СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-120637 CGI versions before 5.00 for Perl take request parameters from the process command line arguments for an unrecognised REQUEST_METHOD Продукт уточняется | Информационный | — | — | Патч | 04.11.2026 | |
| CVE-2026-64529 crypto: qat - remove unused character device and IOCTLs Linux / Linux | Высокий | 7.8 | 0,18 % | 25.07.2026 | ||
| CVE-2026-115727 AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server Fosowl / AgenticSeek | Критический | 9.2 | 0,7 % | Патч | 23.10.2026 | |
| CVE-2026-84486 Automation-controller: automation-controller-container: automation-controller: unauthenticated debug scheduler-trigger endpoints (allowany, routed without debug guard) allow advisory-lock starvation of job dispatch (dos) Red Hat / Red Hat Ansible Automation Platform 2.6 for RHEL 9 · Red Hat / Red Hat Ansible Automation Platform 2.6 | Высокий | 8.2 | 0,65 % | 23.09.2026 | ||
| CVE-2026-15575 Sensitive Information Disclosure Due to Enabled Debug Mode in Production in SFM Software's Costifier SFM Software Technologies Inc. / Costifier | Средний | 5.3 | 0,2 % | 16.10.2026 | ||
| CVE-2026-102628 Cadmos LTI exposure of sensitive information via debug mode Eummena / Cadmos LTI | Критический | 9.2 | 0,34 % | 01.10.2026 | ||
| CVE-2026-40035 Unfurl - Werkzeug Debugger Exposure via String Config Parsing obsidianforensics / unfurl · dfir-unfurl | Критический | 9.3 | 0,56 % | PoC | 09.04.2026 | |
| CVE-2026-83550 Postgres-exporter: net/http/pprof exposed on metrics listener Red Hat / Multicluster Global Hub | Высокий | 7.1 | 0,21 % | 06.10.2026 | ||
| CVE-2026-100102 RCE via exposed JDWP debug agent in P4Search Perforce / P4 (Helix Core) | Критический | 9.5 | 0,36 % | 05.10.2026 | ||
| CVE-2026-13313 An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, ASUS / Router | Высокий | 8.9 | 0,68 % | 01.10.2026 | ||
| CVE-2026-103475 yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure yii2-starter-kit / yii2-starter-kit | Критический | 9.3 | 0,4 % | 30.09.2026 | ||
| CVE-2026-100295 Active debug code in Anjvision YSSD-RTMP-H5 Anjvision / YSSD-RTMP-H5 | Средний | 5.3 | 0,21 % | 29.09.2026 | ||
| CVE-2026-73593 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Active D Dell / Secure Connect Gateway (SCG) Policy Manager | Низкий | 3.0 | 0,09 % | 29.09.2026 | ||
| CVE-2026-50228 Electron DevTools Arbitrary Code Execution Vulnerability in NitroSense Acer / NitroSense V5 | Средний | 6.1 | 0,18 % | 23.09.2026 | ||
| CVE-2026-81943 PLANET IGS-5225-8P2T4S V1/V2 Debug Mode RCE PLANET Technology Corp. / PLANET IGS-5225-8P2T4S V1 · PLANET Technology Corp. / PLANET IGS-5225-8P2T4S V2 | Высокий | 8.4 | 0,18 % | Патч | 18.09.2026 | |
| CVE-2026-53952 GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flaw GetSimpleCMS-CE / GetSimpleCMS-CE · GetSimpleCMS / GetSimpleCMS | Критический | 9.8 | 0,55 % | 11.09.2026 | ||
| CVE-2026-6485 UEFI BIOS embedded Shell can be used to bypass Secure Boot Insyde Software / InsydeH2O | Высокий | 8.2 | 0,18 % | 09.09.2026 | ||
| CVE-2026-58191 Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes appium / appium · @appium/base-driver | Средний | 6.5 | 0,56 % | 08.07.2026 | ||
| CVE-2026-77545 A malicious actor with access to the network, low privileges and under certain conditions could expl Ubiquiti Inc / UniFi OS Server · Ubiquiti Inc / Cloud Keys | Критический | 9.0 | 0,43 % | 26.08.2026 | ||
| CVE-2026-66405 DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled. The telnet service may be lever ECOVACS ROBOTICS / DEEBOT PRO M1 · ECOVACS ROBOTICS / DEEBOT PRO K1VAC | Высокий | 8.7 | 0,51 % | 10.08.2026 | ||
| CVE-2026-66403 DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled. The floor ma ECOVACS ROBOTICS / DEEBOT PRO M1 · ECOVACS ROBOTICS / DEEBOT PRO K1VAC | Высокий | 8.7 | 0,43 % | 10.08.2026 | ||
| CVE-2025-4106 WatchGuard Firebox leftover debug code vulnerability WatchGuard / Fireware OS | Высокий | 8.9 | 0,32 % | 25.10.2025 | ||
| CVE-2026-41186 Unauthenticated Go pprof exposure in Calico debug server Tigera / Calico · Tigera / Calico Enterprise | Средний | 6.0 | 0,67 % | Патч | 30.07.2026 | |
| CVE-2026-65893 Arbitrary Code Execution Vulnerability in CP PLUS EZ-P21 IP Camera CP-Plus / EZ-P21 IP Camera | Высокий | 7.0 | 0,23 % | 27.07.2026 | ||
| CVE-2026-58378 Allwinner TV Box TV98 ADB exposed on network Allwinner / H616 | Высокий | 8.6 | 0,44 % | 09.07.2026 | ||
| CVE-2026-59092 JuiceFS - Authentication Bypass via pprof and metrics Endpoints juicedata / juicefs | Высокий | 7.0 | 0,66 % | Патч | 02.07.2026 | |
| CVE-2026-54798 A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.2 Siemens / CPCI85 Central Processing/Communication · Siemens / SICORE Base system | Высокий | 7.1 | 0,41 % | 09.07.2026 | ||
| CVE-2026-54799 A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.2 Siemens / CPCI85 Central Processing/Communication · Siemens / SICORE Base system | Высокий | 8.4 | 0,18 % | 09.07.2026 | ||
| CVE-2026-49188 Elevated Root Command Execution via ai_cmd Sockets Acer / Connect M6E 5G Portable WiFi Router | Высокий | 8.7 | 0,32 % | 04.06.2026 | ||
| CVE-2026-45728 Algernon: Single-file mode unconditionally enables debug mode xyproto / algernon | Критический | 7.5 | 0,3 % | PoC | 26.05.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.