{"id":"2026-11-02-18","builtAt":"2026-11-02T17:02:38.782Z","page":"https://www.volley.nomvex.com/tech/brief?edition=2026-11-02-18","method":"https://www.volley.nomvex.com/tech/brief#methode","stories":[{"key":"srzq9vg","tier":"official","title":"Multiples vulnérabilités dans Redmine (02 novembre 2026)","titles":{"fr":"Multiples vulnérabilités dans Redmine (02 novembre 2026)"},"topics":["cyber"],"published":"2026-11-02T00:00:00.000Z","origins":[{"label":"ANSSI","first":"2026-11-02T00:00:00.000Z","official":true,"sources":["CERT-FR — Avis"]}],"sources":[{"name":"CERT-FR — Avis","url":"https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1434/","tier":"official","lang":"fr","paywall":false,"rumour":null,"owner":"ANSSI","published":"2026-11-02T00:00:00.000Z"}],"quotes":[{"url":"https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1434/","text":"De multiples vulnérabilités ont été découvertes dans Redmine. Certaines d'entre elles permettent à un attaquant de provoquer une injection de code indirecte à distance (XSS), un contournement de la politique de sécurité et un déni de service.","tier":"official","source":"CERT-FR — Avis"}],"cves":["CVE-2026-104935"],"facts":{"fr":"Faille CVE-2026-104935 · exploitée activement (CISA KEV, ajoutée le 2026-10-13)","en":"Flaw CVE-2026-104935 · actively exploited (CISA KEV, added 2026-10-13)","exploited":[{"cve":"CVE-2026-104935","source":"CISA KEV","dateAdded":"2026-10-13"}],"endOfLife":[]}},{"key":"ssrfpzz","tier":"official","title":"Vulnérabilité dans Traefik (02 novembre 2026)","titles":{"fr":"Vulnérabilité dans Traefik (02 novembre 2026)"},"topics":["cyber"],"published":"2026-11-02T00:00:00.000Z","origins":[{"label":"ANSSI","first":"2026-11-02T00:00:00.000Z","official":true,"sources":["CERT-FR — Avis"]}],"sources":[{"name":"CERT-FR — Avis","url":"https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1439/","tier":"official","lang":"fr","paywall":false,"rumour":null,"owner":"ANSSI","published":"2026-11-02T00:00:00.000Z"}],"quotes":[{"url":"https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1439/","text":"Une vulnérabilité a été découverte dans Traefik. Elle permet à un attaquant de provoquer un déni de service à distance.","tier":"official","source":"CERT-FR — Avis"}],"cves":[],"facts":{"fr":null,"en":null,"exploited":[],"endOfLife":[]}},{"key":"s8al4rh","tier":"official","title":"Bulletin d'actualité CERTFR-2026-ACT-046 (02 novembre 2026)","titles":{"fr":"Bulletin d'actualité CERTFR-2026-ACT-046 (02 novembre 2026)"},"topics":["cyber"],"published":"2026-11-02T00:00:00.000Z","origins":[{"label":"ANSSI","first":"2026-11-02T00:00:00.000Z","official":true,"sources":["CERT-FR / ANSSI — Actualités"]}],"sources":[{"name":"CERT-FR / ANSSI — Actualités","url":"https://www.cert.cyber.gouv.fr/actualite/CERTFR-2026-ACT-046/","tier":"official","lang":"fr","paywall":false,"rumour":null,"owner":"ANSSI","published":"2026-11-02T00:00:00.000Z"}],"quotes":[{"url":"https://www.cert.cyber.gouv.fr/actualite/CERTFR-2026-ACT-046/","text":"Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...","tier":"official","source":"CERT-FR / ANSSI — Actualités"}],"cves":[],"facts":{"fr":null,"en":null,"exploited":[],"endOfLife":[]}}],"pending":[{"title":"Quelles sont les meilleures enceintes Bluetooth de JBL ? Le comparatif","sources":[{"name":"Frandroid","url":"https://www.frandroid.com/guide-dachat/1640097_notre-selection-des-meilleures-enceintes-bluetooth-jbl"}],"published":"2026-11-02T17:01:15.000Z"},{"title":"Airalo (2026) : notre avis sur la référence des fournisseurs d’eSIM pour voyager","sources":[{"name":"Frandroid","url":"https://www.frandroid.com/telecom/esim-voyage/3260913_airalo-2026-notre-avis-sur-la-reference-des-fournisseurs-desim-pour-voyager"}],"published":"2026-11-02T17:00:00.000Z"},{"title":"Le