СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-84528 A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden... Apple / macOS · apple / macos | Низкий | 3.3 | 0,23 % | 26.10.2026 | ||
| CVE-2024-52940 AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a n/a / n/a | Высокий | 7.5 | 1,26 % | 18.11.2024 | ||
| CVE-2026-91163 Warpgate: Kubernetes listener discloses internal error text to an unauthenticated caller warp-tech / warpgate | Низкий | 3.7 | — | 04.11.2026 | ||
| CVE-2026-0637 Header Injection via Custom URL Configuration in Multiple WSO2 Products Allows Open Redirect and Log Forgery WSO2 / WSO2 API Manager · WSO2 / WSO2 API Control Plane | Средний | 5.4 | 0,16 % | 06.08.2026 | ||
| CVE-2026-121146 Information Disclosure Vulnerability in Tata Motors iRA and iRA.ev mobile application Tata Motors / Tata Motors iRA 2.0 · Tata Motors / Tata Motors iRA.ev | Средний | 6.8 | — | 04.11.2026 | ||
| CVE-2026-113898 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and... Apple / iOS and iPadOS · Apple / macOS | Низкий | 3.3 | 0,25 % | 26.10.2026 | ||
| CVE-2026-32996 This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. Veeam / Backup and Replication | Высокий | 7.3 | 0,17 % | 28.05.2026 | ||
| CVE-2026-73466 On affected platforms running Arista EOS, under certain circumstances plaintext user passwords Arista Networks / EOS | Средний | 6.0 | 0,13 % | 15.09.2026 | ||
| CVE-2025-4234 Cortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of Credentials Palo Alto Networks / Cortex XDR Microsoft 365 Defender Pack | Низкий | 2.4 | 0,14 % | 12.09.2025 | ||
| CVE-2026-112432 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27.2 and... Apple / iOS and iPadOS · Apple / macOS | Средний | 6.2 | 0,22 % | 26.10.2026 | ||
| CVE-2026-85260 Apache Camel: Camel-MLLP Protected Health Information Disclosure to Logs by Default Apache Software Foundation / Apache Camel · apache / camel | Средний | 5.5 | 0,18 % | Патч | 19.10.2026 | |
| CVE-2026-121023 LDAP Bind Password Exposure in AxxonNet ARP Agent Logs AxxonSoft / AxxonNet ARP Agent | Средний | 6.8 | 0,1 % | 03.11.2026 | ||
| CVE-2026-120673 Rust Driver 3.9.1 exports CSFLE plaintext in `db.query.text` before encrypting the command MongoDB / Rust Driver | Средний | 6.8 | — | 03.11.2026 | ||
| CVE-2026-63417 Logging Redactor: PII data in str/repr of non primitive objects was not being redacted armurox / loggingredactor | Высокий | 8.2 | — | 03.11.2026 | ||
| CVE-2026-116691 MLflow CrewAI autologging records LLM provider API keys in logged trace spans mlflow / mlflow · mlflow | Высокий | 6.5 | 0,21 % | PoCПатч | 27.10.2026 | |
| CVE-2026-68969 Apache Airflow: Bulk Variable and Connection endpoints record secret values in the audit log in cleartext Apache Software Foundation / Apache Airflow · apache / airflow | Средний | 6.5 | 0,36 % | Патч | 12.08.2026 | |
| CVE-2026-31987 Apache Airflow: JWT token appearing in logs Apache Software Foundation / Apache Airflow · apache / airflow | Высокий | 7.5 | 0,74 % | Патч | 16.04.2026 | |
| CVE-2025-68675 Apache Airflow: proxy credentials for various providers might leak in task logs Apache Software Foundation / Apache Airflow · apache / airflow | Высокий | 7.5 | 1,88 % | Патч | 16.01.2026 | |
| CVE-2025-66236 Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI Apache Software Foundation / Apache Airflow · apache / airflow | Высокий | 7.5 | 0,44 % | Патч | 13.04.2026 | |
| CVE-2026-118647 n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data n8n-io / n8n | Средний | 5.3 | 0,26 % | 28.10.2026 | ||
| CVE-2026-62347 Element Call exposes shared passwords in logs element-hq / element-call | Средний | 5.9 | 0,3 % | 31.10.2026 | ||
| CVE-2026-20592 In Modem, there is a possible information disclosure due to side channel information disclosure.... MediaTek, Inc. / MediaTek chipset | Средний | 4.1 | 0,09 % | 02.11.2026 | ||
| CVE-2026-18800 Information Disclosure via Event Publisher Logging in Multiple WSO2 Products Allows Retrieval of Sensitive Data WSO2 / WSO2 API Manager · WSO2 / WSO2 Traffic Manager | Средний | 4.4 | 0,16 % | 02.11.2026 | ||
| CVE-2026-50316 Windows Kernel Information Disclosure Vulnerability Microsoft / Windows 10 Version 21H2 · Microsoft / Windows 10 Version 22H2 | Средний | 5.5 | 0,48 % | Патч | 14.07.2026 | |
| CVE-2026-85857 Windows Kernel-Mode Drivers Information Disclosure Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Средний | 5.5 | 0,46 % | Патч | 13.10.2026 | |
| CVE-2026-68873 Windows Program Compatibility Assistant Service Information Disclosure Vulnerability Microsoft / Windows 11 version 23H2 · Microsoft / Windows 11 Version 23H2 | Средний | 5.5 | 0,48 % | Патч | 08.09.2026 | |
| CVE-2026-119117 Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java AWS / amazon-kinesis-producer | Высокий | 8.2 | 0,15 % | Патч | 30.10.2026 | |
| CVE-2026-59388 Cloud Controller exposes secrets in audit log Cloud Foundry Foundation / CAPI (Cloud Foundry Controller) · Cloud Foundry Foundation / cf-deployment | Средний | 6.5 | 0,3 % | 30.10.2026 | ||
| CVE-2026-90861 Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server Progress Software / WS_FTP Server | Средний | 6.6 | 0,31 % | 29.10.2026 | ||
| CVE-2026-54711 PGHoard: Password written to debug log Aiven-Open / pghoard · pghoard | Низкий | 2.4 | 0,16 % | 23.10.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.