{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Cognos Analytics Mobile versions ant\u00e9rieures \u00e0 1.1.26","product":{"name":"Cognos Analytics","vendor":{"name":"IBM","scada":false}}},{"description":"Sterling Control Center versions 6.3.1.0 sans le correctif iFix09","product":{"name":"Sterling Control Center","vendor":{"name":"IBM","scada":false}}},{"description":"Tivoli Monitoring sans le dernier correctif de s\u00e9curit\u00e9","product":{"name":"Tivoli Monitoring","vendor":{"name":"IBM","scada":false}}},{"description":"QRadar SIEM versions 7.5.0 ant\u00e9rieures \u00e0 7.5.0 UP15 IF03","product":{"name":"QRadar SIEM","vendor":{"name":"IBM","scada":false}}},{"description":"Sterling Control Center versions 6.4.2.0 sans le correctif iFix04","product":{"name":"Sterling Control Center","vendor":{"name":"IBM","scada":false}}},{"description":"QRadar Suite Software versions ant\u00e9rieures \u00e0 1.11.11.0","product":{"name":"QRadar Suite Software","vendor":{"name":"IBM","scada":false}}},{"description":"Analyst Workflow versions ant\u00e9rieures \u00e0 3.1.0","product":{"name":"N/A","vendor":{"name":"IBM","scada":false}}},{"description":"Cloud Pak for Security versions ant\u00e9rieures \u00e0 1.11.11.0","product":{"name":"Cloud Pak","vendor":{"name":"IBM","scada":false}}},{"description":"Sterling Control Center versions 6.4.1.0 sans le correctif iFix03","product":{"name":"Sterling Control Center","vendor":{"name":"IBM","scada":false}}}],"affected_systems_content":"","content":"## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des correctifs (cf. section Documentation).","cves":[{"name":"CVE-2026-27980","url":"https://www.cve.org/CVERecord?id=CVE-2026-27980"},{"name":"CVE-2026-35388","url":"https://www.cve.org/CVERecord?id=CVE-2026-35388"},{"name":"CVE-2006-10003","url":"https://www.cve.org/CVERecord?id=CVE-2006-10003"},{"name":"CVE-2026-27135","url":"https://www.cve.org/CVERecord?id=CVE-2026-27135"},{"name":"CVE-2026-41324","url":"https://www.cve.org/CVERecord?id=CVE-2026-41324"},{"name":"CVE-2026-40466","url":"https://www.cve.org/CVERecord?id=CVE-2026-40466"},{"name":"CVE-2026-2229","url":"https://www.cve.org/CVERecord?id=CVE-2026-2229"},{"name":"CVE-2026-35386","url":"https://www.cve.org/CVERecord?id=CVE-2026-35386"},{"name":"CVE-2026-32597","url":"https://www.cve.org/CVERecord?id=CVE-2026-32597"},{"name":"CVE-2025-12816","url":"https://www.cve.org/CVERecord?id=CVE-2025-12816"},{"name":"CVE-2026-22036","url":"https://www.cve.org/CVERecord?id=CVE-2026-22036"},{"name":"CVE-2026-31402","url":"https://www.cve.org/CVERecord?id=CVE-2026-31402"},{"name":"CVE-2025-53643","url":"https://www.cve.org/CVERecord?id=CVE-2025-53643"},{"name":"CVE-2025-68741","url":"https://www.cve.org/CVERecord?id=CVE-2025-68741"},{"name":"CVE-2026-33349","url":"https://www.cve.org/CVERecord?id=CVE-2026-33349"},{"name":"CVE-2026-34982","url":"https://www.cve.org/CVERecord?id=CVE-2026-34982"},{"name":"CVE-2026-33940","url":"https://www.cve.org/CVERecord?id=CVE-2026-33940"},{"name":"CVE-2024-12797","url":"https://www.cve.org/CVERecord?id=CVE-2024-12797"},{"name":"CVE-2026-40974","url":"https://www.cve.org/CVERecord?id=CVE-2026-40974"},{"name":"CVE-2026-1527","url":"https://www.cve.org/CVERecord?id=CVE-2026-1527"},{"name":"CVE-2026-32875","url":"https://www.cve.org/CVERecord?id=CVE-2026-32875"},{"name":"CVE-2026-31988","url":"https://www.cve.org/CVERecord?id=CVE-2026-