СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-77778 Improper access control vulnerability Zohocorp / ManageEngine Key Manager Plus | Высокий | 7.1 | — | 03.11.2026 | ||
| CVE-2026-77777 Improper access control vulnerability Zohocorp / ManageEngine Key Manager Plus | Высокий | 7.1 | — | 03.11.2026 | ||
| CVE-2026-40690 Apache Airflow: Assets graph view bypasses DAG level access control displaying unrelated topologies and all DAGs names to unauthorized users Apache Software Foundation / Apache Airflow · apache / airflow | Средний | 4.3 | 0,35 % | Патч | 24.04.2026 | |
| CVE-2026-38743 Apache Airflow: Dags endpoint might provide access to otherwise inaccessible entities Apache Software Foundation / Apache Airflow · apache / airflow | Средний | 4.3 | 0,35 % | Патч | 24.04.2026 | |
| CVE-2026-50502 Windows Event Logging Service Remote Code Execution Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 8.0 | 0,65 % | Патч | 14.07.2026 | |
| CVE-2026-50405 Windows Filtering Platform Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.8 | 0,3 % | Патч | 14.07.2026 | |
| CVE-2026-48581 Surface Broker SDMA Elevation of Privilege Vulnerability Microsoft / Microsoft Surface Go · Microsoft / Microsoft Surface Hub | Высокий | 7.8 | 0,3 % | Патч | 14.07.2026 | |
| CVE-2026-56155 Active Directory Federation Services Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Критический | 7.8 | 0,35 % | KEVПатч | 14.07.2026 | |
| CVE-2026-55006 Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft / Microsoft Exchange Server 2016 Cumulative Update 23 · Microsoft / Microsoft Exchange Server 2019 Cumulative Update 14 | Высокий | 7.8 | 0,3 % | Патч | 14.07.2026 | |
| CVE-2026-49170 Windows StateRepository API Server file Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1809 · Microsoft / Windows 10 Version 21H2 | Высокий | 7.8 | 0,3 % | Патч | 14.07.2026 | |
| CVE-2026-119627 Gitea limited-visibility profile disclosure with public-only tokens Gitea / Gitea | Информационный | — | 0,2 % | Патч | 01.11.2026 | |
| CVE-2026-70216 Windows Mobile Device Management Tampering Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Средний | 5.5 | 0,34 % | Патч | 13.10.2026 | |
| CVE-2026-83499 Windows Server Update Service Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.8 | 0,34 % | Патч | 13.10.2026 | |
| CVE-2026-81969 Windows Server Update Service Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.8 | 0,34 % | Патч | 13.10.2026 | |
| CVE-2026-70218 Windows StateRepository API Elevation of Privilege Vulnerability Microsoft / Windows 11 Version 24H2 · Microsoft / Windows 11 Version 25H2 | Высокий | 7.8 | 0,35 % | Патч | 13.10.2026 | |
| CVE-2026-77480 SQL Server Elevation of Privilege Vulnerability Microsoft / Microsoft SQL Server 2017 (CU 31) · Microsoft / Microsoft SQL Server 2017 (GDR) | Высокий | 8.8 | 0,78 % | Патч | 08.09.2026 | |
| CVE-2026-66814 Microsoft SQL Server Elevation of Privilege Vulnerability Microsoft / Microsoft SQL Server 2017 (CU 31) · Microsoft / Microsoft SQL Server 2017 (GDR) | Высокий | 8.8 | 0,78 % | Патч | 08.09.2026 | |
| CVE-2026-69267 Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability Microsoft / Windows 10 Version 1809 · Microsoft / Windows 10 Version 21H2 | Средний | 6.5 | 0,35 % | Патч | 08.09.2026 | |
| CVE-2026-62721 Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.8 | 0,3 % | Патч | 11.08.2026 | |
| CVE-2026-57202 Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes asterisk / asterisk · asterisk / certified-asterisk | Высокий | 8.1 | 0,44 % | 27.10.2026 | ||
| CVE-2024-21962 Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary me AMD / AMD EPYC™ 4005 Series Processors · AMD / AMD EPYC™ 4004 Series Processors | Высокий | 8.6 | 0,11 % | 15.05.2026 | ||
| CVE-2026-6388 Argocd-image-updater: argocd image updater: cross-namespace privilege escalation via insufficient namespace validation Red Hat / Red Hat OpenShift GitOps | Критический | 9.1 | 0,36 % | 16.04.2026 | ||
| CVE-2026-40981 When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft Spring / Spring Cloud Config · Red Hat / Red Hat Enterprise Linux 8 | Высокий | 7.5 | 0,44 % | 07.05.2026 | ||
| CVE-2026-40365 Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft / Microsoft SharePoint Enterprise Server 2016 · Microsoft / Microsoft SharePoint Server 2019 | Высокий | 8.8 | 0,96 % | Патч | 12.05.2026 | |
| CVE-2026-35436 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Microsoft / Microsoft 365 Apps for Enterprise · Microsoft / Microsoft Office 2019 | Высокий | 8.8 | 0,22 % | Патч | 12.05.2026 | |
| CVE-2026-37981 Keycloak: org.keycloak.authorization: keycloak: information disclosure via broken access control in user lookup endpoint Red Hat / Red Hat build of Keycloak 26.4 · Red Hat / Red Hat build of Keycloak 26.4.12 | Средний | 4.3 | 0,37 % | 19.05.2026 | ||
| CVE-2026-96372 Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167 Drupal / Webform | Средний | 5.4 | 0,24 % | 22.10.2026 | ||
| CVE-2026-86830 Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center AWS / iam-identity-center-team | Высокий | 8.6 | 0,69 % | Патч | 14.09.2026 | |
| CVE-2026-92539 Cross-organization user modification and deletion via the SCIM API in Grafana Enterprise Grafana / Grafana Enterprise | Средний | 6.7 | 0,34 % | 20.10.2026 | ||
| CVE-2026-85316 Apache Camel: Camel-Platform-HTTP Unintended Proxy Mode via Prefix Path Matching Apache Software Foundation / Apache Camel | Средний | 4.8 | 0,25 % | Патч | 19.10.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.