СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-121585 InfiniFlow RAGFlow Text To SQL Retrieval sql.go RunSQL authorization InfiniFlow / RAGFlow | Высокий | 5.3 | — | PoCПатч | 04.11.2026 | |
| CVE-2026-121583 Sanluan PublicCMS TradePaymentService.java TradePaymentService.pendingRefund authorization Sanluan / PublicCMS | Средний | 5.3 | — | 04.11.2026 | ||
| CVE-2026-121582 Umami Record API Endpoint route.ts authorization n/a / Umami | Высокий | 6.9 | — | PoC | 04.11.2026 | |
| CVE-2026-49278 Rocket.Chat: Livechat Visitor Profile Disclosure Leaks Bearer Token and Enables Visitor Impersonation RocketChat / Rocket.Chat | Высокий | 6.7 | 0,41 % | PoC | 25.06.2026 | |
| CVE-2026-95860 node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions node-opcua / node-opcua | Критический | 9.1 | — | 03.11.2026 | ||
| CVE-2026-108047 Inadequate authorization vulnerability in Alosuite’s user invitation functionality AM System / ALO Suite | Высокий | 8.6 | — | 03.11.2026 | ||
| CVE-2026-86976 An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 a Apple / iOS and iPadOS · Apple / macOS | Средний | 5.5 | 0,13 % | 20.10.2026 | ||
| CVE-2026-56828 Shopper: read-only team permissions allow administrator creation and permission escalation shopperlabs / shopper | Высокий | 8.8 | 0,44 % | 28.10.2026 | ||
| CVE-2026-40963 Apache Airflow: DAG authorization bypass on /ui/structure/structure_data Apache Software Foundation / Apache Airflow · apache / airflow | Низкий | 3.1 | 0,48 % | Патч | 01.06.2026 | |
| CVE-2025-11969 Broken Access Control via System REST APIs in Multiple WSO2 Products Allows Unauthorized Administrative Actions WSO2 / WSO2 API Manager · WSO2 / WSO2 Identity Server as Key Manager | Критический | 9.4 | 0,32 % | 02.11.2026 | ||
| CVE-2026-116384 Bdtask Garage 24 Garage Management Software Backend improper authorization Bdtask / Garage 24 Garage Management Software | Высокий | 5.3 | 0,2 % | PoC | 26.10.2026 | |
| CVE-2026-116274 JIZHICMS Front-end Order OrderController.php pay improper authorization n/a / JIZHICMS | Высокий | 5.3 | 0,2 % | PoC | 26.10.2026 | |
| CVE-2026-120224 Oray Pugongying X5 Pro API Authorization run_async_task improper authorization Oray / Pugongying X5 Pro | Критический | 9.4 | 0,38 % | PoC | 01.11.2026 | |
| CVE-2026-77152 Field Collection for Drupal 7 access bypass via missing parent entity access check Drupal / Field Collection for Drupal 7 | Средний | 5.3 | 0,23 % | 31.10.2026 | ||
| CVE-2026-62989 Shopper: missing variant-delete authorization permits destructive single and bulk actions shopperlabs / shopper | Критический | 8.1 | 0,28 % | PoC | 31.10.2026 | |
| CVE-2026-120319 Sanluan PublicCMS publiccms-trade TradeRefundService.java TradeRefundService.updateAmound authorization Sanluan / PublicCMS | Средний | 5.3 | 0,27 % | 02.11.2026 | ||
| CVE-2026-62835 Azure Portal Information Disclosure Vulnerability Microsoft / Azure Portal | Критический | 9.3 | 0,97 % | Патч | 24.07.2026 | |
| CVE-2026-58540 Windows Installer Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.8 | 0,3 % | Патч | 14.07.2026 | |
| CVE-2026-58284 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Microsoft / Microsoft Edge (Chromium-based) | Высокий | 8.3 | 0,56 % | Патч | 03.07.2026 | |
| CVE-2026-58277 Microsoft SharePoint Elevation of Privilege Vulnerability Microsoft / Microsoft SharePoint Enterprise Server 2016 · Microsoft / Microsoft SharePoint Server 2019 | Высокий | 8.8 | 0,94 % | Патч | 14.07.2026 | |
| CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 8.8 | 0,78 % | Патч | 14.07.2026 | |
| CVE-2026-50344 Windows OLE Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.8 | 0,3 % | Патч | 14.07.2026 | |
| CVE-2026-50346 Netlogon RPC Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.8 | 0,3 % | Патч | 14.07.2026 | |
| CVE-2026-58631 Windows Admin Center (WAC) Remote Code Execution Vulnerability Microsoft / Windows Admin Center | Высокий | 7.8 | 0,3 % | Патч | 14.07.2026 | |
| CVE-2026-57983 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Microsoft / Microsoft Edge (Chromium-based) | Высокий | 8.7 | 0,65 % | Патч | 03.07.2026 | |
| CVE-2026-49170 Windows StateRepository API Server file Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1809 · Microsoft / Windows 10 Version 21H2 | Высокий | 7.8 | 0,3 % | Патч | 14.07.2026 | |
| CVE-2026-56160 Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability Microsoft / Azure Red Hat OpenShift (ARO) | Критический | 9.1 | 0,79 % | Патч | 24.07.2026 | |
| CVE-2026-70218 Windows StateRepository API Elevation of Privilege Vulnerability Microsoft / Windows 11 Version 24H2 · Microsoft / Windows 11 Version 25H2 | Высокий | 7.8 | 0,35 % | Патч | 13.10.2026 | |
| CVE-2026-85878 Azure Database for PostgreSQL Elevation of Privilege Vulnerability Microsoft / Azure HorizonDB | Критический | 9.9 | 0,78 % | Патч | 18.09.2026 | |
| CVE-2026-58611 Xbox Gaming Services Elevation of Privilege Vulnerability Microsoft / Xbox Gaming Services | Высокий | 7.8 | 0,31 % | Патч | 08.09.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.