СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-45109 Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes vercel / next.js · Red Hat / Streams for Apache Kafka 2.9.4 | Высокий | 7.5 | 0,85 % | Патч | 13.05.2026 | |
| CVE-2026-57915 Apache Kerby: Kerberos Pre-Authentication Bypass Apache Software Foundation / Apache Kerby · Red Hat / Red Hat AMQ Clients | Высокий | 7.3 | 0,53 % | Патч | 26.06.2026 | |
| CVE-2026-49783 Secure Boot Security Feature Bypass Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.8 | 0,33 % | Патч | 14.07.2026 | |
| CVE-2026-96303 Microsoft PowerShell Security Feature Bypass Vulnerability Microsoft / PowerShell 7.4 · Microsoft / PowerShell 7.5 | Средний | 6.5 | 0,69 % | Патч | 13.10.2026 | |
| CVE-2026-70174 .NET Remote Code Execution Vulnerability Microsoft / .NET 10.0 runtime · Microsoft / .NET 11.0 runtime | Высокий | 8.8 | 0,91 % | Патч | 13.10.2026 | |
| CVE-2026-85805 Microsoft PowerShell Security Feature Bypass Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Средний | 6.5 | 0,59 % | Патч | 13.10.2026 | |
| CVE-2026-48797 Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication mcp-tool-shop-org / backpropagate · mcp-tool-shop-org / @mcptoolshop/backpropagate | Критический | 9.3 | 0,32 % | Патч | 17.06.2026 | |
| CVE-2026-96760 Authlib library contains a signature‑verification bypass vulnerability Authlib / Authlib · authlib | Критический | 9.8 | 0,43 % | Патч | 28.09.2026 | |
| CVE-2026-22618 A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP Eaton / IPP software · eaton / intelligent_power_protector | Высокий | 7.1 | 0,23 % | 16.04.2026 | ||
| CVE-2026-28914 A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.8 Apple / macOS · apple / macos | Средний | 5.5 | 0,2 % | 11.05.2026 | ||
| CVE-2026-44513 Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components huggingface / diffusers · Red Hat / Red Hat OpenShift AI 3.4 | Критический | 8.8 | 1,07 % | PoC | 14.05.2026 | |
| CVE-2024-55599 An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6 Fortinet / FortiOS · Fortinet / FortiProxy | Средний | 4.9 | 0,4 % | 08.07.2025 | ||
| CVE-2025-10457 Bluetooth: Out-Of-Context le_conn_rsp Handling zephyrproject-rtos / Zephyr | Средний | 4.3 | 0,4 % | 19.09.2025 | ||
| CVE-2026-50628 Apache CXF: OAuth2: Inverted IP Binding Check Defeats Security Control Apache Software Foundation / Apache CXF · Red Hat / Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16 | Критический | 9.8 | 0,71 % | 12.06.2026 | ||
| CVE-2026-65058 Trezor Safe improper security check in on-device display Trezor / Safe 3 · Trezor / Safe 7 | Средний | 5.9 | 0,4 % | Патч | 21.07.2026 | |
| CVE-2026-46582 A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path NLnet Labs / Unbound | Низкий | 3.7 | 0,19 % | 22.07.2026 | ||
| CVE-2026-1486 Org.keycloak.protocol.oidc.grants: disabled identity providers are still accepted for jwt authorization grant Red Hat / Red Hat build of Keycloak 26.4 · Red Hat / Red Hat build of Keycloak 26.4.9 | Высокий | 8.8 | 0,5 % | 09.02.2026 | ||
| CVE-2026-54431 Improper Data Validation in liboauth2 OpenIDC / liboauth2 | Средний | 5.1 | 0,18 % | 02.07.2026 | ||
| CVE-2026-12577 DVP80ES3 Improperly Implemented Security Check for Standard vulnerability deltaww / DVP80ES3 | Высокий | 8.7 | 0,43 % | 01.07.2026 | ||
| CVE-2026-11127 Inappropriate implementation in WebAPKs in Google Chrome on Android prior to 149.0.7827.53 allowed a Google / Chrome | Средний | 6.5 | 0,17 % | 05.06.2026 | ||
| CVE-2026-11122 Inappropriate implementation in Keyboard in Google Chrome prior to 149.0.7827.53 allowed a remote at Google / Chrome | Средний | 6.1 | 0,17 % | 05.06.2026 | ||
| CVE-2026-44475 Ella Core: UE Security Capability bypass on NGAP PathSwitchRequest ellanetworks / core | Средний | 6.1 | 0,15 % | 27.05.2026 | ||
| CVE-2026-42082 free5GC: Missing Concurrent NAS SMC Validation During NGAP Handover free5gc / free5gc | Средний | 3.7 | 0,25 % | PoC | 27.05.2026 | |
| CVE-2026-44473 Ella Core: UE Downlink Redirection via Forged PDUSessionResourceSetupResponse ellanetworks / core | Высокий | 7.1 | 0,17 % | 27.05.2026 | ||
| CVE-2026-42081 free5GC: UE Security Capability bypass on NGAP PathSwitchRequest free5gc / free5gc | Высокий | 6.1 | 0,27 % | PoC | 27.05.2026 | |
| CVE-2026-44474 Ella Core: Handover failures during concurrent Security Mode Command ellanetworks / core | Низкий | 3.7 | 0,13 % | 27.05.2026 | ||
| CVE-2026-40597 MantisBT has a Content Security Policy bypass via attachments mantisbt / mantisbt | Высокий | 7.6 | 0,5 % | 22.05.2026 | ||
| CVE-2026-5894 Inappropriate implementation in PDF in Google Chrome prior to 147.0.7727.55 allowed a remote attacke Google / Chrome | Средний | 4.3 | 0,16 % | 09.04.2026 | ||
| CVE-2025-31970 HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability HCL / DFXAnalytics | Средний | 5.3 | 0,15 % | 06.05.2026 | ||
| CVE-2025-31983 HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header HCL / BigFix Service Management (SM) | Низкий | 3.7 | 0,12 % | 06.05.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.