СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-108463 Windows SmartScreen Security Feature Bypass Vulnerability Microsoft / Windows 11 Version 24H2 · Microsoft / Windows 11 Version 25H2 | Высокий | 8.8 | 0,97 % | Патч | 13.10.2026 | |
| CVE-2026-102217 WebDAV Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 8.8 | 1,26 % | Патч | 13.10.2026 | |
| CVE-2026-70184 Windows Backup Engine Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 21H2 · Microsoft / Windows 10 Version 22H2 | Высокий | 7.8 | 0,42 % | Патч | 13.10.2026 | |
| CVE-2026-88136 Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 8.8 | 0,95 % | Патч | 13.10.2026 | |
| CVE-2026-102231 Visual Studio Code Security Feature Bypass Vulnerability Microsoft / Visual Studio Code · microsoft / visual_studio_code | Высокий | 7.7 | 0,38 % | Патч | 13.10.2026 | |
| CVE-2026-73019 Windows URL Moniker Security Feature Bypass Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Средний | 4.3 | 0,77 % | Патч | 08.09.2026 | |
| CVE-2026-112343 Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casing Syncplify, Inc. / Syncplify Server! | Высокий | 8.6 | 0,47 % | Патч | 26.10.2026 | |
| CVE-2026-119200 Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes nuxt / nuxt · @nuxt / nitro-server | Средний | 6.5 | 0,34 % | Патч | 29.10.2026 | |
| CVE-2026-110095 fast-uri vulnerable to improper path equivalence in relative reference normalization fast-uri / fast-uri · fast-uri | Низкий | 3.7 | 0,29 % | 20.10.2026 | ||
| CVE-2026-110725 fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references fast-uri / fast-uri · fast-uri | Низкий | 3.7 | 0,3 % | 20.10.2026 | ||
| CVE-2026-34510 OpenClaw < 2026.3.22 - Remote File URL Acceptance in Windows Media Loaders OpenClaw / OpenClaw · openclaw | Средний | 6.9 | 0,33 % | Патч | 01.04.2026 | |
| CVE-2026-93709 Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler Продукт уточняется | Средний | 5.3 | 0,45 % | Патч | 22.09.2026 | |
| CVE-2026-57441 MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence bitbonsai / mcpvault · @bitbonsai/mcpvault | Высокий | 8.4 | 0,2 % | 15.09.2026 | ||
| CVE-2024-6839 Improper Regex Path Matching in corydolphin/flask-cors corydolphin / corydolphin/flask-cors · flask-cors | Средний | 4.3 | 0,74 % | 20.03.2025 | ||
| CVE-2026-85978 Unauthenticated Remote Code Execution in Akana API Platform Perforce / Akana | Критический | 10.0 | 1,44 % | 09.09.2026 | ||
| CVE-2026-72835 filebrowser before v2.63.21 Access Rule Bypass via Path Canonicalization filebrowser / filebrowser | Критический | 7.6 | 0,5 % | PoC | 14.08.2026 | |
| CVE-2024-30073 Windows Security Zone Mapping Security Feature Bypass Vulnerability Microsoft / Windows 10 Version 1507 · Microsoft / Windows 10 Version 1607 | Высокий | 7.8 | 0,9 % | Патч | 10.09.2024 | |
| CVE-2026-49401 Deno Permission Bypass via Unicode Normalization Mismatch on macOS (APFS) denoland / deno | Высокий | 7.3 | 0,2 % | 23.06.2026 | ||
| CVE-2026-66064 goshs has ACL Bypass & Path Traversal goshs-labs / goshs | Средний | 5.3 | 0,45 % | 29.07.2026 | ||
| CVE-2026-23674 MapUrlToZone Security Feature Bypass Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.5 | 1,27 % | Патч | 10.03.2026 | |
| CVE-2026-50568 Fission: SanitizeFilePath lexical HasPrefix bypass permits sibling-directory escape fission / fission | Низкий | 3.6 | 0,12 % | 10.06.2026 | ||
| CVE-2025-21332 MapUrlToZone Security Feature Bypass Vulnerability Microsoft / Windows 10 Version 1507 · Microsoft / Windows 10 Version 1607 | Средний | 4.3 | 1,5 % | Патч | 14.01.2025 | |
| CVE-2025-21189 MapUrlToZone Security Feature Bypass Vulnerability Microsoft / Windows 10 Version 1507 · Microsoft / Windows 10 Version 1607 | Средний | 4.3 | 2,91 % | Патч | 14.01.2025 | |
| CVE-2025-21328 MapUrlToZone Security Feature Bypass Vulnerability Microsoft / Windows 10 Version 1507 · Microsoft / Windows 10 Version 1607 | Средний | 4.3 | 1,49 % | Патч | 14.01.2025 | |
| CVE-2025-21329 MapUrlToZone Security Feature Bypass Vulnerability Microsoft / Windows 10 Version 1507 · Microsoft / Windows 10 Version 1607 | Средний | 4.3 | 1,49 % | Патч | 14.01.2025 | |
| CVE-2025-21219 MapUrlToZone Security Feature Bypass Vulnerability Microsoft / Windows 10 Version 1507 · Microsoft / Windows 10 Version 1607 | Средний | 4.3 | 2,95 % | Патч | 14.01.2025 | |
| CVE-2025-21269 Windows HTML Platforms Security Feature Bypass Vulnerability Microsoft / Windows 10 Version 1507 · Microsoft / Windows 10 Version 1607 | Средний | 4.3 | 4,5 % | Патч | 14.01.2025 | |
| CVE-2025-21268 MapUrlToZone Security Feature Bypass Vulnerability Microsoft / Windows 10 Version 1507 · Microsoft / Windows 10 Version 1607 | Средний | 4.3 | 1,95 % | Патч | 14.01.2025 | |
| CVE-2026-34451 Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories anthropics / anthropic-sdk-typescript · @anthropic-ai/sdk | Средний | 6.3 | 0,36 % | 01.04.2026 | ||
| CVE-2026-5816 Improper Resolution of Path Equivalence in GitLab GitLab / GitLab | Критический | 8.0 | 0,41 % | PoC | 22.04.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.