СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-7656 Broken IPv6 Neighbor Discovery input validation allows spoofed RA/NS/NA acceptance in Zephyr net stack zephyrproject / zephyr | Критический | 8.1 | 0,33 % | PoCПатч | 30.06.2026 | |
| CVE-2026-112493 A downgrade issue was addressed with additional version checks. This issue is fixed in macOS... Apple / macOS · apple / macos | Высокий | 7.8 | 0,22 % | 26.10.2026 | ||
| CVE-2026-33433 Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField traefik / traefik · Red Hat / Red Hat OpenShift Dev Spaces 3.27 | Средний | 5.1 | 0,49 % | Патч | 27.03.2026 | |
| CVE-2024-12108 WhatsUp Gold - Public API signing key rotation issue Progress Software Corporation / WhatsUp Gold · progress / whatsup_gold | Критический | 9.6 | 7,68 % | 31.12.2024 | ||
| CVE-2026-86941 A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS... Apple / macOS | Средний | 6.2 | 0,24 % | 26.10.2026 | ||
| CVE-2026-112444 This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2,... Apple / macOS | Средний | 4.4 | 0,22 % | 26.10.2026 | ||
| CVE-2026-91896 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Authentication... Dell / Alienware Command Center (AWCC) | Низкий | 3.9 | 0,12 % | 02.11.2026 | ||
| CVE-2026-47737 Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections puma / puma · puma | Высокий | 7.5 | 0,18 % | Патч | 14.07.2026 | |
| CVE-2026-118653 Echo: Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration labstack / echo · github.com/labstack/echo/v5 | Высокий | 5.3 | 0,42 % | PoCПатч | 28.10.2026 | |
| CVE-2026-70381 Unauthorized Access to Internal Web Resources WolfVision / Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro · WolfVision / Cynap Pure (Next Gen), Cynap Bridge | Средний | 6.9 | 0,26 % | 26.10.2026 | ||
| CVE-2026-117656 Unverified Sign in with Apple callback parameter can override verified ID token claims pow-auth / assent | Критический | 9.3 | 0,23 % | Патч | 31.10.2026 | |
| CVE-2026-90717 Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8,... Dell / PowerProtect Data Domain Management Center | Критический | 9.1 | 0,23 % | 28.10.2026 | ||
| CVE-2026-63115 ActivityPub Undo handler can unfollow or remove reposts on behalf of other accounts TryGhost / ActivityPub | Средний | 5.3 | 0,14 % | 31.10.2026 | ||
| CVE-2026-115933 Forged signed tokens let any registered user take over other users and organizations GitroomHQ / postiz-app | Критический | 9.9 | 0,25 % | Патч | 24.10.2026 | |
| CVE-2026-45489 Microsoft Edge (Chromium-based) Spoofing Vulnerability Microsoft / Microsoft Edge (Chromium-based) | Средний | 6.5 | 0,88 % | Патч | 03.07.2026 | |
| CVE-2026-108131 Active Directory Federation Services (AD FS) Spoofing Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.5 | 0,87 % | Патч | 13.10.2026 | |
| CVE-2026-105008 Windows Schannel Spoofing Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Критический | 9.0 | 0,66 % | Патч | 13.10.2026 | |
| CVE-2026-83845 Windows Internet (wininet.dll) Spoofing Vulnerability Microsoft / Windows 10 Version 21H2 · Microsoft / Windows 10 Version 22H2 | Высокий | 8.4 | 0,32 % | Патч | 13.10.2026 | |
| CVE-2026-70179 ASP.NET Core Elevation of Privilege Vulnerability Microsoft / Microsoft Visual Studio 2022 version 17.14 · Microsoft / Microsoft Visual Studio 2026 version 18.10 | Высокий | 7.5 | 0,63 % | Патч | 13.10.2026 | |
| CVE-2026-83864 Windows NTFS Information Disclosure Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Средний | 5.5 | 0,38 % | Патч | 13.10.2026 | |
| CVE-2026-69843 Microsoft Fabric Elevation of Privilege Vulnerability Microsoft / Microsoft Fabric | Критический | 10.0 | 0,9 % | Патч | 18.09.2026 | |
| CVE-2026-62759 Windows Netlogon Spoofing Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.5 | 0,38 % | Патч | 08.09.2026 | |
| CVE-2026-77903 Microsoft Dataverse Elevation of Privilege Vulnerability Microsoft / Microsoft Dataverse | Критический | 9.0 | 0,37 % | Патч | 18.09.2026 | |
| CVE-2026-119703 xiaozhi-esp32-server through 0.9.8 Authentication Bypass via Spoofed Device-ID Header xinnan-tech / xiaozhi-esp32-server | Средний | 6.3 | 0,34 % | Патч | 30.10.2026 | |
| CVE-2026-119425 OPNsense 26.1.6 through 26.7.7 Captive Portal Session Takeover via Forged ARP opnsense / core | Средний | 5.3 | 0,31 % | Патч | 30.10.2026 | |
| CVE-2026-104623 Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster SUSE / Rancher | Средний | 6.3 | 0,27 % | 30.10.2026 | ||
| CVE-2026-104615 Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace SUSE / Rancher | Высокий | 7.9 | 0,22 % | 30.10.2026 | ||
| CVE-2026-91914 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by... Dell / OpenManage Enterprise | Высокий | 7.1 | 0,25 % | 30.10.2026 | ||
| CVE-2026-55202 Tinyproxy - Stathost Detection Bypass via Host Header Manipulation tinyproxy / tinyproxy | Высокий | 8.8 | 0,38 % | Патч | 17.06.2026 | |
| CVE-2026-105215 ZITADEL before 4.16.2 Account Pre-Hijacking via Forged External IdP Callback zitadel / zitadel | Критический | 9.3 | 0,34 % | 04.10.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.