You are on the
PUBLIC
PRIVATE
site
The CERT dedicated to the Industry, Services and Tertiary community
First center for alert and reaction to computer attacks
+2 100
NOTICES / YEAR
+7 800
NOTICE UPDATES / YEAR
+16
ALERTS / YEAR
+3 100
PRODUCTS MONITORED
+33 000
ASSOCIATED VERSIONS
Alert level
September 8, 2026
High risk
(*)Excluding RU-UA and Israel-US-Iran conflicts: The lock does not take into account the risk induced by these conflicts, although this threat is still present.
-
AL-2026.017 MikroTik devices
-
AL-2026.016 NetScaler ADC & Gateway
-
AL-2026.015 Sharepoint (CVE-2026-63520)
-
AL-2026.014 Sharepoint (CVE-2026-50522)
- AL-2026.013 WordPress Core
Crisis Management Hub
Israel-US-Iran-Conflict
Alert Level
Update Info
<6 month
Cisco Catalyst SD-WAN
Alert Level
Update Info
<6 month
React2Shell
Alert Level
Update Info
>6 months
Oracle EBS (CVE-2025-61882)
Alert Level
Update Info
>6 months
Netscaler #CitrixDeelb
Alert Level
Update Info
>6 months
SharePoint #ToolShell
Alert Level
Update Info
>6 months
NetScaler (CitrixBleed2, etc)
Alert Level
Update Info
>6 months
Examples of advisories issued the previous week
Vulnerabilities in Traefik
AV-2026.2479
Vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE)
AV-2026.2355
Vulnerabilities in Microsoft Exchange Server
AV-2026.2267
Vulnerabilities in Microsoft Sharepoint
AV-2026.2258
Vulnerability in the ProFTPD server
AV-2026.1054
Cert-IST publications
Linux under pressure: the cascade of vulnerabilities in May 2026
This article comes from the Cert-IST monthly bulletin n°344 (May 2026).
08-Jul-2026
APT28 OPSEC blunder exposes espionage operations targeting European entities
This article comes from the Cert-IST monthly bulletin n°342 (March 2026).
07-Jun-2026
Cert-IST 2026 report on attacks and vulnerabilities in 2025
The Cert-IST publishes its 2026 report on the main vulnerabilities and attacks that occurred during 2025.
06-Mar-2026
