СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-69297 Windows DHCP Server Information Disclosure Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Средний | 6.5 | 0,84 % | Патч | 08.09.2026 | |
| CVE-2026-22574 A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7 Fortinet / FortiSOAR PaaS · Fortinet / FortiSOAR on-premise | Средний | 6.5 | 0,27 % | 14.04.2026 | ||
| CVE-2026-22576 A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7 Fortinet / FortiSOAR PaaS · Fortinet / FortiSOAR on-premise | Средний | 6.5 | 0,26 % | 14.04.2026 | ||
| CVE-2024-32122 A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all Fortinet / FortiOS · Siemens / RUGGEDCOM APE1808 | Низкий | 2.1 | 0,22 % | 08.04.2025 | ||
| CVE-2026-28745 Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format Red Lion Controls / 700 Series | Критический | 9.3 | 0,22 % | 09.10.2026 | ||
| CVE-2026-103548 Improperly Stored Credentials Itron / MV-90 xi | Средний | 5.3 | 0,1 % | 30.09.2026 | ||
| CVE-2026-80176 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5 Dell / Secure Connect Gateway 5.0 - Application · Dell / Secure Connect Gateway 5.0 - Appliance | Средний | 4.7 | 0,11 % | 07.09.2026 | ||
| CVE-2026-65309 Storage of passwords in a reversible format ANDRITZ / HIPASE-250 · ANDRITZ / 250 SCALA | Высокий | 7.5 | 0,25 % | 31.07.2026 | ||
| CVE-2026-1836 Stored credentials in Redmine Redmine / Redmine | Средний | 5.3 | 0,11 % | Патч | 12.06.2026 | |
| CVE-2025-34180 NetSupport Manager < 14.12.0001 Gateway Key Reversible Encoding Credential Recovery NetSupport Software / Manager | Критический | 8.4 | 0,18 % | PoCПатч | 15.12.2025 | |
| CVE-2026-20128 Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability Cisco / Cisco Catalyst SD-WAN Manager | Критический | 7.5 | 7,32 % | KEV | 25.02.2026 | |
| CVE-2025-8095 Recoverable obfuscation using the OECH1 prefix encoding in OpenEdge Progress Software Corporation / OpenEdge | Критический | 9.1 | 0,22 % | 14.04.2026 | ||
| CVE-2024-3073 Easy WP SMTP by SendLayer <= 2.3.0 - Exposure of Sensitive Information via the UI smub / Easy WP SMTP – WordPress SMTP and Email Logs: Gmail, Office 365, Outlook, Custom SMTP, and more | Низкий | 2.7 | 0,33 % | 13.06.2024 | ||
| CVE-2024-6694 WP Mail SMTP <= 4.0.1 - Authenticated (Admin+) SMTP Password Exposure smub / WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin | Низкий | 2.7 | 0,57 % | 20.07.2024 | ||
| CVE-2026-22614 The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute Eaton / EasySoft | Средний | 6.1 | 0,08 % | 10.03.2026 | ||
| CVE-2026-30785 RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305) rustdesk-client / RustDesk Client | Критический | 8.2 | 0,1 % | PoC | 05.03.2026 | |
| CVE-2025-8904 Privilege escalation issue in Amazon EMR Secret Agent component Amazon / EMR | Критический | 9.0 | 0,36 % | Патч | 13.08.2025 | |
| CVE-2025-57789 Vulnerability in Initial Administrator Login Process Commvault / CommCell | Средний | 5.3 | 1,23 % | 20.08.2025 | ||
| CVE-2025-57796 Use of a hardcoded static key to protect sensitive data in Explorance Blue Explorance / Blue | Средний | 6.8 | 0,21 % | 28.01.2026 | ||
| CVE-2025-14295 Automated Logic WebCTRL and Carrier i-Vu Session Fixation Automated Logic / WebCTRL · Carrier / i-Vu | Высокий | 7.0 | 0,16 % | 22.01.2026 | ||
| CVE-2025-8307 Recoverable passwords in Asseco Infomedica Plus Asseco / InfoMedica Plus | Средний | 5.9 | 0,12 % | 08.01.2026 | ||
| CVE-2024-32151 User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwor Sharp Corporation / Multiple MFPs (multifunction printers) · Toshiba Tec Corporation / Multiple MFPs (multifunction printers) | Средний | 5.9 | 1,25 % | 26.11.2024 | ||
| CVE-2025-44958 RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format. RUCKUS / Network Director | Средний | 5.3 | 0,35 % | 04.08.2025 | ||
| CVE-2025-40774 A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server appl Siemens / SiPass integrated | Средний | 6.7 | 0,14 % | 14.10.2025 | ||
| CVE-2025-35054 Newforma Info Exchange (NIX) insufficiently protected credentials Newforma / Project Center | Средний | 4.8 | 0,08 % | 09.10.2025 | ||
| CVE-2024-45744 TopQuadrant TopBraid EDG password manager stores external credentials insecurely TopQuadrant / TopBraid EDG | Низкий | 3.0 | 0,22 % | 27.09.2024 | ||
| CVE-2025-0280 HCL Compass is affected by a security vulnerability HCL Software / Compass | Высокий | 7.5 | 0,11 % | 03.09.2025 | ||
| CVE-2025-58049 XWiki PDF export jobs store sensitive cookies unencrypted in job statuses xwiki / xwiki-platform | Средний | 5.8 | 0,38 % | 28.08.2025 | ||
| CVE-2025-6995 Improper Encryption in Ivanti Endpoint Manager Ivanti / Endpoint Manager | Высокий | 8.4 | 0,19 % | 08.07.2025 | ||
| CVE-2025-6996 Improper Encryption in Ivanti Endpoint Manager Ivanti / Endpoint Manager | Высокий | 8.4 | 0,19 % | 08.07.2025 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.