singles Day 2026 a de l’avance : les offres du Black Friday chinois sont déjà là","sources":[{"name":"Numerama","url":"https://www.numerama.com/tech/2365399-singles-day-2026-en-direct-suivez-les-meilleures-offres-du-black-friday-chinois.html"}],"published":"2026-11-02T16:59:57.000Z"},{"title":"OnePlus s’attaque à l’iPad Pro, la Pad 4 avec 512 Go se vend à un tarif de folie pure","sources":[{"name":"01net","url":"https://www.01net.com/bons-plans/oneplus-sattaque-a-lipad-pro-la-pad-4-avec-512-go-se-vend-a-un-tarif-de-folie-pure.html"}],"published":"2026-11-02T16:58:21.000Z"},{"title":"Black Friday Cdiscount : MacBook Air, TV TCL, Dyson… voici les vraies bonnes affaires","sources":[{"name":"Frandroid","url":"https://www.frandroid.com/bons-plans/3305125_black-friday-cdiscount-macbook-air-tv-tcl-dyson-voici-les-vraies-bonnes-affaires"}],"published":"2026-11-02T16:57:15.000Z"},{"title":"Electra avait promis de ne pas toucher aux anciens forfaits de recharge : 6 mois plus tard, c’est raté","sources":[{"name":"Numerama","url":"https://www.numerama.com/vroom/2365999-electra-avait-promis-de-ne-pas-toucher-aux-anciens-forfaits-de-recharge-6-mois-plus-tard-cest-rate.html"}],"published":"2026-11-02T16:55:00.000Z"},{"title":"Squarespace is laying off 19 percent of employees","sources":[{"name":"The Verge","url":"https://www.theverge.com/tech/1024447/squarespace-layoffs-19-percent"}],"published":"2026-11-02T16:50:47.000Z"},{"title":"Black Friday Boulanger : voici les 19 vrais bons plans tech à saisir","sources":[{"name":"Frandroid","url":"https://www.frandroid.com/bons-plans/3303015_black-friday-boulanger-voici-les-17-vrais-bons-plans-tech-a-saisir"}],"published":"2026-11-02T16:47:10.000Z"},{"title":"Zelda: Ocarina of Time : le voyage rapide a été supprimé pour préserver « l’exploration et la découverte »","sources":[{"name":"Numerama","url":"https://www.numerama.com/pop-culture/2365997-zelda-ocarina-of-time-le-voyage-rapide-a-ete-supprime-pour-preserver-lexploration-et-la-decouverte.html"}],"published":"2026-11-02T16:44:27.000Z"},{"title":"Marvell veut s’offrir Lumentum et ses puces optiques pour 115 milliards de dollars","sources":[{"name":"Next","url":"https://next.ink/265207/marvell-veut-soffrir-lumentum-et-ses-puces-optiques-pour-115-milliards-de-dollars/"}],"published":"2026-11-02T16:42:55.000Z"}],"feeds":[{"id":"certfr-alerte","ok":true,"lang":"fr","name":"CERT-FR — Alertes","items":40},{"id":"certfr-avis","ok":true,"lang":"fr","name":"CERT-FR — Avis","items":40},{"id":"certfr-actu","ok":true,"lang":"fr","name":"CERT-FR / ANSSI — Actualités","items":40},{"id":"anssi","ok":false,"lang":"fr","name":"ANSSI (cyber.gouv.fr)","items":0},{"id":"cnil","ok":true,"lang":"fr","name":"CNIL","items":10},{"id":"next","ok":true,"lang":"fr","name":"Next","items":50},{"id":"numerama","ok":true,"lang":"fr","name":"Numerama","items":15},{"id":"frandroid","ok":true,"lang":"fr","name":"Frandroid","items":15},{"id":"01net","ok":true,"lang":"fr","name":"01net","items":30},{"id":"zataz","ok":true,"lang":"fr","name":"ZATAZ","items":10},{"id":"cisa-advisories","ok":false,"lang":"en","name":"CISA — Cybersecurity Advisories","items":0},{"id":"hn","ok":true,"lang":"en","name":"Hacker News — Front page","items":30},{"id":"verge","ok":true,"lang":"en","name":"The Verge","items":10},{"id":"ars","ok":true,"lang":"en","name":"Ars Technica","items":20},{"id":"bleeping","ok":true,"lang":"en","name":"BleepingComputer","items":15},{"id":"android-dev","ok":true,"lang":"en","name":"Android Developers Blog","items":20},{"id":"apple-dev","ok":true,"lang":"en","name":"Apple Developer News","items":100}],"kevChecked":"2026-10-30"}