СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-118527 Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6... Ivanti / Connect Secure · ivanti / connect_secure | Критический | 4.3 | — | KEV | 03.11.2026 | |
| CVE-2026-85297 Bucket Squatting in Cloud Run MCP leads to Service Account Takeover Google Cloud / Cloud Run MCP | Высокий | 7.7 | 0,31 % | 26.10.2026 | ||
| CVE-2026-79980 Predictable and reused DHCPv4 transaction identifier allows spoofed DHCP replies to reconfigure gateway and DNS zephyrproject / zephyr | Средний | 5.6 | 0,17 % | Патч | 23.10.2026 | |
| CVE-2026-46347 Goobi viewer: Predictable Replacement Password Allows Account Takeover After Password Reset intranda / goobi-viewer-core | Средний | 6.8 | 0,25 % | 23.10.2026 | ||
| CVE-2026-64964 Generation of Predictable Email Confirmation Token in ATutor ATutor / ATutor | Средний | 6.3 | 0,37 % | 20.08.2026 | ||
| CVE-2026-5085 Solstice::Session versions through 1440 for Perl generates session ids insecurely MCRAWFOR / Solstice::Session · mcrawfor / solstice::session | Критический | 9.1 | 0,34 % | 13.04.2026 | ||
| CVE-2026-5080 Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely BIGPRESH / Dancer::Session::Abstract · perldancer / dancer::session::abstract | Средний | 5.9 | 0,36 % | Патч | 30.04.2026 | |
| CVE-2026-28810 Predictable DNS Transaction IDs Enable Cache Poisoning in Built-in Resolver Erlang / OTP · erlang / erlang/otp | Средний | 6.3 | 0,27 % | Патч | 07.04.2026 | |
| CVE-2026-5081 Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure CHORNY / Apache::Session::Generate::ModUniqueId · Red Hat / Red Hat Hardened Images | Критический | 9.1 | 0,3 % | 06.05.2026 | ||
| CVE-2026-5084 WebDyne::Session versions before 3.003_704 for Perl generate the session id insecurely ASPEER / WebDyne::Session | Средний | 6.5 | 0,33 % | Патч | 11.05.2026 | |
| CVE-2026-8503 Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids GUIMARD / Apache::Session::Generate::SHA256 · guimard / apache::session::generate::sha256 | Средний | 6.5 | 0,24 % | Патч | 15.05.2026 | |
| CVE-2026-46346 Goobi viewer: Predictable Password Reset Token Allows Unauthorized Password Reset intranda / goobi-viewer-core | Средний | 6.5 | 0,33 % | 23.10.2026 | ||
| CVE-2026-75106 OpnForm Editable Submission Secret Derivation via Empty Hashids Salt OpnForm / OpnForm | Критический | 9.3 | 0,4 % | PoCПатч | 17.08.2026 | |
| CVE-2026-95653 Concrete CMS Community Store before 2.7.8 Predictable Digital Download Token concretecms-community-store / community_store | Высокий | 8.7 | 0,57 % | Патч | 22.09.2026 | |
| CVE-2026-85496 Botslab G980H Dashcams Generation of Predictable Numbers or Identifiers Botslab / G980H | Высокий | 7.7 | 0,25 % | 24.09.2026 | ||
| CVE-2026-13577 Dancer2 versions before 2.2.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable Продукт уточняется | Высокий | 8.2 | 0,57 % | 20.07.2026 | ||
| CVE-2025-10148 predictable WebSocket mask curl / curl | Средний | 5.3 | 0,52 % | 12.09.2025 | ||
| CVE-2026-2473 Bucket Squatting in Vertex AI Experiments leads to RCE and Model Theft. Google Cloud / Vertex AI Experiments · google-cloud-aiplatform | Высокий | 7.7 | 0,51 % | 20.02.2026 | ||
| CVE-2025-14602 Weak File Name Generation in vsDesk vsDesk / vsDesk | Средний | 5.3 | 0,47 % | 20.08.2026 | ||
| CVE-2026-9219 Setracker2 Children's Smartwatch Ecosystem Generation of Predictable Numbers or Identifiers Shenzhen i365-Tech Co. Ltd. / Setracker2 Parental Control App (Android) package com.tgelec.setracker | Высокий | 8.3 | 0,35 % | 26.06.2026 | ||
| CVE-2026-47085 An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH token forgery can occur cyrusimap / Cyrus IMAP | Средний | 4.0 | 0,3 % | 16.07.2026 | ||
| CVE-2026-4269 Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit AWS / Bedrock AgentCore Starter Toolkit · bedrock-agentcore-starter-toolkit | Средний | 5.8 | 0,26 % | Патч | 16.03.2026 | |
| CVE-2026-56016 CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources MARKSTOS / CGI::Session::ID::md5 | Средний | 5.9 | 0,51 % | 01.07.2026 | ||
| CVE-2026-3256 HTTP::Session versions before 0.54 for Perl defaults to using insecurely generated session ids KTAT / HTTP::Session | Критический | 9.8 | 0,54 % | 28.03.2026 | ||
| CVE-2026-11374 Account Takeover via Predictable SSO Ticket Generation zohocorp / manageengine_adselfservice_plus · zohocorp / manageengine_recovery_manager_plus | Критический | 9.0 | 2,52 % | 23.06.2026 | ||
| CVE-2026-9733 Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameter HAYAJO / Mojolicious::Plugin::Web::Auth::OAuth2 | Критический | 9.1 | 0,52 % | Патч | 23.06.2026 | |
| CVE-2026-9692 Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely HAYAJO / Mojolicious::Sessions::Storable | Средний | 5.3 | 0,42 % | Патч | 18.06.2026 | |
| CVE-2026-42932 Naxclow IoT Platform Generation of Predictable Numbers or Identifiers Naxclow / Smart Doorbell X3 · Naxclow / X Smart Home | Средний | 6.9 | 0,23 % | 12.06.2026 | ||
| CVE-2026-45673 Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port netty / netty | Средний | 6.8 | 0,32 % | 12.06.2026 | ||
| CVE-2026-40496 FreeScout has Predictable Attachment Token that Allows Unauthenticated Private File Download via Brute Force freescout-help-desk / freescout | Высокий | 8.8 | 0,4 % | 21.04.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.