СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
14| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-114442 Apache HertzBeat: incomplete XPath expression validation in aliasFields Apache Software Foundation / Apache HertzBeat | Информационный | — | — | 03.11.2026 | ||
| CVE-2026-93434 Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets WatchGuard / Fireware OS | Высокий | 8.7 | 0,46 % | 27.10.2026 | ||
| CVE-2026-40699 BIG-IP Configuration utility vulnerability F5 / BIG-IP · f5 / big-ip_access_policy_manager | Высокий | 7.1 | 0,28 % | Патч | 13.05.2026 | |
| CVE-2026-53582 OPNsense: XPATH Injection can disclose any secret in config.xml opnsense / core | Высокий | 7.1 | 0,73 % | 15.10.2026 | ||
| CVE-2026-58395 OPNsense: XPath injection in MVC safe-delete opnsense / core | Высокий | 4.3 | 0,36 % | PoC | 15.10.2026 | |
| CVE-2026-11864 Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026. IBM / Cloud Pak for Business Automation | Средний | 6.5 | 0,37 % | Патч | 15.09.2026 | |
| CVE-2026-44962 Plesk contains an XPath injection vulnerability in the APS Application Catalog search functionality, WebPros / Plesk | Критический | 9.9 | 0,69 % | 29.05.2026 | ||
| CVE-2026-9390 XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup TIMLEGGE / XML::Sig | Критический | 9.1 | 0,51 % | Патч | 03.08.2026 | |
| CVE-2025-11844 XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function huggingface / huggingface/smolagents · smolagents | Высокий | 5.4 | 0,28 % | PoC | 22.10.2025 | |
| CVE-2026-24343 Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions Apache Software Foundation / Apache HertzBeat | Высокий | 8.8 | 0,8 % | 10.02.2026 | ||
| CVE-2025-20218 Cisco Secure Firepower Management Center Software XPATH Injection Vulnerability Cisco / Cisco Firepower Management Center | Средний | 4.9 | 0,45 % | 14.08.2025 | ||
| CVE-2024-39565 Junos OS: J-Web: An unauthenticated, network-based attacker can perform XPATH injection attack against a device. Juniper Networks, Inc. / Junos OS · juniper / junos_os | Высокий | 7.7 | 0,52 % | 11.07.2024 | ||
| CVE-2024-2648 Netentsec NS-ASG Application Security Gateway naccheck.php xpath injection Netentsec / NS-ASG Application Security Gateway | Высокий | 4.3 | 0,73 % | PoC | 20.03.2024 | |
| CVE-2024-2645 Netentsec NS-ASG Application Security Gateway resetpwd.php xpath injection Netentsec / NS-ASG Application Security Gateway | Высокий | 4.3 | 0,73 % | PoC | 20.03.2024 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.