31988"},{"name":"CVE-2024-28102","url":"https://www.cve.org/CVERecord?id=CVE-2024-28102"},{"name":"CVE-2026-40977","url":"https://www.cve.org/CVERecord?id=CVE-2026-40977"},{"name":"CVE-2026-22013","url":"https://www.cve.org/CVERecord?id=CVE-2026-22013"},{"name":"CVE-2026-28421","url":"https://www.cve.org/CVERecord?id=CVE-2026-28421"},{"name":"CVE-2026-1525","url":"https://www.cve.org/CVERecord?id=CVE-2026-1525"},{"name":"CVE-2026-22018","url":"https://www.cve.org/CVERecord?id=CVE-2026-22018"},{"name":"CVE-2026-31431","url":"https://www.cve.org/CVERecord?id=CVE-2026-31431"},{"name":"CVE-2025-6176","url":"https://www.cve.org/CVERecord?id=CVE-2025-6176"},{"name":"CVE-2025-11953","url":"https://www.cve.org/CVERecord?id=CVE-2025-11953"},{"name":"CVE-2026-23745","url":"https://www.cve.org/CVERecord?id=CVE-2026-23745"},{"name":"CVE-2025-59471","url":"https://www.cve.org/CVERecord?id=CVE-2025-59471"},{"name":"CVE-2026-33941","url":"https://www.cve.org/CVERecord?id=CVE-2026-33941"},{"name":"CVE-2026-0848","url":"https://www.cve.org/CVERecord?id=CVE-2026-0848"},{"name":"CVE-2025-41248","url":"https://www.cve.org/CVERecord?id=CVE-2025-41248"},{"name":"CVE-2026-33412","url":"https://www.cve.org/CVERecord?id=CVE-2026-33412"},{"name":"CVE-2026-5121","url":"https://www.cve.org/CVERecord?id=CVE-2026-5121"},{"name":"CVE-2025-15284","url":"https://www.cve.org/CVERecord?id=CVE-2025-15284"},{"name":"CVE-2026-34282","url":"https://www.cve.org/CVERecord?id=CVE-2026-34282"},{"name":"CVE-2025-59472","url":"https://www.cve.org/CVERecord?id=CVE-2025-59472"},{"name":"CVE-2026-2581","url":"https://www.cve.org/CVERecord?id=CVE-2026-2581"},{"name":"CVE-2021-23337","url":"https://www.cve.org/CVERecord?id=CVE-2021-23337"},{"name":"CVE-2025-64718","url":"https://www.cve.org/CVERecord?id=CVE-2025-64718"},{"name":"CVE-2026-23401","url":"https://www.cve.org/CVERecord?id=CVE-2026-23401"},{"name":"CVE-2025-40252","url":"https://www.cve.org/CVERecord?id=CVE-2025-40252"},{"name":"CVE-2025-66031","url":"https://www.cve.org/CVERecord?id=CVE-2025-66031"},{"name":"CVE-2025-62718","url":"https://www.cve.org/CVERecord?id=CVE-2025-62718"},{"name":"CVE-2026-21860","url":"https://www.cve.org/CVERecord?id=CVE-2026-21860"},{"name":"CVE-2026-4800","url":"https://www.cve.org/CVERecord?id=CVE-2026-4800"},{"name":"CVE-2026-0847","url":"https://www.cve.org/CVERecord?id=CVE-2026-0847"},{"name":"CVE-2026-4424","url":"https://www.cve.org/CVERecord?id=CVE-2026-4424"},{"name":"CVE-2025-6545","url":"https://www.cve.org/CVERecord?id=CVE-2025-6545"},{"name":"CVE-2026-23865","url":"https://www.cve.org/CVERecord?id=CVE-2026-23865"},{"name":"CVE-2026-28417","url":"https://www.cve.org/CVERecord?id=CVE-2026-28417"},{"name":"CVE-2023-5764","url":"https://www.cve.org/CVERecord?id=CVE-2023-5764"},{"name":"CVE-2026-5598","url":"https://www.cve.org/CVERecord?id=CVE-2026-5598"},{"name":"CVE-2026-30922","url":"https://www.cve.org/CVERecord?id=CVE-2026-30922"},{"name":"CVE-2026-23191","url":"https://www.cve.org/CVERecord?id=CVE-2026-23191"},{"name":"CVE-2026-2359","url":"https://www.cve.org/CVERecord?id=CVE-2026-2359"},{"name":"CVE-2026-6918","url":"https://www.cve.org/CVERecord?id=CVE-2026-6918"},{"name":"CVE-2026-35535","url":"https://www.cve.org/CVERecord?id=CVE-2026-35535"},{"name":"CVE-2025-68724","url":"https://www.cve.org/CVERecord?id=CVE-2025-68724"},{"name":"CVE-2026-33939","url":"https://www.cve.org/CVERecord?id=CVE-2026-33939"},{"name":"CVE-2026-27699","url":"https://www.cve.org/CVERecord?id=CVE-2026-27699"},{"name":"CVE-2025-65945","url":"https://www.cve.org/CVERecord?id=CVE-2025-65945"},{"name":"CVE-2026-33228","url":"https://www.cve.org/CVERecord?id=CVE-2026-33228"},{"name":"CVE-2025-12758","url":"https://www.cve.org/CVERecord?id=CVE-2025-12758"},{"name":"CVE-2026-40175","url":"https://www.cve.org/CVERecord?id=CVE-2026-40175"},{"name":"CVE-2026-41044","url":"https://www.cve.org/CVERecord?id=CVE-2026-41044"},{"name":"CVE-2006-10002","url":"https://www.cve.org/CVERecord?id=CVE-2006-10002"},{"name":"CVE-2026-5795","url":"https://www.cve.org/CVERecord?id=CVE-2026-5795"},{"name":"CVE-2026-40975","url":"https://www.cve.org/CVERecord?id=CVE-2026-40975"},{"name":"CVE-2026-27942","url":"https://www.cve.org/CVERecord?id=CVE-2026-27942"},{"name":"CVE-2024-41073","url":"https://www.cve.org/CVERecord?id=CVE-2024-41073"},{"name":"CVE-2026-26960","url":"https://www.cve.org/CVERecord?id=CVE-2026-26960"},{"name":"CVE-2025-5187","url":"https://www.cve.org/CVERecord?id=CVE-2025-5187"},{"name":"CVE-2026-4923","url":"https://www.cve.org/CVERecord?id=CVE-2026-4923"},{"name":"CVE-2026-4867","url":"https://www.cve.org/CVERecord?id=CVE-2026-4867"},{"name":"CVE-2024-9902","url":"https://www.cve.org/CVERecord?id=CVE-2024-9902"},{"name":"CVE-2024-8775","url":"https://www.cve.org/CVERecord?id=CVE-2024-8775"},{"name":"CVE-2026-27199","url":"https://www.cve.org/CVERecord?id=CVE-2026-27199"},{"name":"CVE-2026-27903","url":"https://www.cve.org/CVERecord?id=CVE-2026-27903"},{"name":"CVE-2025-66471","url":"https://www.cve.org/CVERecord?id=CVE-2025-66471"},{"name":"CVE-2026-21441","url":"https://www.cve.org/CVERecord?id=CVE-2026-21441"},{"name":"CVE-2025-66030","url":"https://www.cve.org/CVERecord?id=CVE-2025-66030"},{"name":"CVE-2024-11079","url":"https://www.cve.org/CVERecord?id=CVE-2024-11079"},{"name":"CVE-2026-23897","url":"https://www.cve.org/CVERecord?id=CVE-2026-23897"},{"name":"CVE-2026-35385","url":"https://www.cve.org/CVERecord?id=CVE-2026-35385"},{"name":"CVE-2026-34601","url":"https://www.cve.org/CVERecord?id=CVE-2026-34601"},{"name":"CVE-2026-29057","url":"https://www.cve.org/CVERecord?id=CVE-2026-29057"},{"name":"CVE-2026-32874","url":"https://www.cve.org/CVERecord?id=CVE-2026-32874"},{"name":"CVE-2026-4519","url":"https://www.cve.org/CVERecord?id=CVE-2026-4519"},{"name":"CVE-2026-34197","url":"https://www.cve.org/CVERecord?id=CVE-2026-34197"},{"name":"CVE-2026-25128","url":"https://www.cve.org/CVERecord?id=CVE-2026-25128"},{"name":"CVE-2025-13333","url":"https://www.cve.org/CVERecord?id=CVE-2025-13333"},{"name":"CVE-2025-12635","url":"https://www.cve.org/CVERecord?id=CVE-2025-12635"},{"name":"CVE-2026-24842","url":"https://www.cve.org/CVERecord?id=CVE-2026-24842"},{"name":"CVE-2025-66221","url":"https://www.cve.org/CVERecord?id=CVE-2025-66221"},{"name":"CVE-2026-23950","url":"https://www.cve.org/CVERecord?id=CVE-2026-23950"},{"name":"CVE-2026-33036","url":"https://www.cve.org/CVERecord?id=CVE-2026-33036"},{"name":"CVE-2026-35414","url":"https://www.cve.org/CVERecord?id=CVE-2026-35414"},{"name":"CVE-2026-2950","url":"https://www.cve.org/CVERecord?id=CVE-2026-2950"},{"name":"CVE-2026-3304","url":"https://www.cve.org/CVERecord?id=CVE-2026-3304"},{"name":"CVE-2026-33916","url":"https://www.cve.org/CVERecord?id=CVE-2026-33916"},{"name":"CVE-2026-22016","url":"https://www.cve.org