СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-77157 ast-cli: Auto-update downloads are not verified against a checksum before execution Checkmarx / github.com/checkmarx/ast-cli | Средний | 6.3 | 0,14 % | 22.10.2026 | ||
| CVE-2026-28854 The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS... Apple / macOS · apple / macos | Высокий | 7.5 | 0,18 % | 20.10.2026 | ||
| CVE-2026-33261 Null pointer accces in aggressive NSEC(3) cache PowerDNS / Recursor · powerdns / recursor | Средний | 5.9 | 0,24 % | 22.04.2026 | ||
| CVE-2026-84533 A cryptographic issue was addressed with improved integrity checks. This issue is fixed in iOS 27 an Apple / iOS and iPadOS · Apple / macOS | Средний | 5.3 | 0,17 % | 14.09.2026 | ||
| CVE-2026-58224 Samba: ctdb fails to do integrity checking of received packets Red Hat / Red Hat Ceph Storage 9.2 · Red Hat / Red Hat Enterprise Linux 10 | Средний | 6.5 | 0,34 % | 14.08.2026 | ||
| CVE-2026-79801 Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM) | Критический | 9.8 | 0,32 % | 06.10.2026 | ||
| CVE-2026-76751 Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM) | Критический | 9.8 | 0,3 % | 06.10.2026 | ||
| CVE-2026-49450 Joplin desktop Windows auto-updater accepts signed installer from any publisher because app-update.yml has no publisherName laurent22 / joplin | Критический | 7.1 | 0,18 % | PoC | 21.09.2026 | |
| CVE-2026-76853 Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi Netcore / NR268 | Высокий | 7.2 | 0,26 % | 16.09.2026 | ||
| CVE-2026-89179 Howyar|WeenyGenius - Missing Support for Integrity Check Howyar / WeenyGenius | Средний | 5.3 | 0,16 % | 11.09.2026 | ||
| CVE-2026-81049 Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulner Dell / ThinOS 10 | Средний | 4.4 | 0,12 % | 10.09.2026 | ||
| CVE-2026-17583 Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity Check Thermo Fisher / Applied Biosystems 3500/3500xL Series Data Collection Software · Thermo Fisher / Applied Biosystems 3730/3730xL Series Data Collection Software | Высокий | 8.3 | 0,14 % | 05.08.2026 | ||
| CVE-2026-18536 Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP RRWO / Data::Entropy | Высокий | 7.5 | 0,2 % | 01.08.2026 | ||
| CVE-2026-12705 Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool ABB / KNX Update Tool (ABB) · ABB / KNX Update Tool (BJE) | Средний | 5.9 | 0,15 % | 17.07.2026 | ||
| CVE-2026-48995 pnpm: Tarball hash of GitHub git dependencies is not stored in lockfile pnpm / pnpm · pnpm | Высокий | 4.8 | 0,17 % | PoC | 25.06.2026 | |
| CVE-2026-7574 Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use Anthropic / Claude Desktop Cowork | Высокий | 8.7 | 0,12 % | 24.06.2026 | ||
| CVE-2026-45787 electerm's encrypt method not safe enough electerm / electerm · electerm | Средний | 6.0 | 0,11 % | 28.05.2026 | ||
| CVE-2026-42428 OpenClaw < 2026.4.8 - Missing Integrity Verification in Package Downloads OpenClaw / OpenClaw · openclaw | Высокий | 7.5 | 0,14 % | Патч | 28.04.2026 | |
| CVE-2025-15364 Download Manager <= 3.3.40 - Unauthenticated Limited Privilege Escalation via updatePassword codename065 / Download Manager | Высокий | 7.3 | 0,2 % | 06.01.2026 | ||
| CVE-2024-27817 The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, i Apple / iOS and iPadOS · Apple / macOS | Высокий | 7.8 | 0,18 % | 10.06.2024 | ||
| CVE-2026-3856 IBM Db2 Recovery Expert Missing Integrity Check IBM / Db2 Recovery Expert | Средний | 5.3 | 0,16 % | Патч | 18.03.2026 | |
| CVE-2025-10010 Integrity Validation Bypass in CryptoPro Secure Disk for BitLocker CPSD IT SERVICES GMBH / CryptoPro Secure Disk for BitLocker | Средний | 6.8 | 0,3 % | 24.02.2026 | ||
| CVE-2025-48811 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1507 · Microsoft / Windows 10 Version 1607 | Средний | 6.7 | 0,28 % | Патч | 08.07.2025 | |
| CVE-2025-48500 BIG-IP APM VPN web client for macOS vulnerability F5 / BIG-IP Edge Client · F5 / BIG-IP | Высокий | 7.0 | 0,12 % | 13.08.2025 | ||
| CVE-2025-48803 Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1507 · Microsoft / Windows 10 Version 1607 | Средний | 6.7 | 0,28 % | Патч | 08.07.2025 | |
| CVE-2026-21437 eopkg vulnerable to package file list integrity bypass getsolus / eopkg | Низкий | 2.0 | 0,17 % | 01.01.2026 | ||
| CVE-2025-65203 KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents render n/a / n/a | Высокий | 7.1 | 0,14 % | 17.12.2025 | ||
| CVE-2024-46917 Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the c n/a / n/a | Высокий | 8.1 | 0,25 % | 29.08.2025 | ||
| CVE-2025-32882 An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app uses a cus n/a / n/a | Средний | 5.3 | 0,09 % | 01.05.2025 | ||
| CVE-2025-32890 An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. It uses a custom n/a / n/a | Средний | 5.3 | 0,13 % | 01.05.2025 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.