СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
18| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-121531 Umami 2FA Policy route.ts single-factor authentication n/a / Umami | Высокий | 5.3 | — | PoC | 04.11.2026 | |
| CVE-2024-27928 Vantage6: 2FA can be circumvented with hacked email access vantage6 / vantage6 · vantage6 | Средний | 5.9 | 0,28 % | Патч | 18.06.2026 | |
| CVE-2026-90862 Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server Progress Software / WS_FTP Server | Средний | 4.3 | 0,22 % | 29.10.2026 | ||
| CVE-2026-111884 phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Missing Current-Password Step-Up on E-mail Change Enables Account Takeover thorsten / phpMyFAQ | Критический | 8.7 | 0,35 % | PoC | 17.10.2026 | |
| CVE-2026-57490 FileRise: WebDAV authentication bypasses TOTP/MFA entirely error311 / FileRise | Критический | 8.1 | 0,52 % | PoC | 14.10.2026 | |
| CVE-2026-107808 Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass) 0xJacky / nginx-ui | Критический | 8.1 | 0,41 % | PoC | 09.10.2026 | |
| CVE-2026-79763 Termix: MFA-critical operations accept the account password as a sole factor (regression of CVE-2026-45749) Termix-SSH / Termix | Высокий | 5.3 | 0,32 % | PoC | 24.09.2026 | |
| CVE-2026-58240 Missing Authentication check in SAP NetWeaver (Message Server) SAP_SE / SAP NetWeaver (Message Server) | Критический | 9.8 | 0,53 % | 08.09.2026 | ||
| CVE-2026-85590 phpMyFAQ before 4.1.8 Authentication Bypass via Two-Factor Disable thorsten / phpMyFAQ | Критический | 7.1 | 0,52 % | PoC | 04.09.2026 | |
| CVE-2026-67611 OpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART Configuration openemr / openemr | Критический | 8.6 | 0,79 % | PoC | 03.08.2026 | |
| CVE-2026-56022 Webmin MFA bypass Webmin / Webmin | Средний | 6.9 | 0,56 % | 18.06.2026 | ||
| CVE-2026-15616 Local MFA not enforced during SSO sign-in Logto / Logto | Критический | 9.1 | 0,53 % | 23.07.2026 | ||
| CVE-2026-45749 Termix's TOTP two-factor authentication can be disabled or bypassed using only the account password Termix-SSH / Termix | Критический | 8.1 | 0,32 % | PoC | 05.06.2026 | |
| CVE-2026-33550 SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length Alinto / SOGo | Низкий | 2.0 | 0,14 % | 22.03.2026 | ||
| CVE-2025-42959 Missing Authentication check after implementation of SAP Security Note 3007182 and 3537476 SAP_SE / SAP NetWeaver ABAP Server and ABAP Platform | Высокий | 8.1 | 0,56 % | 08.07.2025 | ||
| CVE-2024-50618 A Use of Single-factor Authentication vulnerability in the Authentication component of CIPPlanner CI n/a / n/a | Средний | 4.3 | 0,28 % | 11.02.2026 | ||
| CVE-2025-64103 Zitadel Bypass Second Authentication Factor zitadel / zitadel | Высокий | 8.7 | 0,35 % | 29.10.2025 | ||
| CVE-2024-47652 Insecure Authentication Vulnerability Shilpi Computers / Client Dashboard · shilpisoft / client_dashboard | Высокий | 7.6 | 0,41 % | 04.10.2024 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.