СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-65626 Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose potatosalad / jose | Средний | 5.9 | 0,09 % | Патч | 26.10.2026 | |
| CVE-2026-114199 Gitea contribution heatmap private activity disclosure to public-only tokens Gitea / Gitea | Информационный | — | 0,16 % | Патч | 01.11.2026 | |
| CVE-2026-97788 Active Directory Federation Services (AD FS) Information Disclosure Vulnerability Microsoft / Microsoft .NET Framework 3.5 · Microsoft / Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 | Высокий | 7.5 | 0,88 % | Патч | 13.10.2026 | |
| CVE-2026-97782 Microsoft Office SharePoint Tampering Vulnerability Microsoft / Microsoft SharePoint Server Subscription Edition · microsoft / sharepoint_server | Средний | 6.8 | 0,53 % | Патч | 13.10.2026 | |
| CVE-2026-76406 Information Disclosure through REST API Authentication in Splunk SOAR Splunk / Splunk SOAR · splunk / soar | Средний | 5.9 | 0,32 % | Патч | 22.10.2026 | |
| CVE-2026-18560 Improper order of authorisations in Mattermost GetFile API leads to an authenticated user to determine a post’s quarantined status Mattermost / Mattermost · mattermost / mattermost_server | Средний | 4.3 | 0,18 % | 16.10.2026 | ||
| CVE-2023-5872 In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker may enumerate proje Продукт уточняется | Средний | 4.3 | 0,32 % | 16.04.2026 | ||
| CVE-2023-54357 Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows unau artio / book_it! | Критический | 8.7 | 0,66 % | PoC | 19.06.2026 | |
| CVE-2026-114064 Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint grokability / snipe-it | Высокий | 5.1 | 0,39 % | PoC | 21.10.2026 | |
| CVE-2026-63573 Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap Legion of the Bouncy Castle Inc. / bc-csharp · bouncycastle / bc-csharp | Высокий | 8.2 | 0,3 % | Патч | 02.10.2026 | |
| CVE-2026-63567 IesEngine block-cipher mode checks padding before MAC (CBC padding oracle) Legion of the Bouncy Castle Inc. / bc-csharp · bouncycastle / bc-csharp | Высокий | 8.2 | 0,45 % | Патч | 02.10.2026 | |
| CVE-2026-44263 Weblate: Private Translation Enumeration via Screenshot API WeblateOrg / weblate · weblate / weblate | Средний | 4.3 | 0,34 % | Патч | 07.05.2026 | |
| CVE-2025-13591 Username Enumeration via Authentication Endpoint in WSO2 Identity Server Allows User Account Discovery WSO2 / WSO2 Identity Server · WSO2 / WSO2 Carbon Abstract OTP Authenticator | Средний | 5.3 | 0,3 % | 19.10.2026 | ||
| CVE-2026-111933 Coder before 2.34.2 User Enumeration via Login Placeholder Hash coder / coder | Средний | 6.3 | 0,23 % | 17.10.2026 | ||
| CVE-2026-109337 SurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT WHERE Clause surrealdb / surrealdb | Средний | 5.3 | 0,24 % | 12.10.2026 | ||
| CVE-2024-0553 Gnutls: incomplete fix for cve-2023-5981 · Red Hat / Red Hat Enterprise Linux 8 | Высокий | 7.5 | 1,61 % | 16.01.2024 | ||
| CVE-2026-110141 Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to Google / Chrome | Низкий | 3.1 | 0,17 % | 14.10.2026 | ||
| CVE-2026-88834 Busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds Red Hat / Red Hat Hardened Images | Низкий | 3.7 | 0,22 % | 13.10.2026 | ||
| CVE-2026-105675 Ghost: Invite Token Disclosure in Ghost Admin API TryGhost / Ghost · ghost | Высокий | 7.5 | 0,4 % | 05.10.2026 | ||
| CVE-2026-104416 Ghost 4.39.0 before 6.64.0 Invite Token Disclosure via Admin API TryGhost / Ghost · ghost | Высокий | 7.7 | 0,31 % | 02.10.2026 | ||
| CVE-2026-105652 Ghost: Password Hash Ordering Disclosure in Ghost Admin API TryGhost / Ghost · ghost | Низкий | 3.1 | 0,26 % | 05.10.2026 | ||
| CVE-2026-104415 Ghost 0.7.2 before 6.64.0 Password Hash Ordering Disclosure via Admin API TryGhost / Ghost · ghost | Низкий | 2.3 | 0,21 % | 02.10.2026 | ||
| CVE-2026-11795 User Enumeration in Softtr's E-Commerce Pack Softtr Informatics Trading Limited Company / E-Commerce Pack | Средний | 5.3 | 0,2 % | 02.10.2026 | ||
| CVE-2026-106506 Backstage: Improper input validation in scaffolder task list ordering backstage / backstage · @backstage / plugin-scaffolder-backend | Средний | 5.3 | 0,22 % | 07.10.2026 | ||
| CVE-2026-106210 Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker t Google / Chrome | Низкий | 3.1 | 0,21 % | 06.10.2026 | ||
| CVE-2026-106180 Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacke Google / Chrome | Низкий | 3.1 | 0,22 % | 06.10.2026 | ||
| CVE-2026-56098 Rubygem-katello: improper authorization logic allows resource enumeration Red Hat / Red Hat Satellite 6.16 for RHEL 8 · Red Hat / Red Hat Satellite 6.16 for RHEL 9 | Средний | 4.3 | 0,32 % | 01.10.2026 | ||
| CVE-2026-106336 Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to Google / Chrome | Средний | 4.3 | 0,2 % | 06.10.2026 | ||
| CVE-2026-106303 Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 allowed a remote attac Google / Chrome | Средний | 5.3 | 0,21 % | 06.10.2026 | ||
| CVE-2026-106351 Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a r Google / Chrome | Средний | 5.3 | 0,21 % | 06.10.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.