СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2024-0567 Gnutls: rejects certificate chain with distributed trust · Red Hat / Red Hat Enterprise Linux 9 | Критический | 7.5 | 1,39 % | PoCПатч | 16.01.2024 | |
| CVE-2026-46560 OpenAM Authentication Bypass via RADIUS Spoofing OpenIdentityPlatform / OpenAM · org.openidentityplatform.openam:openam-radius | Высокий | 7.5 | 0,19 % | Патч | 30.10.2026 | |
| CVE-2026-42784 Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion Red Hat / Red Hat Ansible Automation Platform 2.6 for RHEL 9 · Red Hat / Red Hat Enterprise Linux 10 | Высокий | 7.4 | 0,31 % | 16.09.2026 | ||
| CVE-2026-102894 GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover gpustack / gpustack | Критический | 9.1 | — | 05.11.2026 | ||
| CVE-2026-110021 Missing GSDX SignatureValue verification Phoenix Contact / PLCnext Engineer | Средний | 6.9 | 0,06 % | 04.11.2026 | ||
| CVE-2006-4339 A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly r openssl / openssl | Критический | 9.1 | 3,95 % | Патч | 05.09.2006 | |
| CVE-2026-121970 Pay with Vipps and MobilePay for WooCommerce before 6.4.1 Webhook Signature Forgery wphostingdev / Pay with Vipps and MobilePay for WooCommerce | Средний | 6.3 | — | Патч | 04.11.2026 | |
| CVE-2026-106078 A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a... Veeam / Backup for Microsoft 365 | Средний | 6.9 | 0,26 % | 27.10.2026 | ||
| CVE-2026-112518 An issue with signature validation was addressed with improved checks. This issue is fixed in iOS... Apple / iOS and iPadOS · Apple / macOS | Средний | 6.3 | 0,22 % | 26.10.2026 | ||
| CVE-2026-118774 Forge: Certificate signature verified with the issuer's RSA signature scheme digitalbazaar / forge | Высокий | 5.3 | 0,11 % | PoCПатч | 29.10.2026 | |
| CVE-2026-2625 Rust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verification Red Hat / Red Hat Hardened Images · Red Hat / Red Hat Enterprise Linux 10 | Средний | 5.5 | 0,09 % | 03.04.2026 | ||
| CVE-2026-121606 Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verification Qihoo 360 / D621-2 · Qihoo 360 / D603-2 | Критический | 10.0 | 0,24 % | PoC | 04.11.2026 | |
| CVE-2024-6800 An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SA GitHub / GitHub Enterprise Server · github / enterprise_server | Критический | 9.5 | 1,53 % | 20.08.2024 | ||
| CVE-2026-113229 Use after free in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... Google / Chrome · google / chrome | Высокий | 8.8 | 0,22 % | 21.10.2026 | ||
| CVE-2024-45409 The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector SAML-Toolkits / ruby-saml · onelogin / ruby-saml | Критический | 10.0 | 10,68 % | Патч | 10.09.2024 | |
| CVE-2026-88078 Microsoft Edge (Chromium-based) Spoofing Vulnerability Microsoft / Microsoft Edge (Chromium-based) · microsoft / edge_chromium | Средний | 4.3 | 0,29 % | Патч | 29.10.2026 | |
| CVE-2026-11800 Org.keycloak:keycloak-services: keycloak: authentication bypass via jwt algorithm confusion Red Hat / Red Hat build of Keycloak 26.6 · Red Hat / Red Hat build of Keycloak 26.6.4 | Высокий | 8.1 | 0,3 % | Патч | 25.06.2026 | |
| CVE-2026-118768 Botan: CLI utility `ocsp_check` accepts unauthenticated responses randombit / botan | Средний | 5.9 | 0,07 % | 29.10.2026 | ||
| CVE-2026-91908 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of... Dell / OpenManage Enterprise · dell / openmanage_enterprise | Средний | 6.8 | 0,14 % | 02.11.2026 | ||
| CVE-2026-91905 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of... Dell / OpenManage Enterprise · dell / openmanage_enterprise | Средний | 6.7 | 0,08 % | 02.11.2026 | ||
| CVE-2026-91898 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper... Dell / Alienware Command Center (AWCC) | Высокий | 8.1 | 0,29 % | 02.11.2026 | ||
| CVE-2026-119561 phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServer phpMyAdmin / phpMyAdmin · phpmyadmin / phpmyadmin | Критический | 7.6 | 0,2 % | PoC | 30.10.2026 | |
| CVE-2026-24807 Buffer Overflow Vulnerability in liuyueyi/quick-media liuyueyi / quick-media · com.github.liuyueyi.media:batik-codec-fix | Средний | 5.3 | 0,38 % | Патч | 27.01.2026 | |
| CVE-2026-91899 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper... Dell / Alienware Command Center (AWCC) | Средний | 6.4 | 0,09 % | 02.11.2026 | ||
| CVE-2023-49646 Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user t zoom / meeting_software_development_kit · zoom / video_software_development_kit | Средний | 6.5 | 0,4 % | 14.12.2023 | ||
| CVE-2026-65632 ECDSA signature length is not validated in jose, allowing signature malleability potatosalad / jose | Высокий | 5.1 | 0,09 % | PoCПатч | 26.10.2026 | |
| CVE-2026-63182 LightSAML: Signature reference wrapping permits unsigned assertion claims litesaml / lightsaml | Высокий | 8.1 | 0,15 % | 31.10.2026 | ||
| CVE-2026-120459 python-jose through 3.5.0 Authentication Bypass via Empty HMAC Key mpdavis / python-jose | Критический | 9.1 | 0,25 % | 02.11.2026 | ||
| CVE-2026-10723 Incorrect acceptance of NSEC3 records ISC / BIND 9 · isc / bind | Средний | 6.8 | 0,27 % | Патч | 22.07.2026 | |
| CVE-2026-117549 @fastify/secure-session vulnerable to signature verification bypass via cookie signature removal @fastify/secure-session / @fastify/secure-session | Средний | 4.2 | 0,08 % | 02.11.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.