Changeflow GovPing Data Privacy & Cybersecurity Microsoft Vulnerability CVE-2026-5958 Advisory
Priority review Guidance Added Final

Microsoft Vulnerability CVE-2026-5958 Advisory

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published
Detected
Email

Summary

CERT-FR published advisory CERTFR-2026-AVI-0494 on 24 April 2026 informing of a vulnerability in Microsoft products, referenced as CVE-2026-5958. The vulnerability was disclosed in Microsoft's security bulletin dated 22 April 2026. Affected systems include azl3 sed versions prior to 4.9-2. The risk level is unspecified by the editor, and no patch is detailed in this advisory — CERT-FR directs affected parties to consult Microsoft's update guide for remediation.

“Une vulnérabilité a été découverte dans les produits Microsoft.”

CERT-FR , verbatim from source
Published by CERT-FR on cert.ssi.gouv.fr . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .

About this source

CERT-FR is the French government's national cybersecurity incident response team, run by the ANSSI. Their advisory feed publishes vulnerability disclosures, active exploitation warnings, and emergency patching guidance for software in widespread enterprise use: browsers, hypervisors, ERP systems, network equipment, file transfer products. Around 180 advisories a month. The advisories are written in French but cover the same vulnerability universe as CISA, NCSC-UK, BSI's CERT-Bund, and JPCERT, often hours earlier on European-headquartered vendors. Watch this if you patch enterprise software, run a SOC, write detection content, or track Schneider, Dassault, OVH, Atos, or any French-vendor advisory faster than English-language sources will surface it. GovPing publishes each advisory with the affected vendor, severity, and CERT-FR link.

What changed

CERT-FR issued a security advisory regarding CVE-2026-5958, a vulnerability discovered in Microsoft products. The vulnerability allows an attacker to cause an unspecified security issue, per the editor's disclosure. Affected systems are azl3 sed versions 4.9-1 and earlier (prior to version 4.9-2). The risk level has not been specified by Microsoft.

Organisations using Microsoft products should monitor Microsoft's security update guide for available patches. IT security teams should assess whether azl3 sed is deployed in their environment and apply the relevant update when available. This advisory serves as an early warning from France's national CERT; no specific patch version or CVSS score is cited in the source.

What to do next

  1. Refer to vendor security bulletin for patches

Archived snapshot

Apr 24, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 24 avril 2026 N° CERTFR-2026-AVI-0494 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Vulnérabilité dans les produits Microsoft

Gestion du document

| Référence | CERTFR-2026-AVI-0494 |
| Titre | Vulnérabilité dans les produits Microsoft |
| Date de la première version | 24 avril 2026 |
| Date de la dernière version | 24 avril 2026 |
| Source(s) | Bulletin de sécurité Microsoft CVE-2026-5958 du 22 avril 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.


Risque

  • Non spécifié par l'éditeur

Systèmes affectés

  • azl3 sed 4.9-1 versions antérieures à 4.9-2

Résumé

Une vulnérabilité a été découverte dans les produits Microsoft. Elle permet à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation


Gestion détaillée du document

  1. le 24 avril 2026 Version initiale

Get daily alerts for CERT-FR Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-FR.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Classification

Agency
CERT-FR
Published
April 24th, 2026
Instrument
Guidance
Branch
Executive
Source language
fr
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
CERTFR-2026-AVI-0494

Who this affects

Applies to
Technology companies Manufacturers
Industry sector
5112 Software & Technology
Activity scope
Vulnerability disclosure Patch management Security advisories
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Data Privacy Consumer Protection

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!