СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-118180 Matrix homeserver could redirect the chat session to a local file or network share Mozilla / Thunderbird | Высокий | 7.5 | 0,17 % | 27.10.2026 | ||
| CVE-2026-118177 Calendar discovery accepted local file and remote network share locations Mozilla / Thunderbird | Критический | 9.1 | 0,18 % | 27.10.2026 | ||
| CVE-2026-91428 Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Support Oracle Corporation / Siebel CRM End User · oracle / siebel_crm | Средний | 4.3 | 0,2 % | 21.10.2026 | ||
| CVE-2026-117553 Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover via Host Header Poisoning umbraco / Umbraco-CMS | Высокий | 7.7 | 0,5 % | Патч | 27.10.2026 | |
| CVE-2026-121373 Symfony: HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar (Incomplete Fix for CVE-2026-48761) sensiolabs / symfony | Средний | 5.3 | — | Патч | 04.11.2026 | |
| CVE-2026-120638 CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect Продукт уточняется | Информационный | — | — | Патч | 04.11.2026 | |
| CVE-2026-120636 CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built from REQUEST_URI in url and start_form Продукт уточняется | Информационный | — | — | Патч | 04.11.2026 | |
| CVE-2026-120633 CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in url, self_url, virtual_host and virtual_port Продукт уточняется | Информационный | — | — | Патч | 04.11.2026 | |
| CVE-2026-84389 A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 thro Fortinet / FortiSIEM | Низкий | 2.8 | 0,22 % | 08.09.2026 | ||
| CVE-2026-47026 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Open Oracle Corporation / PeopleSoft Enterprise PeopleTools · oracle / peoplesoft_enterprise_peopletools | Высокий | 7.4 | 0,37 % | 22.07.2026 | ||
| CVE-2026-47015 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Oracle Corporation / PeopleSoft Enterprise PeopleTools · oracle / peoplesoft_enterprise_peopletools | Высокий | 7.1 | 0,24 % | 22.07.2026 | ||
| CVE-2026-111754 Angular: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR) angular / angular · @angular/platform-server | Средний | 5.1 | — | 03.11.2026 | ||
| CVE-2026-120953 Atlas SQL JDBC Driver <=4.0.0: OIDC discovery endpoints not scheme-validated - attacker-controlled URI dispatched to OS protocol handler MongoDB / Atlas SQL JDBC Driver | Средний | 5.1 | — | 03.11.2026 | ||
| CVE-2026-120327 Open Redirection in extension "Mail" (mail) TYPO3 / Extension "Mail" | Средний | 5.3 | 0,44 % | 03.11.2026 | ||
| CVE-2025-3155 Yelp: arbitrary file read · Red Hat / Red Hat Enterprise Linux 8 | Критический | 7.4 | 13,12 % | PoC | 03.04.2025 | |
| CVE-2024-8883 Keycloak: vulnerable redirect uri validation results in open redirec · Red Hat / Red Hat Build of Keycloak | Средний | 6.1 | 2,11 % | 19.09.2024 | ||
| CVE-2026-40961 Apache Airflow: Open Redirect Bypass Vulnerability Apache Software Foundation / Apache Airflow · apache / airflow | Высокий | 7.2 | 0,65 % | Патч | 01.06.2026 | |
| CVE-2026-51954 An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary... n/a / n/a | Критический | 8.1 | 0,65 % | PoC | 22.10.2026 | |
| CVE-2026-118658 Echo: Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto labstack / echo · github.com/labstack/echo/v5 | Высокий | 4.7 | 0,19 % | PoCПатч | 28.10.2026 | |
| CVE-2026-118425 Keycloak-services: keycloak-services: redirect uri domain allowlist bypass via dns resolution to loopback Red Hat / Red Hat Build of Keycloak · Red Hat / Red Hat Single Sign-On 7 | Средний | 6.8 | 0,23 % | 29.10.2026 | ||
| CVE-2026-91296 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:... Oracle Corporation / JD Edwards EnterpriseOne Tools · oracle / jd_edwards_enterpriseone_tools | Высокий | 8.8 | 0,38 % | 21.10.2026 | ||
| CVE-2024-2372 Open Redirection via Unsanitized User Input in Multiple WSO2 Products Allows Phishing Attacks WSO2 / WSO2 Open Banking AM · WSO2 / WSO2 API Manager | Средний | 5.4 | 0,2 % | 02.11.2026 | ||
| CVE-2024-12141 Open Redirect via Callback URL Validation in WSO2 Products Allows Phishing Attacks WSO2 / WSO2 Identity Server | Средний | 4.3 | 0,2 % | 02.11.2026 | ||
| CVE-2026-41106 Microsoft 365 Copilot Elevation of Privilege Vulnerability Microsoft / Microsoft 365 Copilot | Критический | 9.3 | 0,72 % | Патч | 03.07.2026 | |
| CVE-2026-2376 Mirror-registry: quay: quay: server-side request forgery via open redirect vulnerability in web interface Red Hat / mirror registry for Red Hat OpenShift · Red Hat / mirror registry for Red Hat OpenShift 2 | Средний | 4.9 | 0,17 % | 12.03.2026 | ||
| CVE-2026-103576 Active Directory Federation Services (AD FS) Spoofing Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Средний | 6.5 | 0,86 % | Патч | 13.10.2026 | |
| CVE-2026-83646 Active Directory Federation Services (AD FS) Spoofing Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Средний | 5.4 | 0,37 % | Патч | 13.10.2026 | |
| CVE-2026-83500 Windows BitLocker Security Feature Bypass Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Средний | 6.1 | 0,45 % | Патч | 13.10.2026 | |
| CVE-2011-1594 Open redirect vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows... redhat / network_satellite · redhat / spacewalk | Средний | 6.5 | 1,46 % | Патч | 05.02.2014 | |
| CVE-2024-4989 Open Redirection via Callback URL in WSO2 API Manager Allows Phishing Attacks WSO2 / WSO2 API Manager | Средний | 5.4 | 0,17 % | Патч | 21.10.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.