СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2023-21705 Microsoft SQL Server Remote Code Execution Vulnerability microsoft / sql_server | Высокий | 8.8 | — | Патч | 14.02.2023 | |
| CVE-2026-71456 Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows... Johnson Controls / Kantech Entrapass | Высокий | 8.5 | 0,1 % | 26.10.2026 | ||
| CVE-2026-120209 AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Token anji-plus / AJ-Report | Критический | 9.3 | 0,54 % | 31.10.2026 | ||
| CVE-2026-110474 Hardcoded API Key Vulnerability in CreditNirvana Agentic AI Call Centre application CreditNirvana / Agentic AI Call Centre | Высокий | 8.7 | 0,37 % | 26.10.2026 | ||
| CVE-2026-61737 ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin huajian123 / ng-antd-admin | Критический | 9.8 | 0,51 % | 30.10.2026 | ||
| CVE-2026-119597 OpenDeepWiki through 2.0.6 Hard-coded JWT Signing Key Admin Token Forgery AIDotNet / OpenDeepWiki | Критический | 9.3 | 0,37 % | Патч | 30.10.2026 | |
| CVE-2026-89052 Hardcoded AES encryption key in Archer C6 TP-Link Systems Inc. / Archer C6 V2 | Средний | 5.9 | 0,24 % | Патч | 22.10.2026 | |
| CVE-2026-91912 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic... Dell / OpenManage Enterprise | Высокий | 7.3 | 0,12 % | 30.10.2026 | ||
| CVE-2026-76298 Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise Splunk / Splunk Enterprise · splunk / splunk | Высокий | 8.8 | 0,35 % | 22.10.2026 | ||
| CVE-2026-100413 SeaweedFS: Hard-coded SSH host key can be presented by certain standalone SFTP Helm deployments seaweedfs / seaweedfs | Критический | 7.0 | 0,37 % | PoCПатч | 14.10.2026 | |
| CVE-2025-62841 Hard-coded Cryptographic Key #2 QNAP Systems Inc. / HBS 3 Hybrid Backup Sync · QNAP Systems Inc. / Hybrid Backup Sync | Высокий | 8.7 | 0,25 % | 29.10.2026 | ||
| CVE-2025-62839 Hard-coded Cryptographic Key #1 QNAP Systems Inc. / HBS 3 Hybrid Backup Sync · QNAP Systems Inc. / Hybrid Backup Sync | Высокий | 8.7 | 0,25 % | 29.10.2026 | ||
| CVE-2026-86384 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release... Dell / PowerProtect Data Domain | Критический | 9.8 | 0,47 % | 28.10.2026 | ||
| CVE-2026-117564 nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret buqiyuan / nest-admin | Критический | 9.3 | 0,6 % | Патч | 27.10.2026 | |
| CVE-2026-102812 Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7 TP-Link Systems Inc. / RE305 v3 · TP-Link Systems Inc. / Archer C7 v5 | Средний | 6.9 | 0,12 % | Патч | 27.10.2026 | |
| CVE-2026-18330 Hardcoded Shared RSA-1024 Private Key in Web Login in TP-Link RE305 and Archer C7 TP-Link Systems Inc. / RE305 v3 · TP-Link Systems Inc. / Archer C7 v5 | Средний | 6.1 | 0,33 % | Патч | 04.09.2026 | |
| CVE-2026-116747 Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret rajnandan1 / kener | Критический | 9.2 | 0,62 % | Патч | 27.10.2026 | |
| CVE-2025-55449 AstrBot is vulnerable to RCE with hard-coded JWT signing keys n/a / n/a · astrbot | Критический | 9.8 | 0,28 % | Патч | 08.05.2026 | |
| CVE-2026-111460 Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series Moxa / OnCell G3150A-LTE Series | Высокий | 7.7 | 0,3 % | 27.10.2026 | ||
| CVE-2026-112345 TTLock Android App < 9.8.260718 Hardcoded BLE Pairing Key Exposure Sciener / TTLock | Критический | 8.6 | 0,25 % | PoC | 26.10.2026 | |
| CVE-2026-7018 Datavane Datavines JWT Token TokenManager.java hard-coded key Datavane / Datavines | Высокий | 6.3 | 0,34 % | PoCПатч | 26.04.2026 | |
| CVE-2026-6611 liangliangyy DjangoBlog File Upload Endpoint settings.py hard-coded key liangliangyy / DjangoBlog | Средний | 2.3 | 0,25 % | PoC | 20.04.2026 | |
| CVE-2026-33266 Apache OpenMeetings: Hardcoded Remember-Me Cookie Encryption Key and Salt Apache Software Foundation / Apache OpenMeetings · apache / openmeetings | Высокий | 7.5 | 0,3 % | 09.04.2026 | ||
| CVE-2026-32958 SD-330AC and AMC Manager provided by silex technology, Inc. use a hard-coded cryptographic key. An a silex technology, Inc. / SD-330AC · silex technology, Inc. / AMC Manager | Средний | 6.9 | 0,23 % | 20.04.2026 | ||
| CVE-2026-32324 Anviz CX7 Firmware Use of Hard-coded Cryptographic Key Anviz / Anviz CX7 Firmware · anviz / cx7_firmware | Высокий | 7.7 | 0,09 % | 17.04.2026 | ||
| CVE-2014-125135 A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0. Affected is an unknown... Продукт уточняется | Средний | 6.9 | 0,48 % | 26.10.2026 | ||
| CVE-2026-5426 KnowledgeDeliver deployments before February 24, 2026 use a static ASP.NET/IIS machineKey value Digital Knowledge / KnowledgeDeliver | Критический | 9.1 | 1,01 % | 16.04.2026 | ||
| CVE-2026-5310 Enter Software Iperius Backup IperiusAccounts.ini hard-coded key Enter Software / Iperius Backup | Средний | 2.0 | 0,1 % | PoCПатч | 01.04.2026 | |
| CVE-2026-39810 A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 m Fortinet / FortiClientEMS · fortinet / forticlientems | Средний | 5.5 | 0,1 % | 14.04.2026 | ||
| CVE-2026-42518 Information Disclosure Vulnerability in e-Sushrut HMIS CDAC-Noida / e-Sushrut, Hospital Management Information System (HMIS) | Высокий | 8.7 | 0,22 % | 29.04.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.