https://www.hackerposts.org/en/blog/gitea-cve-2026-20896-docker-x-webauth-user-bypass Hacker Posts en 2026-07-09T00:00:00.000Z Gitea CVE-2026-20896: Docker image trusts X-WEBAUTH-USER from anywhere https://www.hackerposts.org/en/blog/microsoft-defender-cve-2026-50656-rogueplanet-lpe-patched Hacker Posts en 2026-07-09T00:00:00.000Z Microsoft patches Defender RoguePlanet LPE CVE-2026-50656 https://www.hackerposts.org/fr/blog/hpe-aruba-instant-on-5g-core-certfr-2026-avi-0846 Hacker Posts fr 2026-07-09T00:00:00.000Z HPE Aruba : quatre CVE sur Instant On et Private 5G Core (AVI-0846) https://www.hackerposts.org/fr/blog/php-cve-2026-14355-openssl-aes-wrap-pad-certfr-2026-avi-0843 Hacker Posts fr 2026-07-09T00:00:00.000Z PHP CVE-2026-14355 : corruption tas dans openssl_encrypt (CERTFR-2026-AVI-0843) https://www.hackerposts.org/en/blog/januscape-cve-2026-53359-kvm-shadow-mmu-vm-escape Hacker Posts en 2026-07-08T00:00:00.000Z Januscape (CVE-2026-53359): 16-year-old KVM UAF escapes VMs on Intel and AMD https://www.hackerposts.org/en/blog/langflow-cve-2026-55255-idor-cisa-kev Hacker Posts en 2026-07-08T00:00:00.000Z Langflow CVE-2026-55255 IDOR added to CISA KEV, patch to 1.9.2 https://www.hackerposts.org/fr/blog/roundcube-1-6-17-1-7-2-certfr-2026-avi-0835 Hacker Posts fr 2026-07-08T00:00:00.000Z Roundcube 1.6.17 / 1.7.2 corrigent un XSS zero-click en texte brut (CERTFR-2026-AVI-0835) https://www.hackerposts.org/fr/blog/spip-4-4-16-certfr-2026-avi-0838-sqli-xss Hacker Posts fr 2026-07-08T00:00:00.000Z SPIP 4.4.16 corrige SQLi, XSS et fuite de données (CERTFR-2026-AVI-0838)