СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-120734 Cleartext transmission of sensitive information in the email configuration test in Devolutions... Devolutions / Server | Информационный | — | — | 03.11.2026 | ||
| CVE-2026-70379 Unauthorized Access to vSolution Matrix RTSP WolfVision / Cynap Pro, Cynap Core Pro | Высокий | 7.1 | 0,11 % | 26.10.2026 | ||
| CVE-2026-111594 InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive Information InterSystems / IRIS for Health | Критический | 9.2 | 0,19 % | 23.10.2026 | ||
| CVE-2026-34346 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Средний | 5.5 | 0,27 % | Патч | 14.07.2026 | |
| CVE-2012-5562 rhn-proxy: may transmit credentials over clear-text when accessing RHN Satellite redhat / satellite | Высокий | 8.6 | 1,02 % | 02.12.2019 | ||
| CVE-2026-114614 Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts authlib / authlib · authlib | Средний | 3.5 | 0,27 % | PoCПатч | 23.10.2026 | |
| CVE-2026-116166 SiYuan 3.6.0 before 3.8.7 Cleartext Transmission via Unenforced networkServeTLS Setting siyuan-note / siyuan | Критический | 7.6 | 0,12 % | PoC | 25.10.2026 | |
| CVE-2026-115495 Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket WatchGuard / Mobile VPN with SSL Client | Средний | 5.7 | 0,08 % | 27.10.2026 | ||
| CVE-2026-115797 Tenda F6 Web Management cleartext transmission Tenda / F6 | Высокий | 6.3 | 0,2 % | PoC | 23.10.2026 | |
| CVE-2026-116844 Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES Data Transfer via PROT P fclairamb / ftpserverlib · Syncplify, Inc. / Syncplify Server! | Средний | 6.3 | 0,09 % | Патч | 27.10.2026 | |
| CVE-2026-118373 LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host() OpenBSD / LibreSSL | Средний | 6.3 | 0,09 % | Патч | 28.10.2026 | |
| CVE-2026-116196 Rclone before v1.75.2 B2 Credential Leak on Redirect via --b2-download-url rclone / rclone | Средний | 6.0 | 0,06 % | 25.10.2026 | ||
| CVE-2026-100635 SiYuan before v3.8.4 Authentication Bypass via Plaintext Session Cookie siyuan-note / siyuan | Критический | 8.2 | 0,33 % | PoCПатч | 26.09.2026 | |
| CVE-2026-41275 Flowise: Password Reset Link Sent Over Unsecured HTTP FlowiseAI / Flowise · flowiseai / flowise | Критический | 7.5 | 0,18 % | PoC | 23.04.2026 | |
| CVE-2026-40431 SenseLive X3050 Cleartext transmission of sensitive information SenseLive / X3050 · senselive / x3500_firmware | Средний | 6.9 | 0,19 % | 24.04.2026 | ||
| CVE-2026-21742 A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 thr Fortinet / FortiSOAR on-premise · Fortinet / FortiSOAR PaaS | Средний | 6.5 | 0,15 % | 14.04.2026 | ||
| CVE-2024-35059 NASA AIT-Core vulnerable to remote code execution n/a / n/a · nasa / ait-core | Критический | 9.8 | 0,45 % | 21.05.2024 | ||
| CVE-2024-35057 NASA AIT-Core vulnerable to remote code execution n/a / n/a · nasa / ait-core | Высокий | 7.5 | 0,44 % | 21.05.2024 | ||
| CVE-2024-35058 NASA AIT-Core vulnerable to remote code execution n/a / n/a · nasa / ait-core | Высокий | 7.5 | 0,44 % | 21.05.2024 | ||
| CVE-2026-6066 Unencrypted Client‑Server Communication in ConnectWise Automate™ Solution Center ConnectWise / Automate · connectwise / automate | Высокий | 7.1 | 0,08 % | 20.04.2026 | ||
| CVE-2026-4820 IBM Maximo Application Suite was vulnerable to because Cookie ltpatoken2_ was not set with secure flag IBM / Maximo Application Suite · ibm / maximo_application_suite | Средний | 4.3 | 0,12 % | Патч | 01.04.2026 | |
| CVE-2026-33569 Anviz Products Cleartext Transmission of Sensitive Information Anviz / Anviz CX7 Firmware · Anviz / Anviz CX2 Lite Firmware | Средний | 6.5 | 0,19 % | 17.04.2026 | ||
| CVE-2026-31924 Apache APISIX: Plugin tencent-cloud-cls log export uses plaintext HTTP Apache Software Foundation / Apache APISIX · apache / apisix | Средний | 5.3 | 0,24 % | 14.04.2026 | ||
| CVE-2026-31923 Apache APISIX: Openid-connect `tls_verify` field is disabled by default Apache Software Foundation / Apache APISIX · apache / apisix | Высокий | 7.5 | 0,25 % | 14.04.2026 | ||
| CVE-2026-22155 A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 thr Fortinet / FortiSOAR PaaS · Fortinet / FortiSOAR on-premise | Высокий | 7.5 | 0,17 % | 14.04.2026 | ||
| CVE-2026-7610 TRENDnet TEW-821DAP Firmware Update ssi cleartext transmission TRENDnet / TEW-821DAP · trendnet / tew-821dap_firmware | Высокий | 6.3 | 0,32 % | PoCПатч | 02.05.2026 | |
| CVE-2026-42514 Sensitive Data Exposure Vulnerability in e-Sushrut HMIS CDAC-Noida / e-Sushrut, Hospital Management Information System (HMIS) | Высокий | 8.8 | 0,23 % | 29.04.2026 | ||
| CVE-2026-116200 Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap() grokability / snipe-it · snipeitapp / snipe-it | Высокий | 8.2 | 0,15 % | 25.10.2026 | ||
| CVE-2026-116114 Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission Yoosee / GM8135S Camera | Высокий | 6.3 | 0,19 % | PoC | 26.10.2026 | |
| CVE-2026-116105 HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission n/a / HeyCyan App | Средний | 6.3 | 0,27 % | 26.10.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.