СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2025-42937 Directory Traversal vulnerability in SAP Print Service SAP_SE / SAP Print Service | Критический | 9.8 | 0,74 % | 14.10.2025 | ||
| CVE-2025-39467 WordPress Wanderland theme <= 1.7.1 - Local File Inclusion Vulnerability Mikado-Themes / Wanderland | Высокий | 8.1 | 0,62 % | 06.11.2025 | ||
| CVE-2026-39734 WordPress WP EasyPay plugin <= 4.5.4 - Path Traversal vulnerability Saad Iqbal / WP EasyPay | Высокий | 7.5 | 0,46 % | 30.10.2026 | ||
| CVE-2026-59115 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability Microsoft / Microsoft Entra Provisioning Service | Критический | 9.9 | 1,02 % | Патч | 07.08.2026 | |
| CVE-2026-118633 A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code... Sophos / SG UTM | Критический | 9.2 | 0,6 % | 28.10.2026 | ||
| CVE-2026-6074 Path traversal: '.../...//' in Intrado 911 Emergency Gateway (EGW) Intrado / 911 Emergency Gateway | Критический | 9.3 | 0,55 % | 23.04.2026 | ||
| CVE-2026-28265 PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker w Dell / PowerStore · Dell / PowerStore 500T | Высокий | 7.1 | 0,12 % | 01.04.2026 | ||
| CVE-2026-42274 Heimdall: Authorization bypass via path normalization mismatch dadrus / heimdall | Высокий | 7.8 | 0,37 % | 08.05.2026 | ||
| CVE-2026-0205 A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with us SonicWall / SonicOS · sonicwall / sonicos | Средний | 6.8 | 0,39 % | 29.04.2026 | ||
| CVE-2026-20034 Cisco Unity Connection Remote Code Execution Vulnerability Cisco / Cisco Unity Connection · cisco / unity_connection | Высокий | 8.8 | 0,71 % | 06.05.2026 | ||
| CVE-2026-0804 An ACAP configuration file lacked sufficient input validation, which could allow a path traversal at Axis Communications AB / AXIS OS · axis / axis_os | Высокий | 7.3 | 0,13 % | 12.05.2026 | ||
| CVE-2026-42930 Appliance mode iControl REST vulnerability F5 / BIG-IP · f5 / big-ip_access_policy_manager | Высокий | 8.5 | 0,48 % | Патч | 13.05.2026 | |
| CVE-2026-25705 Rancher Extensions have arbitrary file access via path traversal SUSE / rancher | Высокий | 8.4 | 0,37 % | 13.05.2026 | ||
| CVE-2026-24464 Appliance mode iControl REST vulnerability F5 / BIG-IP · f5 / big-ip_access_policy_manager | Средний | 6.9 | 0,89 % | Патч | 13.05.2026 | |
| CVE-2026-44415 Affected systems do not properly restrict access to internal APIs and paths for authenticated users. Siemens / Industrial Edge Device Kit - arm64 V1.10 · Siemens / Industrial Edge Device Kit - arm64 V1.11 | Высокий | 8.9 | 0,48 % | 13.10.2026 | ||
| CVE-2026-44414 A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device K Siemens / Industrial Edge Cloud Device (IECD) · Siemens / Industrial Edge Device Kit - arm64 V1.10 | Средний | 6.9 | 0,47 % | 13.10.2026 | ||
| CVE-2026-105683 Ghost: Path Traversal Vulnerability in Ghost ImageSize Service TryGhost / Ghost · ghost | Низкий | 3.8 | 0,31 % | 05.10.2026 | ||
| CVE-2026-103290 Ghost 6.14.0 before 6.27.0 Path Traversal via ImageSize TryGhost / Ghost · ghost | Средний | 5.1 | 0,28 % | 01.10.2026 | ||
| CVE-2026-5703 Path Traversal in Satel Iberia SenNet Datalogger Serie 200 Satel Iberia / SenNet Datalogger Serie 200 | Высокий | 7.1 | 0,29 % | 07.10.2026 | ||
| CVE-2026-82824 Path traversal may allow arbitrary files to be viewed, created, modified, or deleted Hitachi Industrial Equipment Systems / Hitachi Coding Software Suite | Критический | 9.3 | 0,38 % | 01.10.2026 | ||
| CVE-2026-97244 WordPress Creator LMS plugin <= 1.2.19 - Path Traversal vulnerability WPFunnels / Creator LMS | Высокий | 7.5 | 0,29 % | 30.09.2026 | ||
| CVE-2026-27557 Path Traversal in /index.php/view_uploaded_iodd_file Pepperl+Fuchs / ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs / ICE2-8IOL-G65L-V1D | Высокий | 7.5 | 0,71 % | 16.09.2026 | ||
| CVE-2026-85310 WordPress Groundhogg plugin <= 4.7.1 - Path Traversal vulnerability Adrian Tobey / Groundhogg | Средний | 6.5 | 0,44 % | 10.09.2026 | ||
| CVE-2026-21103 Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to acc Samsung Mobile / Samsung Mobile Devices | Средний | 6.8 | 0,24 % | 09.09.2026 | ||
| CVE-2026-21092 Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image Samsung Mobile / Samsung Mobile Devices | Высокий | 8.8 | 0,47 % | 09.09.2026 | ||
| CVE-2025-68428 jsPDF has Local File Inclusion/Path Traversal vulnerability parallax / jsPDF · Red Hat / Red Hat Advanced Cluster Security 4.8 | Критический | 9.2 | 2,18 % | 06.01.2026 | ||
| CVE-2026-20513 In Audio HAL, there is a possible information disclosure due to improper input validation. This coul MediaTek, Inc. / MediaTek chipset | Средний | 4.4 | 0,24 % | 07.09.2026 | ||
| CVE-2026-59909 Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privil Dell / ObjectScale | Высокий | 7.1 | 0,16 % | 17.08.2026 | ||
| CVE-2026-56089 Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privil Dell / ObjectScale | Низкий | 3.3 | 0,18 % | 17.08.2026 | ||
| CVE-2026-28157 WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability Lasso Analytics, Inc. / Do Lasso | Высокий | 7.5 | 0,41 % | 13.08.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.