/CVERecord?id=CVE-2026-22016"},{"name":"CVE-2026-22021","url":"https://www.cve.org/CVERecord?id=CVE-2026-22021"},{"name":"CVE-2026-6100","url":"https://www.cve.org/CVERecord?id=CVE-2026-6100"},{"name":"CVE-2026-22007","url":"https://www.cve.org/CVERecord?id=CVE-2026-22007"},{"name":"CVE-2026-34268","url":"https://www.cve.org/CVERecord?id=CVE-2026-34268"},{"name":"CVE-2026-29786","url":"https://www.cve.org/CVERecord?id=CVE-2026-29786"},{"name":"CVE-2024-29371","url":"https://www.cve.org/CVERecord?id=CVE-2024-29371"},{"name":"CVE-2026-1519","url":"https://www.cve.org/CVERecord?id=CVE-2026-1519"},{"name":"CVE-2026-1528","url":"https://www.cve.org/CVERecord?id=CVE-2026-1528"},{"name":"CVE-2023-26132","url":"https://www.cve.org/CVERecord?id=CVE-2023-26132"},{"name":"CVE-2026-1526","url":"https://www.cve.org/CVERecord?id=CVE-2026-1526"},{"name":"CVE-2026-33937","url":"https://www.cve.org/CVERecord?id=CVE-2026-33937"},{"name":"CVE-2026-31808","url":"https://www.cve.org/CVERecord?id=CVE-2026-31808"},{"name":"CVE-2026-27459","url":"https://www.cve.org/CVERecord?id=CVE-2026-27459"},{"name":"CVE-2026-25639","url":"https://www.cve.org/CVERecord?id=CVE-2026-25639"},{"name":"CVE-2026-40973","url":"https://www.cve.org/CVERecord?id=CVE-2026-40973"},{"name":"CVE-2026-39373","url":"https://www.cve.org/CVERecord?id=CVE-2026-39373"},{"name":"CVE-2026-27448","url":"https://www.cve.org/CVERecord?id=CVE-2026-27448"},{"name":"CVE-2026-8620","url":"https://www.cve.org/CVERecord?id=CVE-2026-8620"},{"name":"CVE-2025-69277","url":"https://www.cve.org/CVERecord?id=CVE-2025-69277"},{"name":"CVE-2026-8633","url":"https://www.cve.org/CVERecord?id=CVE-2026-8633"},{"name":"CVE-2026-26278","url":"https://www.cve.org/CVERecord?id=CVE-2026-26278"},{"name":"CVE-2025-22870","url":"https://www.cve.org/CVERecord?id=CVE-2025-22870"},{"name":"CVE-2026-23490","url":"https://www.cve.org/CVERecord?id=CVE-2026-23490"},{"name":"CVE-2025-14009","url":"https://www.cve.org/CVERecord?id=CVE-2025-14009"},{"name":"CVE-2025-7339","url":"https://www.cve.org/CVERecord?id=CVE-2025-7339"},{"name":"CVE-2025-41249","url":"https://www.cve.org/CVERecord?id=CVE-2025-41249"},{"name":"CVE-2026-25896","url":"https://www.cve.org/CVERecord?id=CVE-2026-25896"},{"name":"CVE-2026-26996","url":"https://www.cve.org/CVERecord?id=CVE-2026-26996"},{"name":"CVE-2026-4786","url":"https://www.cve.org/CVERecord?id=CVE-2026-4786"},{"name":"CVE-2026-33938","url":"https://www.cve.org/CVERecord?id=CVE-2026-33938"},{"name":"CVE-2025-64756","url":"https://www.cve.org/CVERecord?id=CVE-2025-64756"},{"name":"CVE-2026-32141","url":"https://www.cve.org/CVERecord?id=CVE-2026-32141"},{"name":"CVE-2026-30951","url":"https://www.cve.org/CVERecord?id=CVE-2026-30951"},{"name":"CVE-2026-35387","url":"https://www.cve.org/CVERecord?id=CVE-2026-35387"},{"name":"CVE-2026-24001","url":"https://www.cve.org/CVERecord?id=CVE-2026-24001"},{"name":"CVE-2025-58754","url":"https://www.cve.org/CVERecord?id=CVE-2025-58754"},{"name":"CVE-2026-27837","url":"https://www.cve.org/CVERecord?id=CVE-2026-27837"},{"name":"CVE-2025-6547","url":"https://www.cve.org/CVERecord?id=CVE-2025-6547"},{"name":"CVE-2026-29063","url":"https://www.cve.org/CVERecord?id=CVE-2026-29063"},{"name":"CVE-2026-39983","url":"https://www.cve.org/CVERecord?id=CVE-2026-39983"},{"name":"CVE-2026-22008","url":"https://www.cve.org/CVERecord?id=CVE-2026-22008"},{"name":"CVE-2025-14813","url":"https