СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
18| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-116246 pgAdmin 4: Server passwords are left in pgAdmin's process environment pgadmin.org / pgAdmin 4 | Высокий | 7.0 | 0,19 % | Патч | 30.10.2026 | |
| CVE-2026-40153 PraisonAIAgents Affected by Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool MervinPraison / PraisonAIAgents · praison / praisonaiagents | Критический | 7.4 | 0,27 % | PoC | 10.04.2026 | |
| CVE-2026-45370 python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection universal-tool-calling-protocol / python-utcp · utcp-cli | Критический | 7.7 | 0,22 % | PoC | 14.05.2026 | |
| CVE-2026-77938 Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance letta-ai / letta | Критический | 7.1 | 0,42 % | PoC | 20.10.2026 | |
| CVE-2026-108592 mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment SWE-agent / mini-swe-agent | Средний | 6.0 | 0,32 % | 10.10.2026 | ||
| CVE-2026-76227 Renovate 42.68.1 before 42.96.3 and 43.0.0 before 43.4.4 Environment Variable Exposure renovatebot / renovate · mend / renovate-ce | Средний | 6.8 | 0,15 % | 19.08.2026 | ||
| CVE-2024-2700 Quarkus-core: leak of local configuration properties into quarkus applications · Red Hat / HawtIO 4.0.0 for Red Hat build of Apache Camel 4 | Высокий | 7.0 | 0,31 % | 04.04.2024 | ||
| CVE-2024-11736 Org.keycloak:keycloak-quarkus-server: unrestricted admin use of system and environment variables · Red Hat / Red Hat build of Keycloak 26.0 | Средний | 4.9 | 0,76 % | 14.01.2025 | ||
| CVE-2026-72648 Cleartext Storage of Sensitive Information in an Environment Variable in Elastic Cloud on Kubernetes Leading to Information Disclosure Elastic / Eck Operator | Средний | 6.5 | 0,43 % | 13.08.2026 | ||
| CVE-2025-28381 A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as e n/a / n/a · openc3 | Высокий | 7.5 | 0,52 % | Патч | 13.06.2025 | |
| CVE-2024-12604 Improper Authentication in Tapandsign Technologies Tap and Sign App Tapandsign Technologies / Tap&Sign App | Средний | 6.5 | 0,2 % | 10.03.2025 | ||
| CVE-2026-49377 In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters JetBrains / TeamCity | Средний | 4.3 | 0,7 % | 29.05.2026 | ||
| CVE-2025-36105 IBM Planning Analytics Advanced Certified Containers is vulnerable to a sensitive information disclosure vulnerability IBM / Planning Analytics Advanced Certified Containers | Средний | 4.4 | 0,09 % | Патч | 10.03.2026 | |
| CVE-2025-27899 Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows IBM / DB2 Recovery Expert for LUW | Средний | 5.3 | 0,23 % | Патч | 17.02.2026 | |
| CVE-2024-4369 Cluster-image-registry-operator: exposes a secret via env variable in pod definition on azure · Red Hat / Red Hat OpenShift Container Platform 4.14 | Средний | 6.8 | 0,69 % | 01.05.2024 | ||
| CVE-2025-9162 Org.keycloak/keycloak-model-storage-service: variable injection into environment variables Keycloak / keycloak · Red Hat / Red Hat build of Keycloak 26.0 | Средний | 4.9 | 0,54 % | 21.08.2025 | ||
| CVE-2025-36017 IBM Controller Information Disclosure IBM / Controller | Средний | 6.5 | 0,27 % | Патч | 09.12.2025 | |
| CVE-2025-0985 IBM MQ information disclosure IBM / MQ | Средний | 5.5 | 0,26 % | 28.02.2025 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.