СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2025-63800 The password change endpoint in Open Source Point of Sale 3.4.1 allows users to set their account pa n/a / n/a · opensourcepos / open_source_point_of_sale | Критический | 7.5 | 0,48 % | PoC | 18.11.2025 | |
| CVE-2025-63747 QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installation n/a / n/a · testmanagement / qatraq | Критический | 9.8 | 0,47 % | PoC | 17.11.2025 | |
| CVE-2025-68716 KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 enable the SSH service enabled by default on the LA n/a / n/a · kaysus / ks-wr3600_firmware | Высокий | 8.4 | 0,24 % | 08.01.2026 | ||
| CVE-2025-53963 An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. They run an SSH n/a / n/a · thermofisher / ion_torrent_onetouch_2_firmware | Критический | 9.8 | 0,49 % | 04.12.2025 | ||
| CVE-2026-41021 Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password... Eaton / easyE4 | Высокий | 7.5 | 0,18 % | 27.10.2026 | ||
| CVE-2026-41038 Weak Password Policy Vulnerability in Quantum Networks Router QN-I-470 Quantum Networks / Router QN-I-470 · qntmnet / qn-i-470_firmware | Высокий | 7.6 | 0,17 % | Патч | 21.04.2026 | |
| CVE-2026-33771 CTP OS: Configuring password requirements does not work which permits the use of weak passwords Juniper Networks / CTP OS · juniper / ctp_operating_system | Критический | 9.1 | 0,26 % | 10.04.2026 | ||
| CVE-2026-112193 Webkul Aureus ERP UserForm.php weak password Webkul / Aureus ERP | Высокий | 6.3 | 0,48 % | PoC | 19.10.2026 | |
| CVE-2026-85216 MISP LDAP and LinOTP Authentication Bypass via Empty or Invalid Credentials misp / misp | Критический | 9.5 | 0,87 % | Патч | 03.09.2026 | |
| CVE-2026-73778 Credential Manager Vulnerability Allows Unauthorized Administrative Access Hewlett Packard Enterprise (HPE) / AOS-CX | Высокий | 8.1 | 0,51 % | 01.09.2026 | ||
| CVE-2026-19293 SMP security request silabs.com / WiseConnect | Высокий | 8.8 | 0,2 % | 13.08.2026 | ||
| CVE-2026-12504 Loytec LINX firmware: Improper Authentication in PAM configuration Loytec / LIP-ME20xC · Loytec / L-INX | Высокий | 8.4 | 0,19 % | 24.07.2026 | ||
| CVE-2026-56577 HCL MyCloud affected by Weak Password Policy HCLSoftware / MyCloud | Низкий | 3.1 | 0,28 % | 21.07.2026 | ||
| CVE-2025-34058 Hikvision Streaming Media Management Server Default Credentials and Authenticated Arbitrary File Read Hangzhou Hikvision System Technology / Streaming Media Management Server | Критический | 8.7 | 0,85 % | PoC | 01.07.2025 | |
| CVE-2026-34203 Nautobot: Management of users via REST API does not apply configured password validators nautobot / nautobot · nautobot | Низкий | 2.7 | 0,26 % | Патч | 31.03.2026 | |
| CVE-2025-11200 MLflow Weak Password Requirements Authentication Bypass Vulnerability MLflow / MLflow · mlflow | Высокий | 8.1 | 1,44 % | 29.10.2025 | ||
| CVE-2025-28200 Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which includes n/a / n/a | Критический | 9.8 | 0,65 % | PoC | 09.05.2025 | |
| CVE-2024-42850 An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of n/a / n/a · silverpeas / silverpeas | Критический | 9.8 | 1,43 % | 16.08.2024 | ||
| CVE-2026-35097 Weak Password Requirements in KTM System e-BOK KTM System / e-BOK | Средний | 6.9 | 0,42 % | 30.06.2026 | ||
| CVE-2025-1474 Weak Password Requirements in mlflow/mlflow mlflow / mlflow/mlflow · mlflow | Низкий | 3.8 | 0,37 % | Патч | 20.03.2025 | |
| CVE-2026-11493 Tenda AC15 Samba smb.conf weak password Tenda / AC15 | Средний | 2.3 | 0,22 % | PoC | 08.06.2026 | |
| CVE-2026-9394 Besen BS20 EV Charging Station Bluetooth Low Energy weak password Besen / BS20 EV Charging Station | Низкий | 2.3 | 0,19 % | 24.05.2026 | ||
| CVE-2024-40684 IBM Operations Analytics - Log Analysis is affected by Weak Password Policy and Inadequate Account Lockout Mechanism IBM / Operations Analytics - Log Analysis | Средний | 5.9 | 0,36 % | Патч | 27.05.2026 | |
| CVE-2025-28389 Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a br n/a / n/a · openc3 | Критический | 9.8 | 0,6 % | 13.06.2025 | ||
| CVE-2026-6284 Horner Automation Cscape and XL4, XL7 PLC Weak password requirements Horner Automation / Cscape · Horner Automation / XL7 PLC | Критический | 9.3 | 0,45 % | 17.04.2026 | ||
| CVE-2025-9964 Weak Authentication for Root User Novakon / P series (P07, P10, P12, P15) | Высокий | 8.6 | 0,22 % | 23.09.2025 | ||
| CVE-2025-55269 HCL Aftermarket DPC is affected by Weak Password Policy vulnerability HCL / Aftermarket DPC | Средний | 4.2 | 0,25 % | 26.03.2026 | ||
| CVE-2026-27575 Vijkunja has Weak Password Policy Combined with Persistent Sessions After Password Change go-vikunja / vikunja | Критический | 9.1 | 0,47 % | 26.02.2026 | ||
| CVE-2026-1408 Beetel 777VR1 UART weak password Beetel / 777VR1 | Средний | 1.0 | 0,3 % | PoC | 26.01.2026 | |
| CVE-2026-25715 Jinan USR IOT Technology Limited (PUSR) USR-W610 Weak Password Requirements Jinan USR IOT Technology Limited (PUSR) / USR-W610 | Критический | 9.8 | 0,64 % | 20.02.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.