СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-116635 Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server AWS / aws-serverless-mcp-server | Средний | 6.9 | 0,31 % | Патч | 03.11.2026 | |
| CVE-2026-118693 CherryTree through 1.7.2 Local File Disclosure via Embedded-File Filename Path giuspen / cherrytree | Высокий | 5.6 | 0,14 % | PoC | 29.10.2026 | |
| CVE-2026-58300 Microsoft Edge for Android Information Disclosure Vulnerability Microsoft / Microsoft Edge (Chromium-based) | Средний | 6.2 | 0,45 % | Патч | 03.07.2026 | |
| CVE-2026-83746 Skype for Business Elevation of Privilege Vulnerability Microsoft / Skype for Business Server 2015 CU13 · Microsoft / Skype for Business Server 2019 CU8 | Высокий | 8.1 | 1,15 % | Патч | 13.10.2026 | |
| CVE-2026-70297 Skype for Business Remote Code Execution Vulnerability Microsoft / Skype for Business Server 2015 CU13 · Microsoft / Skype for Business Server 2019 CU8 | Высокий | 8.8 | 1,16 % | Патч | 13.10.2026 | |
| CVE-2026-83683 Windows Encrypting File System (EFS) Information Disclosure Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Средний | 6.5 | 1,28 % | Патч | 13.10.2026 | |
| CVE-2026-83784 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 8.8 | 1,08 % | Патч | 13.10.2026 | |
| CVE-2026-68896 Microsoft Windows Search Component Elevation of Privilege Vulnerability Microsoft / Windows 11 version 23H2 · Microsoft / Windows 11 Version 23H2 | Высокий | 7.8 | 0,37 % | Патч | 08.09.2026 | |
| CVE-2026-69612 Windows Error Reporting Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.8 | 0,37 % | Патч | 08.09.2026 | |
| CVE-2026-89009 WAVLINK WN535M1/WN535M3 Unauthenticated Arbitrary File Write via sync_server WAVLINK Technology / WN535M1 · WAVLINK Technology / WN535M3 | Критический | 8.8 | 1,01 % | PoCПатч | 11.09.2026 | |
| CVE-2024-10833 Arbitrary File Write in eosphoros-ai/db-gpt eosphoros-ai / eosphoros-ai/db-gpt · dbgpt | Критический | 9.1 | 0,84 % | Патч | 20.03.2025 | |
| CVE-2024-10831 Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt eosphoros-ai / eosphoros-ai/db-gpt · dbgpt | Критический | 9.1 | 0,84 % | 20.03.2025 | ||
| CVE-2026-35465 SecureDrop Client has path injection in read_gzip_header_filename() freedomofpress / securedrop-client · freedom / securedrop-client | Высокий | 7.5 | 0,44 % | Патч | 18.04.2026 | |
| CVE-2026-6418 PaperCut NG/MF: Path Traversal in Shared Account Synchronization PaperCut / PaperCut NG/MF · papercut / papercut_mf | Средний | 4.6 | 0,56 % | 05.05.2026 | ||
| CVE-2026-44029 An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch NixOS / Nix | Средний | 5.3 | 0,57 % | 05.05.2026 | ||
| CVE-2026-55062 uniget: Path Traversal in Hook Files - Directory Escape Vulnerability uniget-org / cli | Критический | 8.4 | 0,16 % | PoC | 17.09.2026 | |
| CVE-2026-0846 Arbitrary File Read via Absolute Path Input in nltk.util.filestring() nltk / nltk/nltk · Red Hat / Red Hat OpenShift AI 2.25 | Критический | 7.5 | 0,59 % | PoC | 09.03.2026 | |
| CVE-2025-70820 Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the persona Zettlab / D6 Ultra | Низкий | 3.5 | 0,27 % | 13.09.2026 | ||
| CVE-2026-82092 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software IBM / DataStage on Cloud Pak for Data | Высокий | 8.8 | 0,77 % | Патч | 11.09.2026 | |
| CVE-2026-68487 Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated cus WebPros / Plesk | Критический | 9.9 | 0,65 % | 10.09.2026 | ||
| CVE-2026-88288 GV-LPC2011/LPC2211 - Arbitrary File Read Through BKDownloadLink.cgi Symlink Creation GeoVision Inc. / GV-LPC2011/LPC2211 | Средний | 6.5 | 0,55 % | 10.09.2026 | ||
| CVE-2026-13346 pip absolute path traversal during download from malicious package indexes Python Packaging Authority / pip · pip | Средний | 5.6 | 0,29 % | Патч | 29.07.2026 | |
| CVE-2026-34515 AIOHTTP: UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows aio-libs / aiohttp · aiohttp | Средний | 6.6 | 0,45 % | Патч | 01.04.2026 | |
| CVE-2025-67898 MJML allows mj-include directory traversal due to an incomplete fix for CVE-2020-12827 MJML / MJML · mjml | Средний | 4.5 | 0,26 % | 15.12.2025 | ||
| CVE-2026-54202 TeamDavid: Path Traversal in the archive creation functionality Tobit Laboratories AG / TeamDavid | Высокий | 8.5 | 0,45 % | 07.08.2026 | ||
| CVE-2026-46345 compliance-trestle - jinja has an Arbitrary File Write via Path Traversal oscal-compass / compliance-trestle · compliance-trestle | Критический | 8.4 | 0,2 % | PoC | 17.08.2026 | |
| CVE-2026-47630 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an a NVIDIA / Triton Inference Server | Средний | 5.5 | 0,18 % | 18.08.2026 | ||
| CVE-2026-47606 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an a NVIDIA / Triton Inference Server | Средний | 6.5 | 0,74 % | 18.08.2026 | ||
| CVE-2026-32175 .NET Core Tampering Vulnerability Microsoft / .NET 10.0 · Microsoft / .NET 8.0 | Средний | 4.3 | 0,71 % | Патч | 12.05.2026 | |
| CVE-2026-47243 Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs kata-containers / kata-containers | Критический | 9.2 | 0,2 % | PoC | 08.08.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.