://www.cve.org/CVERecord?id=CVE-2025-14813"},{"name":"CVE-2026-31802","url":"https://www.cve.org/CVERecord?id=CVE-2026-31802"},{"name":"CVE-2025-13465","url":"https://www.cve.org/CVERecord?id=CVE-2025-13465"},{"name":"CVE-2025-67221","url":"https://www.cve.org/CVERecord?id=CVE-2025-67221"},{"name":"CVE-2026-4926","url":"https://www.cve.org/CVERecord?id=CVE-2026-4926"},{"name":"CVE-2026-25547","url":"https://www.cve.org/CVERecord?id=CVE-2026-25547"},{"name":"CVE-2026-27904","url":"https://www.cve.org/CVERecord?id=CVE-2026-27904"},{"name":"CVE-2026-2739","url":"https://www.cve.org/CVERecord?id=CVE-2026-2739"},{"name":"CVE-2024-56462","url":"https://www.cve.org/CVERecord?id=CVE-2024-56462"},{"name":"CVE-2026-35213","url":"https://www.cve.org/CVERecord?id=CVE-2026-35213"},{"name":"CVE-2025-66418","url":"https://www.cve.org/CVERecord?id=CVE-2025-66418"},{"name":"CVE-2026-0846","url":"https://www.cve.org/CVERecord?id=CVE-2026-0846"}],"links":[],"reference":"CERTFR-2026-AVI-0667","revisions":[{"description":"Version initiale","revision_date":"2026-05-29T00:00:00.000000"}],"risks":[{"description":"D\u00e9ni de service \u00e0 distance"},{"description":"Injection de code indirecte \u00e0 distance (XSS)"},{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"Atteinte \u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es"},{"description":"Injection SQL (SQLi)"},{"description":"Non sp\u00e9cifi\u00e9 par l'\u00e9diteur"},{"description":"Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"},{"description":"Contournement de la politique de s\u00e9curit\u00e9"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"},{"description":"\u00c9l\u00e9vation de privil\u00e8ges"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d'entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.","title":"Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM","vendor_advisories":[{"published_at":"2026-05-27","title":"Bulletin de s\u00e9curit\u00e9 IBM 7274185","url":"https://www.ibm.com/support/pages/node/7274185"},{"published_at":"2026-05-27","title":"Bulletin de s\u00e9curit\u00e9 IBM 7274154","url":"https://www.ibm.com/support/pages/node/7274154"},{"published_at":"2026-05-27","title":"Bulletin de s\u00e9curit\u00e9 IBM 7274180","url":"https://www.ibm.com/support/pages/node/7274180"},{"published_at":"2026-05-27","title":"Bulletin de s\u00e9curit\u00e9 IBM 7274183","url":"https://www.ibm.com/support/pages/node/7274183"},{"published_at":"2026-05-25","title":"Bulletin de s\u00e9curit\u00e9 IBM 7273957","url":"https://www.ibm.com/support/pages/node/7273957"},{"published_at":"2026-05-27","title":"Bulletin de s\u00e9curit\u00e9 IBM 7274184","url":"https://www.ibm.com/support/pages/node/7274184"},{"published_at":"2026-05-28","title":"Bulletin de s\u00e9curit\u00e9 IBM 7274314","url":"https://www.ibm.com/support/pages/node/7274314"},{"published_at":"2026-05-27","title":"Bulletin de s\u00e9curit\u00e9 IBM 7274182","url":"https://www.ibm.com/support/pages/node/7274182"},{"published_at":"2026-05-27","title":"Bulletin de s\u00e9curit\u00e9 IBM 7274181","url":"https://www.ibm.com/support/pages/node/7274181"},{"published_at":"2026-05-22","title":"Bulletin de s\u00e9curit\u00e9 IBM 7273803","url":"https://www.ibm.com/support/pages/node/7273803"},{"published_at":"2026-05-22","title":"Bulletin de s\u00e9curit\u00e9 IBM 7272901","url":"https://www.ibm.com/support/pages/node/7272901"}]}