Le CERT-FR publie son bulletin d'actualité sur les vulnérabilités de la semaine
Le bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives publiées la semaine précédente.
X (Twitter)Uncategorised
- 17h08
The CERT-FR publishes a series of vulnerability advisories (MongoDB, VMware, Microsoft, Citrix)
The CERT-FR issues several security advisories concerning vulnerabilities in third-party software products (MongoDB, VMware, Citrix, Microsoft, Tenable, Mattermost, CPython).
X (Twitter)Uncategorised
- 01h00
CERT-FR publishes several vulnerability advisories on October 26, 2026
CERT-FR publishes a series of security advisories concerning vulnerabilities in software products, including Citrix XenServer, allowing security policy bypasses.
Sites gouvernementaux (gouv.fr)Uncategorised
In figures
Further reading
Go up the thread
Events in the story
- CERT-FR publishes advisory on vulnerability in Palo Alto Networks products27 Oct
- Le CERT-FR publie un avis sur des vulnérabilités dans les produits Apple27 Oct
- CERT-FR publishes a series of vulnerability advisories on October 27, 202627 Oct
- Le CERT-FR alerte sur des tentatives d'exploitation de vulnérabilités PHP26 Oct
- Le CERT-FR publie son bulletin d'actualité sur les vulnérabilités de la semaine26 Oct
- The CERT-FR publishes a series of vulnerability advisories (MongoDB, VMware, Microsoft, Citrix)26 Oct
- CERT-FR publishes several vulnerability advisories on October 26, 202626 Oct
- Le CERT-FR publie une série d'avis de vulnérabilités multiples23 Oct
- Le CERT-FR publie plusieurs avis de vulnérabilités23 Oct
- Bulletins CERT-FR du 23 octobre 2026 : multiples vulnérabilités logicielles23 Oct