CERT-FR (ANSSI)
advisoryFRcertfr
CERT-FR (ANSSI) national-CERT advisories ("avis"), covering OT/ICS and IT vendors; CVE describe-edges + CERT-FR titles under Licence Ouverte / Etalab 2.0.
01
advisories (81)
Vendor and ecosystem advisories describing this.
- CERTFR-2026-AVI-1368
- CERTFR-2026-AVI-1369
- CERTFR-2026-AVI-1370
- CERTFR-2026-AVI-1371
- CERTFR-2026-AVI-1372
- CERTFR-2026-AVI-1373
- CERTFR-2026-AVI-1374
- CERTFR-2026-AVI-1375
- CERTFR-2026-AVI-1376
- CERTFR-2026-AVI-1377
- CERTFR-2026-AVI-1378
- CERTFR-2026-AVI-1360
- CERTFR-2026-AVI-1361
- CERTFR-2026-AVI-1363
- CERTFR-2026-AVI-1364
- CERTFR-2026-AVI-1365
- CERTFR-2026-AVI-1366
- CERTFR-2026-AVI-1367
- CERTFR-2026-AVI-1345
- CERTFR-2026-AVI-1346
showing 20 of 81
02
CVE links (8,512)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-95721US | — | — | ||
A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local acce… | ||||
| CVE-2026-95720US | — | — | ||
A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful exploitation could allo… | ||||
| CVE-2026-95719US | — | — | ||
An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with administrative privileges to cause a denial… | ||||
| CVE-2026-95718US | — | — | ||
An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful explo… | ||||
| CVE-2026-95717US | — | — | ||
A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow an authenticated remote attacker with high privileges to inje… | ||||
| CVE-2026-95716US | — | — | ||
An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation allows a… | ||||
| CVE-2026-95715US | — | — | ||
An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an attacker with physical access to execute a… | ||||
| CVE-2026-95714US | — | — | ||
A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achieve remote code execution. Successful ex… | ||||
| CVE-2026-95713US | — | — | ||
An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt th… | ||||
| CVE-2026-95712US | — | — | ||
A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the affecte… | ||||
| CVE-2026-95711US | — | — | ||
An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication contro… | ||||
| CVE-2026-95710US | — | — | ||
An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduct a deni… | ||||
| CVE-2026-95709US | — | — | ||
Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Suc… | ||||
| CVE-2026-95708US | — | — | ||
Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Suc… | ||||
| CVE-2026-95707US | — | — | ||
A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful exploit… | ||||
| CVE-2026-95706US | — | — | ||
Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful expl… | ||||
| CVE-2026-95705US | — | — | ||
Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful expl… | ||||
| CVE-2026-95704US | — | — | ||
A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful exploit… | ||||
| CVE-2026-79956US | — | — | ||
A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system… | ||||
| CVE-2026-79955US | — | — | ||
An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that could allow an unauthenticated remote attacker to conduct a deni… | ||||
showing 20 of 8,512