Cameroon Legal Guide

### Vulnérabilité dans les produits Palo Alto Networks (27 octobre 2026)

• Jurisdiction: Cameroon
• What changed: A vulnerability has been discovered in Palo Alto Networks products, allowing an attacker to trigger remote arbitrary code execution, remote denial of service, and data confidentiality breaches.
• Citation and date: CERTFR-2026-AVI-1396, 27 octobre 2026
• Source: cert.cyber.gouv.fr

### Multiples vulnérabilités dans Palo Alto Networks PAN-OS (28 octobre 2026)

• Jurisdiction: Cameroon
• What changed: Multiple vulnerabilities have been discovered in Palo Alto Networks PAN-OS, allowing an attacker to trigger remote arbitrary code execution; Palo Alto Networks indicates that CVE-2026-109618 and CVE-2026-109619 are actively exploited.
• Citation and date: CERTFR-2026-AVI-1402, 28 octobre 2026
• Source: cert.cyber.gouv.fr

### Vulnérabilité dans CPython (28 octobre 2026)

• Jurisdiction: Cameroon
• What changed: A vulnerability has been discovered in CPython, allowing an attacker to trigger a security policy bypass.
• Citation and date: CERTFR-2026-AVI-1397, 28 octobre 2026
• Source: cert.cyber.gouv.fr

### Vulnérabilité dans Citrix XenServer (26 octobre 2026)

• Jurisdiction: Cameroon
• What changed: A vulnerability has been discovered in Citrix XenServer that allows an attacker to bypass security policy.
• Citation and date: CERTFR-2026-AVI-1384, 26 octobre 2026
• Source: cert.cyber.gouv.fr

### Multiples vulnérabilités dans les produits VMware (26 octobre 2026)

• Jurisdiction: Cameroon
• What changed: Multiple vulnerabilities have been discovered in VMware products that allow an attacker to trigger a security issue unspecified by the vendor.
• Citation and date: CERTFR-2026-AVI-1385, 26 octobre 2026
• Source: cert.cyber.gouv.fr

### Vulnérabilité dans les produits Microsoft (26 octobre 2026)

• Jurisdiction: Cameroon
• What changed: A vulnerability has been discovered in Microsoft products that allows an attacker to escalate privileges.
• Citation and date: CERTFR-2026-AVI-1383, 26 octobre 2026
• Source: cert.cyber.gouv.fr

### [Mise à jour du 26 octobre 2026] Le 23 octobre 2026, PHP a publié un avis de sécurité concernant la vulnérabilité CVE-2026-115560. Celle-ci permet une exécution de code arbitraire à distance. L'éditeur estime que les conditions d'exploitation exigent une combinaison d'options de configuration...

• Jurisdiction: Cameroon
• What changed: A security advisory was issued regarding vulnerability CVE-2026-115560 in PHP, which allows remote arbitrary code execution under specific configuration conditions.
• Citation and date: not stated, 26 October 2026
• Source: cert.cyber.gouv.fr

### Multiples vulnérabilités dans ISC BIND (22 octobre 2026)

• Jurisdiction: Cameroon
• What changed: Multiple vulnerabilities were discovered in ISC BIND that allow an attacker to trigger remote arbitrary code execution and remote denial of service.
• Citation and date: CERTFR-2026-AVI-1365, 22 October 2026
• Source: cert.cyber.gouv.fr

### Multiples vulnérabilités dans Node (22 octobre 2026)

• Jurisdiction: Cameroon
• What changed: Multiple vulnerabilities were discovered in Node.js, some of which allow an attacker to trigger remote arbitrary code execution, security policy bypass, and an unspecified security issue.
• Citation and date: CERTFR-2026-AVI-1367, 22 October 2026
• Source: cert.cyber.gouv.fr

### Critical PHP2Shell vulnerabilities in the PHP core

• Jurisdiction: Cameroon
• What changed: Critical vulnerabilities in the PHP core were reported, allowing potential remote code execution and other security impacts.
• Citation and date: not stated
• Source: antic.cm

### Vulnérabilité dans Mattermost Server (19 octobre 2026)

• Jurisdiction: Cameroon
• What changed: A vulnerability was discovered in Mattermost Server that could lead to an unspecified security issue as per the vendor.
• Citation and date: CERTFR-2026-AVI-1338, 19 octobre 2026
• Source: www.cert.ssi.gouv.fr

### Multiples vulnérabilités dans les produits F5 (19 octobre 2026)

• Jurisdiction: Cameroon
• What changed: Multiple vulnerabilities were discovered in F5 products, some of which allow remote code execution, remote denial of service, and data confidentiality breaches.
• Citation and date: CERTFR-2026-AVI-1341, 19 octobre 2026
• Source: www.cert.ssi.gouv.fr

### Multiples vulnérabilités dans les produits Microsoft (14 octobre 2026)

• Jurisdiction: Cameroon
• What changed: Multiple vulnerabilities have been discovered in Microsoft products, some of which allow an attacker to remotely execute arbitrary code, escalate privileges, or cause remote denial of service.
• Citation and date: CERTFR-2026-AVI-1316/, 14 octobre 2026
• Source: cert.ssi.gouv.fr

