СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-105777 Insertion of Sensitive Information Into Sent Data in GitLab GitLab / GitLab · gitlab / gitlab | Высокий | 6.5 | 0,28 % | PoC | 22.10.2026 | |
| CVE-2026-45049 OpenAM Session Hijacking via CDSSO OpenIdentityPlatform / OpenAM · org.openidentityplatform.openam:openam-federation | Высокий | 8.3 | 0,33 % | Патч | 30.10.2026 | |
| CVE-2026-120716 Insertion of sensitive information into sent data in the identity provider user synchronization... Devolutions / Server | Информационный | — | 0,15 % | 03.11.2026 | ||
| CVE-2026-115293 Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure Elastic / Kibana | Средний | 6.5 | 0,34 % | 03.11.2026 | ||
| CVE-2026-114183 WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability WPVibes / AnyWhere Elementor | Средний | 6.5 | 0,22 % | 03.11.2026 | ||
| CVE-2026-121554 cordova-plugin-advanced-http 1.5.0 through 3.3.1 Cookie Leak via Cross-Origin Redirects silkimen / cordova-plugin-advanced-http | Высокий | 8.2 | 0,48 % | Патч | 03.11.2026 | |
| CVE-2025-66388 Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI Apache Software Foundation / Apache Airflow · apache / airflow | Средний | 6.5 | 0,48 % | Патч | 15.12.2025 | |
| CVE-2026-88811 Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy SUSE / Rancher | Критический | 9.1 | 0,43 % | 02.11.2026 | ||
| CVE-2022-27779 libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided wi haxx / curl · netapp / hci_bootstrap_os | Высокий | 5.3 | 2,79 % | PoC | 02.06.2022 | |
| CVE-2026-66822 .NET Information Disclosure Vulnerability Microsoft / .NET 10.0 runtime · Microsoft / .NET 11.0 runtime | Средний | 5.9 | 0,79 % | Патч | 13.10.2026 | |
| CVE-2026-65812 Microsoft Teams for Android Information Disclosure Vulnerability Microsoft / Microsoft Teams for Android | Средний | 6.8 | 0,89 % | Патч | 08.09.2026 | |
| CVE-2026-116689 follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects follow-redirects / follow-redirects · follow-redirects | Высокий | 5.9 | 0,27 % | PoCПатч | 27.10.2026 | |
| CVE-2026-114485 Insufficient protection of sensitive information in the user list endpoint in Devolutions Server ... Devolutions / Server | Средний | 4.3 | 0,24 % | 22.10.2026 | ||
| CVE-2026-116861 WordPress Flexible Chat plugin <= 1.1.0 - Sensitive Data Exposure vulnerability wpdesk / Flexible Chat | Высокий | 7.5 | 0,34 % | 30.10.2026 | ||
| CVE-2026-115947 WordPress HUSKY plugin <= 1.4.6 - Sensitive Data Exposure vulnerability RealMag777 / HUSKY | Средний | 6.5 | 0,22 % | 30.10.2026 | ||
| CVE-2026-107268 Two Factor Authentication - TFA / Passwordless Login - Moderately critical - Information disclosure - SA-CONTRIB-2026-207 Drupal / Two Factor Authentication - TFA / Passwordless Login | Средний | 4.3 | 0,3 % | 30.10.2026 | ||
| CVE-2026-119564 Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs Plausible / Plausible Analytics | Средний | 6.0 | 0,29 % | 30.10.2026 | ||
| CVE-2026-118083 WordPress WP Crowdfunding plugin <= 2.2.2 - Sensitive Data Exposure vulnerability Themeum / WP Crowdfunding | Высокий | 7.5 | 0,3 % | 29.10.2026 | ||
| CVE-2013-1840 OpenStack Glance is vulnerable to Exposure of Sensitive Information openstack / glance · glance | Средний | 6.5 | 1,72 % | 23.03.2013 | ||
| CVE-2026-87863 HSTS response erases persisted entries curl / curl | Критический | 8.1 | 0,83 % | PoC | 20.10.2026 | |
| CVE-2026-87862 HSTS cache import drops longer-lived child curl / curl | Критический | 8.1 | 1 % | PoC | 20.10.2026 | |
| CVE-2026-86414 leaking host credentials to HTTP proxy curl / curl | Критический | 9.1 | 0,68 % | PoC | 20.10.2026 | |
| CVE-2026-87861 cross-origin reuse of a Negotiate connection curl / curl | Критический | 9.1 | 0,68 % | PoC | 20.10.2026 | |
| CVE-2026-86413 Negotiate credentials sent to redirected origin curl / curl | Критический | 9.1 | 0,73 % | PoC | 20.10.2026 | |
| CVE-2026-86415 auto client cert connection reuse mixup curl / curl | Высокий | 7.5 | 0,42 % | 20.10.2026 | ||
| CVE-2026-86409 stale SigV4 headers sent unintended curl / curl | Критический | 8.1 | 1,1 % | PoC | 20.10.2026 | |
| CVE-2026-48200 WordPress Document Library Lite plugin <= 1.3.0 - Sensitive Data Exposure vulnerability Barn2 Plugins / Document Library Lite | Средний | 5.3 | 0,28 % | 29.10.2026 | ||
| CVE-2026-19603 Private channel ID disclosure via user status endpoints Mattermost / Mattermost · mattermost / mattermost_server | Средний | 4.3 | 0,18 % | 16.10.2026 | ||
| CVE-2026-19601 Disclosure of AD/LDAP bind password via Test Connection Mattermost / Mattermost · mattermost / mattermost_server | Средний | 4.9 | 0,23 % | 16.10.2026 | ||
| CVE-2026-19541 Outgoing OAuth connection client secret exposure during connection validation Mattermost / Mattermost · mattermost / mattermost_server | Средний | 6.5 | 0,22 % | 16.10.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.