CERT-FR weekly critical patch advisory: WordPress, SharePoint, Oracle, Tenable

French CERT publishes weekly vulnerability digest for week 30, highlighting 40+ critical and high-severity flaws across WordPress, Oracle, Microsoft SharePoint, Check Point, and Tenable—many already exploited in the wild.

CERT-FR's weekly bulletin for 20–26 July 2026 aggregates significant vulnerabilities from the prior week, emphasizing those requiring immediate remediation. The most urgent threats include two WordPress flaws (CVE-2026-60137 SQL injection and CVE-2026-63030 security policy bypass) that attackers can chain to achieve remote code execution in versions 6.9 and later; public exploits exist and mass exploitation is anticipated. Microsoft SharePoint contains two critical RCE vulnerabilities (CVE-2026-50522 and CVE-2026-58644); CVE-2026-58644 is actively exploited in the wild, and CVE-2026-50522 has public proof-of-concept and confirmed active abuse.

Oracle's July CPU patch addresses 18+ critical and high-severity flaws across WebLogic, PeopleSoft, and Database Server, most permitting unauthenticated remote code execution. Check Point Multi-Domain Security Management is affected by two critical issues enabling security policy bypass and privilege escalation. Tenable Security Center contains three critical SQL injection and RCE flaws (CVE-2026-64877, 64878, 64879). Additional exploited vulnerabilities affect Langflow, ServiceNow AI, Alibaba Fastjson, and Foxit PDF products. The bulletin does not flag exploitation status for most Oracle, Check Point, or Tenable issues but recommends immediate patching. Temporary mitigations for WordPress include blocking unauthenticated REST API access via WAF rules targeting /wp-json/batch/v1.

Source reporting: https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-032