СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-116198 Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store grokability / snipe-it · snipeitapp / snipe-it | Средний | 5.3 | 0,08 % | 25.10.2026 | ||
| CVE-2026-34486 Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor Apache Software Foundation / Apache Tomcat · Red Hat / Red Hat Enterprise Linux 10 | Критический | 7.5 | 98,5 % | KEV | 09.04.2026 | |
| CVE-2026-111063 AIOHTTP: Secure attribute not enforced for shared cookie aio-libs / aiohttp · aiohttp | Средний | 6.3 | 0,23 % | 19.10.2026 | ||
| CVE-2026-115247 subhajitkhan online-clinic-management-system patientregistration.php missing encryption subhajitkhan / online-clinic-management-system | Высокий | 5.3 | 0,13 % | PoC | 22.10.2026 | |
| CVE-2026-43854 A vulnerability could allow an attacker with access to an encrypted project file to retrieve adminis Advantech / ADAM-3600 | Средний | 6.3 | 0,1 % | 20.10.2026 | ||
| CVE-2026-86375 Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive D Dell / Application Installer, | Средний | 6.2 | 0,06 % | 19.10.2026 | ||
| CVE-2026-77812 Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE DJI / Neo · DJI / Neo 2 | Критический | 9.4 | 0,09 % | 21.08.2026 | ||
| CVE-2026-78860 An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of in n/a / n/a | Критический | 7.8 | 0,12 % | PoC | 05.10.2026 | |
| CVE-2026-105179 SourceCodester Drug Recommendation System Password add_user.php missing encryption SourceCodester / Drug Recommendation System | Средний | 5.1 | 0,12 % | 05.10.2026 | ||
| CVE-2026-81688 openssl_encrypt before 1.4.9 Plaintext Confirmation Oracle via SHA-256 jahlives / openssl_encrypt · openssl-encrypt | Высокий | 8.7 | 0,27 % | 27.08.2026 | ||
| CVE-2026-81681 openssl_encrypt before 1.4.9 False Encryption via Cleartext Storage jahlives / openssl_encrypt · openssl-encrypt | Критический | 9.3 | 0,17 % | 27.08.2026 | ||
| CVE-2026-92756 Combining encryption settings may disable encryption MongoDB Inc. / MongoDB Entity Framework Core Provider | Средний | 6.8 | 0,07 % | 17.09.2026 | ||
| CVE-2026-92757 Malformed connection string may disable field level encryption MongoDB Inc. / MongoDB Entity Framework Core Provider | Средний | 6.8 | 0,07 % | 17.09.2026 | ||
| CVE-2024-41124 Puncia Cleartext Transmission of Sensitive Information via HTTP urls in `API_URLS` ARPSyndicate / puncia · arpsyndicate / puncia | Средний | 6.3 | 0,27 % | 19.07.2024 | ||
| CVE-2026-84676 Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job confi Jenkins Project / Jenkins Parameterized Remote Trigger Plugin | Средний | 4.3 | 0,19 % | 02.09.2026 | ||
| CVE-2025-59325 CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to encrypt the initramfs contents, allo n/a / n/a | Критический | 7.5 | 0,31 % | PoC | 12.08.2026 | |
| CVE-2026-19891 TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption TRENDnet / TEW-WLC100 | Средний | 6.3 | 0,18 % | 15.08.2026 | ||
| CVE-2026-20157 Cisco RoomOS Security Hardening Release - Missing Encryption Vulnerabilities Cisco / Cisco RoomOS Software | Высокий | 7.5 | 0,19 % | 15.07.2026 | ||
| CVE-2026-21079 Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attac Samsung Mobile / Smart Switch | Высокий | 7.0 | 0,1 % | 10.08.2026 | ||
| CVE-2026-54784 CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality CoreWCF / CoreWCF | Высокий | 7.4 | 0,27 % | 09.07.2026 | ||
| CVE-2025-63579 Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to b n/a / n/a | Высокий | 7.5 | 0,27 % | 09.07.2026 | ||
| CVE-2024-35061 NASA AIT-Core uses unencrypted channels to exchange data over the network n/a / n/a · nasa / ait-core | Высокий | 7.3 | 0,55 % | 21.05.2024 | ||
| CVE-2026-55568 Guzzle: Silent HTTPS-Proxy Downgrade to Cleartext guzzle / guzzle | Средний | 5.9 | 0,15 % | 23.06.2026 | ||
| CVE-2026-53442 Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml sub Jenkins Project / Jenkins | Средний | 5.3 | 0,18 % | 10.06.2026 | ||
| CVE-2025-45768 pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier beca n/a / n/a · pyjwt | Высокий | 7.0 | 0,2 % | 31.07.2025 | ||
| CVE-2026-34992 Missing Encryption of Sensitive Data in antrea.io/antrea antrea-io / antrea | Высокий | 7.1 | 0,13 % | 06.04.2026 | ||
| CVE-2025-43274 A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia Apple / macOS | Средний | 4.4 | 0,14 % | 30.07.2025 | ||
| CVE-2026-32891 Anchorr Privilege Escalation: Jellyseerr User → Anchorr Admin via Stored XSS openVESSL / Anchorr | Критический | 9.1 | 0,17 % | PoC | 20.03.2026 | |
| CVE-2026-27944 Nginx UI: Unauthenticated Backup Download with Encryption Key Disclosure 0xJacky / nginx-ui | Критический | 9.8 | 22,84 % | 05.03.2026 | ||
| CVE-2025-69969 A lack of authentication and authorization mechanisms in the Bluetooth Low Energy (BLE) communicatio n/a / n/a | Критический | 9.6 | 0,51 % | 04.03.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.