СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-94460 IRISPowerscan Insecure default privilege assignment for installation account I.R.I.S S.A. / IRISPowerscan | Высокий | 7.2 | — | Патч | 04.11.2026 | |
| CVE-2026-39875 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia Apple / macOS | Критический | 7.8 | 0,15 % | PoC | 27.07.2026 | |
| CVE-2025-49144 Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path notepad-plus-plus / notepad-plus-plus | Высокий | 7.3 | 0,66 % | 23.06.2025 | ||
| CVE-2026-91895 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default... Dell / Alienware Command Center (AWCC) | Высокий | 7.1 | 0,12 % | 02.11.2026 | ||
| CVE-2026-113951 If an attacker can write to the filesystem of a container k8s cluster container, they can plant an e Apple / Container | Высокий | 7.8 | 0,2 % | 23.10.2026 | ||
| CVE-2026-114148 ASP.NET Core Elevation of Privilege Vulnerability Microsoft / .NET 10.0 installed on Linux · Microsoft / .NET 10.0 installed on Mac OS | Высокий | 7.8 | 0,36 % | Патч | 29.10.2026 | |
| CVE-2026-105009 Windows Server Update Service Elevation of Privilege Vulnerability Microsoft / Windows Server 2012 · Microsoft / Windows Server 2012 (Server Core installation) | Высокий | 7.5 | 0,32 % | Патч | 13.10.2026 | |
| CVE-2025-57848 Container-native-virtualization: privilege escalation via excessive /etc/passwd permissions Red Hat / RHEL-8-CNV-4.12 · Red Hat / RHEL-9-CNV-4.14 | Средний | 6.4 | 0,19 % | 23.10.2025 | ||
| CVE-2012-5605 Grinder in Red Hat CloudForms before 1.1 uses world-writable permissions for /var/lib/pulp/cache... redhat / cloudforms | Низкий | 3.3 | 0,32 % | 05.01.2013 | ||
| CVE-2012-3427 EC2 Amazon Machine Image (AMI) in JBoss Enterprise Application Platform (EAP) 5.1.2 uses 755... redhat / jboss_enterprise_application_platform | Средний | 5.5 | 0,34 % | 03.02.2014 | ||
| CVE-2013-0266 manifests/base.pp in the puppetlabs-cinder module, as used in PackStack, uses world-readable... openstack / essex · openstack / folsom | Средний | 5.5 | 0,27 % | 09.03.2013 | ||
| CVE-2026-107052 Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27... n/a / n/a | Критический | 7.5 | 0,35 % | PoC | 29.10.2026 | |
| CVE-2026-59119 PowerShell Elevation of Privilege Vulnerability Microsoft / PowerShell 7.4 · Microsoft / PowerShell 7.5 | Высокий | 7.3 | 0,38 % | Патч | 11.08.2026 | |
| CVE-2026-112357 GFI KerioConnect KOFF < 10.0.9p2 Privilege Escalation GFI USA, LLC / GFI KerioConnect | Высокий | 8.5 | 0,13 % | Патч | 28.10.2026 | |
| CVE-2023-54366 SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREA surrealdb / surrealdb · surrealdb | Высокий | 8.7 | 0,46 % | 18.07.2026 | ||
| CVE-2024-58356 SurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITE surrealdb / surrealdb | Низкий | 2.3 | 0,27 % | 18.07.2026 | ||
| CVE-2025-61035 The seffaflik thru 0.0.9 is vulnerable to symlink attacks due to incorrect default permissions given n/a / n/a | Высокий | 7.7 | 0,15 % | 22.10.2025 | ||
| CVE-2025-46185 An Insecure Permission vulnerability in pgcodekeeper 10.12.0 allows a local attacker to obtain sensi n/a / n/a | Средний | 6.2 | 0,14 % | 24.10.2025 | ||
| CVE-2026-6823 HKUDS OpenHarness Insecure Default Remote Channel Allowlist HKUDS / OpenHarness · hkuds / openharness | Критический | 8.3 | 0,34 % | PoCПатч | 21.04.2026 | |
| CVE-2026-6819 HKUDS OpenHarness Plugin Management Command Exposure HKUDS / OpenHarness · hkuds / openharness | Критический | 8.7 | 0,29 % | PoCПатч | 21.04.2026 | |
| CVE-2026-39454 SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder Sky Co.,LTD. / SKYSEA Client View · Sky Co.,LTD. / SKYMEC IT Manager | Высокий | 8.5 | 0,11 % | 20.04.2026 | ||
| CVE-2026-32983 SSL/TLS Renegotiation DoS in Wazuh Manager authd service Wazuh / wazuh-manager · wazuh / wazuh | Средний | 6.9 | 0,44 % | 27.03.2026 | ||
| CVE-2026-25203 Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability
Samsung Electronics / MagicINFO 9 Server | Высокий | 7.8 | 0,18 % | 10.04.2026 | ||
| CVE-2026-21765 HCL BigFix Platform is affected by insecure permissions on private cryptographic keys HCLSoftware / BigFix Platform · hcltech / bigfix_platform | Высокий | 8.8 | 0,1 % | 02.04.2026 | ||
| CVE-2026-21013 Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to Samsung Mobile / Galaxy Wearable · samsung / galaxy_wearable | Средний | 6.9 | 0,09 % | 13.04.2026 | ||
| CVE-2026-0539 Local Privilege Escalation in pcvisit service client pcvisit / pcvisit Remote Host Modul | Высокий | 8.5 | 0,1 % | 22.04.2026 | ||
| CVE-2026-45393 Local privilege escalation to SYSTEM in Cribl Edge for Windows Cribl / Cribl Edge | Высокий | 8.5 | 0,22 % | 12.05.2026 | ||
| CVE-2026-41712 ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage VMware / Spring AI · vmware / spring_ai | Высокий | 7.5 | 0,26 % | 12.05.2026 | ||
| CVE-2026-21015 Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker Samsung Mobile / Samsung Mobile Devices · samsung / android | Средний | 6.8 | 0,09 % | 13.05.2026 | ||
| CVE-2026-113345 Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastruct Ministry of Land, Infrastructure, Transport and Tourism, Japan / Electronic delivery item Inspection Support System | Высокий | 8.5 | 0,12 % | 26.10.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.