СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-59263 Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt. Apache Software Foundation / Apache OpenOffice · apache / openoffice | Низкий | 1.9 | — | 04.11.2026 | ||
| CVE-2026-117656 Unverified Sign in with Apple callback parameter can override verified ID token claims pow-auth / assent | Критический | 9.3 | 0,23 % | Патч | 31.10.2026 | |
| CVE-2026-112256 Logon bypass (trust of attacker-controlled completed-methods list) OpenText / Advanced Authentication Server | Критический | 9.2 | 0,25 % | 29.10.2026 | ||
| CVE-2026-78301 Out-of-zone database nodes can become authoritative zone cuts ISC / BIND 9 | Средний | 5.8 | 0,21 % | Патч | 16.09.2026 | |
| CVE-2026-19033 Unauthenticated IXFR deltas are applied to the live zone before TSIG verification ISC / BIND 9 | Средний | 6.5 | 0,24 % | Патч | 16.09.2026 | |
| CVE-2026-32162 Windows COM Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1809 · Microsoft / Windows 10 Version 21H2 | Высокий | 8.4 | 1,92 % | Патч | 14.04.2026 | |
| CVE-2026-44572 Next.js: Middleware / Proxy redirects can be cache-poisoned vercel / next.js · next | Средний | 5.9 | 0,28 % | 13.05.2026 | ||
| CVE-2026-102527 Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes nuxt-modules / og-image · nuxt-og-image | Средний | 6.9 | 0,19 % | 15.10.2026 | ||
| CVE-2026-100755 Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab GitLab / GitLab | Средний | 4.6 | 0,09 % | 13.10.2026 | ||
| CVE-2026-62364 wlc may disclose API tokens to project-configured URLs WeblateOrg / wlc · wlc | Низкий | 2.3 | 0,08 % | 22.09.2026 | ||
| CVE-2026-48100 Payy: agg_agg trailing message slots are unconstrained and allow forged burn messages polybase / payy | Критический | 8.7 | 0,18 % | PoC | 28.09.2026 | |
| CVE-2026-95985 Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces Amazon / Kiro IDE | Высокий | 8.6 | 0,14 % | Патч | 24.09.2026 | |
| CVE-2026-45602 Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Критический | 9.1 | 0,37 % | Патч | 09.06.2026 | |
| CVE-2026-54047 Laci Synchroni Backend Vulnerable to Account Takeover / User Impersonation via Client-Side Configuration Manipulation LaciSynchroni / server | Критический | 9.2 | 0,3 % | 11.09.2026 | ||
| CVE-2026-54625 django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning) django-cms / django-cms · django-cms | Средний | 4.8 | 0,18 % | 20.08.2026 | ||
| CVE-2026-74916 WP Fastest Cache 0.8.7.7 - 1.5.0 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters Unknown / WP Fastest Cache | Высокий | 6.5 | 0,15 % | PoC | 01.09.2026 | |
| CVE-2026-15387 Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab GitLab / GitLab | Высокий | 4.3 | 0,21 % | PoC | 26.08.2026 | |
| CVE-2025-29816 Microsoft Word Security Feature Bypass Vulnerability Microsoft / Microsoft 365 Apps for Enterprise · Microsoft / Microsoft Office 2016 | Высокий | 7.5 | 0,48 % | Патч | 08.04.2025 | |
| CVE-2026-50252 Possible cache poisoning attack by mapping source port population per thread NLnet Labs / Unbound | Средний | 5.7 | 0,17 % | 22.07.2026 | ||
| CVE-2026-46342 Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning nuxt / nuxt · nuxt | Низкий | 2.3 | 0,09 % | 12.06.2026 | ||
| CVE-2024-53848 check-jsonschema default caching for remote schemas allows for cache confusion python-jsonschema / check-jsonschema · check-jsonschema | Высокий | 7.1 | 0,15 % | Патч | 29.11.2024 | |
| CVE-2024-34083 STARTTLS unencrypted commands injection aio-libs / aiosmtpd · aiosmtpd | Средний | 5.4 | 0,23 % | 18.05.2024 | ||
| CVE-2026-41120 Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untru Dell / Wyse Management Suite | Критический | 9.8 | 0,39 % | 25.06.2026 | ||
| CVE-2026-33612 ZoneToCache can poison the cache PowerDNS / Recursor | Высокий | 7.5 | 0,15 % | 25.06.2026 | ||
| CVE-2026-35641 OpenClaw < 2026.3.24 - Arbitrary Code Execution via .npmrc in Local Plugin/Hook Installation OpenClaw / OpenClaw · openclaw | Критический | 8.4 | 0,14 % | PoC | 10.04.2026 | |
| CVE-2026-42960 Possible cache poisoning via promiscuous records for the authority section NLnet Labs / Unbound | Средний | 5.7 | 0,26 % | 20.05.2026 | ||
| CVE-2025-11703 WP Go Maps (formerly WP Google Maps) <= 9.0.48 - Unauthenticated Cache Poisoning wpgmaps / WP Go Maps (formerly WP Google Maps) | Средний | 5.3 | 0,23 % | 18.10.2025 | ||
| CVE-2025-29842 UrlMon Security Feature Bypass Vulnerability Microsoft / Windows 10 Version 1507 · Microsoft / Windows 10 Version 1607 | Высокий | 7.5 | 0,44 % | Патч | 13.05.2025 | |
| CVE-2025-40778 Cache poisoning attacks with unsolicited RRs ISC / BIND 9 | Критический | 8.6 | 0,67 % | PoC | 22.10.2025 | |
| CVE-2025-48804 Windows BitLocker Security Feature Bypass Vulnerability Microsoft / Windows 10 Version 1507 · Microsoft / Windows 10 Version 1607 | Средний | 6.8 | 0,65 % | Патч | 08.07.2025 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.