СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-96363 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161 Drupal / Webform | Низкий | 3.1 | 0,24 % | 22.10.2026 | ||
| CVE-2026-114524 Custom Formatters - Critical - Remote code execution - SA-CONTRIB-2026-225 Drupal / Custom Formatters | Информационный | — | 0,14 % | 30.10.2026 | ||
| CVE-2026-57202 Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes asterisk / asterisk · asterisk / certified-asterisk | Высокий | 8.1 | 0,44 % | 27.10.2026 | ||
| CVE-2026-27314 Apache Cassandra: Privilege escalation via ADD IDENTITY authorization bypass Apache Software Foundation / Apache Cassandra · apache / cassandra | Высокий | 8.8 | 0,26 % | 07.04.2026 | ||
| CVE-2026-42406 BIG-IP and BIG-IQ privilege escalation vulnerability F5 / BIG-IP · F5 / BIG-IQ | Высокий | 8.5 | 0,15 % | Патч | 13.05.2026 | |
| CVE-2026-96367 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162 Drupal / Webform | Средний | 4.6 | 0,26 % | 22.10.2026 | ||
| CVE-2026-96371 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166 Drupal / Webform | Средний | 5.4 | 0,24 % | 22.10.2026 | ||
| CVE-2026-96390 Editoria11y Accessibility Checker - Moderately critical - Access bypass - SA-CONTRIB-2026-185 Drupal / Editoria11y Accessibility Checker | Средний | 4.3 | 0,21 % | 22.10.2026 | ||
| CVE-2026-96659 Foreman: excessive permissions for viewer role on preview Red Hat / Red Hat Satellite 6.16 for RHEL 8 · Red Hat / Red Hat Satellite 6.16 for RHEL 9 | Критический | 9.1 | 0,35 % | 01.10.2026 | ||
| CVE-2026-109520 Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions Colorful / iGameCenter | Критический | 9.3 | 0,11 % | 13.10.2026 | ||
| CVE-2026-18951 Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrole Red Hat / Red Hat OpenShift AI 3.3 · Red Hat / Red Hat OpenShift AI 3.4 | Высокий | 8.8 | 0,92 % | 10.08.2026 | ||
| CVE-2026-18858 IBM i is Affected By Obtaining Sensitive Information Vulnerability in OpenSSH [] IBM / i | Низкий | 3.3 | 0,13 % | Патч | 04.09.2026 | |
| CVE-2026-10090 Multicluster-operators-subscription: multicluster-operators-subscription: namespace edit user can deploy cluster-scoped clusterrolebinding and become cluster-admin via application subscription Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.11 · Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.13 | Критический | 9.0 | 0,58 % | 05.08.2026 | ||
| CVE-2026-81161 Content Moderation Notifications - Moderately critical - Access bypass - SA-CONTRIB-2026-107 Drupal / Content Moderation Notifications | Низкий | 3.3 | 0,21 % | 02.09.2026 | ||
| CVE-2025-36255 DS8900F and DS8A00 Privilege Escalation IBM / DS8A00( R10.0 - R10.1 ) · IBM / DS8900F ( R9.4) | Высокий | 7.5 | 0,36 % | Патч | 20.08.2026 | |
| CVE-2025-14349 Business Logic Error in Universal Software's FlexCity/Kiosk Universal Software Inc. / FlexCity/Kiosk | Высокий | 8.8 | 0,41 % | 13.02.2026 | ||
| CVE-2026-6816 TFA Basic Plugins - Access Bypass Drupal / TFA Basic Plugins | Высокий | 5.1 | 0,32 % | PoC | 29.05.2026 | |
| CVE-2026-9560 Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows a OpenVPN Inc / OpenVPN Connect | Критический | 9.4 | 0,57 % | 26.05.2026 | ||
| CVE-2026-29646 In OpenXiangShan NEMU prior to 55295c4, when running with RVH (Hypervisor extension) enabled, a VS-m n/a / n/a | Критический | 9.8 | 0,37 % | 20.04.2026 | ||
| CVE-2026-2460 A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and a Hitachi Energy / Relion REB500 | Высокий | 7.6 | 0,31 % | 24.02.2026 | ||
| CVE-2026-2459 A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter t Hitachi Energy / Relion REB500 | Высокий | 7.4 | 0,37 % | 24.02.2026 | ||
| CVE-2025-26467 Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only) Apache Software Foundation / Apache Cassandra | Высокий | 8.8 | 0,52 % | 25.08.2025 | ||
| CVE-2025-7691 Privilege Defined With Unsafe Actions in GitLab GitLab / GitLab | Высокий | 6.5 | 0,38 % | PoC | 26.09.2025 | |
| CVE-2025-41244 VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) VMware / VCF operations · VMware / VMware tools | Критический | 7.8 | 8,63 % | KEVPoC | 29.09.2025 | |
| CVE-2025-62587 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo Oracle Corporation / Oracle VM VirtualBox | Высокий | 8.2 | 0,2 % | 21.10.2025 | ||
| CVE-2025-62588 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo Oracle Corporation / Oracle VM VirtualBox | Высокий | 8.2 | 0,21 % | 21.10.2025 | ||
| CVE-2025-62589 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo Oracle Corporation / Oracle VM VirtualBox | Высокий | 8.2 | 0,21 % | 21.10.2025 | ||
| CVE-2025-62590 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo Oracle Corporation / Oracle VM VirtualBox | Высокий | 8.2 | 0,21 % | 21.10.2025 | ||
| CVE-2025-62641 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo Oracle Corporation / Oracle VM VirtualBox | Высокий | 8.2 | 0,21 % | 21.10.2025 | ||
| CVE-2026-23526 CVAT vulnerable to privilege escalation of users with staff status cvat-ai / cvat | Высокий | 8.5 | 0,3 % | 22.01.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.