### Multiples vulnérabilités dans Microsoft .Net (14 octobre 2026)

• Jurisdiction: Cameroon
• What changed: Multiple vulnerabilities have been discovered in Microsoft .Net, some of which allow an attacker to remotely execute arbitrary code, escalate privileges, or cause remote denial of service.
• Citation and date: CERTFR-2026-AVI-1313/, 14 octobre 2026
• Source: cert.ssi.gouv.fr

### Multiples vulnérabilités dans les produits Citrix (14 octobre 2026)

• Jurisdiction: Cameroon
• What changed: Multiple vulnerabilities have been discovered in Citrix products, some of which allow an attacker to execute arbitrary code, escalate privileges, or cause remote denial of service.
• Citation and date: CERTFR-2026-AVI-1310/, 14 octobre 2026
• Source: cert.ssi.gouv.fr

### Multiples vulnérabilités dans les produits SAP (13 octobre 2026)

• Jurisdiction: Cameroon
• What changed: Multiple vulnerabilities have been discovered in SAP products, some of which allow an attacker to trigger remote arbitrary code execution, data confidentiality breaches, and SQL injection (SQLi).
• Citation and date: CERTFR-2026-AVI-1300, 13 octobre 2026
• Source: cert.ssi.gouv.fr

### Multiples vulnérabilités dans les produits Ivanti (14 octobre 2026)

• Jurisdiction: Cameroon
• What changed: Multiple vulnerabilities have been discovered in Ivanti products, some of which allow an attacker to trigger remote arbitrary code execution, privilege escalation, and data confidentiality breaches.
• Citation and date: CERTFR-2026-AVI-1311, 14 octobre 2026
• Source: cert.ssi.gouv.fr

### Multiples vulnérabilités dans Microsoft Office (14 octobre 2026)

• Jurisdiction: Cameroon
• What changed: Multiple vulnerabilities have been discovered in Microsoft Office, some of which allow an attacker to trigger remote arbitrary code execution, privilege escalation, and data confidentiality breaches.
• Citation and date: CERTFR-2026-AVI-1312, 14 octobre 2026
• Source: cert.ssi.gouv.fr

### Multiples vulnérabilités dans SonicWall Secure Mobile Access (02 septembre 2026)

• Jurisdiction: Cameroon
• What changed: The National Agency for Information and Communication Technologies reported multiple vulnerabilities in SonicWall Secure Mobile Access (SMA) 1000, including a critical SSRF vulnerability exploitable by an unauthenticated attacker.
• Citation and date: CERTFR-2026-ALE-009, 02 septembre 2026
• Source: cert.ssi.gouv.fr

### Vulnérabilité dans Metabase (10 septembre 2026)

• Jurisdiction: Cameroon
• What changed: A critical vulnerability in Metabase allows an unauthenticated attacker to perform SQL injection, potentially gaining administrative rights.
• Citation and date: CERTFR-2026-ALE-010, 10 septembre 2026
• Source: cert.ssi.gouv.fr

### Multiples vulnérabilités dans Google Android (06 octobre 2026)

• Jurisdiction: Cameroon
• What changed: Multiple vulnerabilities in Google Android could allow remote code execution, privilege escalation, and data confidentiality breaches.
• Citation and date: CERTFR-2026-AVI-1265, 06 octobre 2026
• Source: cert.ssi.gouv.fr

### Vulnérabilité dans GitLab (05 octobre 2026)

• Jurisdiction: Cameroon
• What changed: A vulnerability has been discovered in GitLab that allows an attacker to remotely execute arbitrary code.
• Citation and date: CERTFR-2026-AVI-1262/, 05 octobre 2026
• Source: www.cert.ssi.gouv.fr

### Multiples vulnérabilités dans Zabbix (05 octobre 2026)

• Jurisdiction: Cameroon
• What changed: Multiple vulnerabilities have been discovered in Zabbix, some of which allow an attacker to remotely cause denial of service, data confidentiality breaches, and data integrity breaches.
• Citation and date: CERTFR-2026-AVI-1261/, 05 octobre 2026
• Source: www.cert.ssi.gouv.fr

### Vulnérabilité dans les produits Atlassian (06 octobre 2026)

• Jurisdiction: Cameroon
• What changed: A vulnerability has been discovered in Atlassian products that allows an attacker to compromise data confidentiality.
• Citation and date: CERTFR-2026-AVI-1264/, 06 octobre 2026
• Source: www.cert.ssi.gouv.fr

### Vulnérabilité dans Microsoft Office (06 octobre 2026)

• Jurisdiction: Cameroon
• What changed: A vulnerability has been discovered in Microsoft Office that allows an attacker to remotely execute arbitrary code.
• Citation and date: CERTFR-2026-AVI-1266/, 06 octobre 2026
• Source: www.cert.ssi.gouv.fr