СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
19| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-115557 Distrust compromised intermediate certificates in ssl module Python Software Foundation / CPython | Критический | 9.4 | 0,53 % | Патч | 24.10.2026 | |
| CVE-2026-102221 Secure Boot Security Feature Bypass Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Средний | 4.4 | 0,36 % | Патч | 13.10.2026 | |
| CVE-2026-118696 In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4,... JetBrains / IntelliJ IDEA · JetBrains / PyCharm | Высокий | 8.0 | 0,27 % | 30.10.2026 | ||
| CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509 Go standard library / crypto/x509 | Средний | 6.8 | 0,4 % | 21.10.2026 | ||
| CVE-2026-73581 Apache Tomcat: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore Apache Software Foundation / Apache Tomcat | Средний | 6.5 | 0,16 % | 23.09.2026 | ||
| CVE-2026-115570 Electron: Mitigation for compromised eMudhra intermediate certificates electron / electron · electron | Высокий | 7.4 | 0,38 % | 23.10.2026 | ||
| CVE-2026-94417 CRL check skipped when OCSP enabled and certificate has no OCSP URL wolfSSL / wolfSSL | Низкий | 2.3 | 0,17 % | 27.09.2026 | ||
| CVE-2026-93602 rustls-webpki before 0.103.10 CRL Revocation Check Bypass rustls / webpki | Средний | 5.9 | 0,2 % | 18.09.2026 | ||
| CVE-2026-93493 Io.netty/netty-handler-ssl-ocsp: netty: ocsp validation silently skipped when a response omits the optional nextupdate field Red Hat / Red Hat build of Apache Camel for Spring Boot 4 | Средний | 5.9 | 0,22 % | 18.09.2026 | ||
| CVE-2026-86231 mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocation mwiede / jsch | Высокий | 6.3 | 0,42 % | PoCПатч | 07.09.2026 | |
| CVE-2026-61699 nebula-mesh: Certificate revocation is never enforced at the mesh forgekeep / nebula-mesh | Критический | 8.1 | 0,45 % | PoC | 04.09.2026 | |
| CVE-2026-56821 Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator netty / netty | Критический | 7.4 | 0,22 % | PoC | 29.07.2026 | |
| CVE-2026-9636 Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module – Certificate Revocation List Vulnerability Rockwell Automation / ControlLogix® 5580, CompactLogix® 5380, GuardLogix® 5580, Compact GuardLogix® 5380, 1756-EN4TR | Высокий | 8.2 | 0,22 % | 14.07.2026 | ||
| CVE-2026-6899 Improper Check for Certificate Revocation in S2OPC Systerel / S2OPC | Средний | 5.6 | 0,11 % | 09.06.2026 | ||
| CVE-2026-4428 CRL Distribution Point Scope Check Logic Error in AWS-LC AWS / AWS-LC · AWS / AWS-LC-FIPS | Критический | 9.1 | 0,26 % | Патч | 19.03.2026 | |
| CVE-2025-11955 Incorrect validation of OCSP certificates in TheGreenBow VPN Client Windows Enterprise TheGreenBow / TheGreenBow VPN Client Windows Enterprise | Высокий | 8.2 | 0,21 % | Патч | 27.10.2025 | |
| CVE-2025-36057 IBM Cognos Analytics Mobile (iOS) authentication bypass IBM / Cognos Analytics Mobile | Средний | 5.2 | 0,21 % | Патч | 21.07.2025 | |
| CVE-2025-3085 MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked MongoDB Inc / MongoDB Server | Высокий | 8.1 | 0,29 % | 01.04.2025 | ||
| CVE-2024-56138 Timestamp signature generation lacks certificate revocation check in notion-go notaryproject / notation-go | Средний | 4.0 | 0,13 % | 14.01.2025 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.