Critical vulnerabilities identified by CERT-FR

The bulletin CERTFR-2026-ACT-044, published on October 19, 2026, by CERT-FR (ANSSI), lists active flaws in widely deployed systems. Among them, the vulnerability CVE-2026-76519 in Cisco AsyncOS is being exploited with a CVSS score of 9.8, according to CERT-FR. This critical flaw could allow remote takeover of affected devices.

Another major threat: the vulnerability CVE-2026-96951 affects multiple versions of Windows and Windows Server, including editions Windows 10 22H2, Windows 11 26H1, Windows 10 21H2, Windows 10 1607, and Windows 11 2, with a CVSS score of 8.8. CERT-FR confirms its active exploitation.

Systems running Palo Alto Networks PAN-OS are also affected by the flaw CVE-2026-0322, exploited with a CVSS score of 8.6. Meanwhile, GitLab Community Edition (CE) and Enterprise Edition (EE) suffer from the vulnerability CVE-2026-97229, rated at the maximum level of 10 on the CVSS scale.

Exposing a management interface to the Internet goes against best practices, and these exploited vulnerabilities demonstrate unprecedented severity.

Industrial controller compromises: a concrete threat to critical infrastructures

CERT-FR reports remote compromises of controllers in refrigeration systems using equipment from Danfoss (AK-SM, AK-SC series) and Copeland/Dixell (xweb series), starting October 12, 2026. These attacks target industrial systems often connected to internal networks, exposing organizations to risks of sabotage or operational disruption.

This situation highlights the importance of segmenting industrial networks and limiting the exposure of management interfaces, as CERT-FR emphasizes: « Exposing a management interface to the Internet goes against best practices. »

Other exploited vulnerabilities: Ivanti, AhsayCBS, and PostgreSQL in the crosshairs

The CERT-FR bulletin also mentions the vulnerability CVE-2026-104935 in Ivanti Connect Secure, actively exploited according to the vendor. Additionally, the AhsayCBS software exhibits two exploited flaws: CVE-2026-105134 (CVSS score 9.3) and CVE-2026-105133 (CVSS score 5.5). Finally, the flaw CVE-2026-107315 in PostgreSQL JDBC is reported with a CVSS score of 5.3, and a public proof of concept is available.

What this means here: implications for businesses and administrations in West Africa

For businesses and administrations in Benin and West Africa, these alerts highlight the urgency of updating critical systems and applying patches, particularly for outdated Windows versions still in use in some environments. Organizations using industrial equipment such as Danfoss or Copeland/Dixell refrigeration controllers should isolate these systems from exposed networks and verify their exposure on the Internet.

Public administrations, often reliant on solutions like GitLab or Palo Alto Networks for infrastructure management, could be particularly vulnerable if these flaws are not corrected promptly. Private-sector companies, especially those operating in logistics or food processing, where refrigeration systems are essential, should also assess the risks linked to these compromises.

Finally, the active exploitation of vulnerabilities like those in Ivanti or AhsayCBS underscores the need to monitor security updates and adopt network segmentation practices to limit the spread of attacks.