СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-121446 svg-sanitizer 0.5.0 before 1.1.0 Incomplete url() Filtering in SVG Attributes darylldoyle / svg-sanitizer | Средний | 5.3 | — | 03.11.2026 | ||
| CVE-2026-6984 AstrBotDevs AstrBot Dashboard API t2i.py create_template special elements used in a template engine AstrBotDevs / AstrBot · astrbot | Высокий | 5.1 | 0,3 % | PoC | 25.04.2026 | |
| CVE-2026-5987 Sanluan PublicCMS FreeMarker Template AbstractFreemarkerView.java AbstractFreemarkerView.doRender special elements used in a template engine Sanluan / PublicCMS | Высокий | 5.1 | 0,24 % | PoC | 10.04.2026 | |
| CVE-2026-44232 dssrf: every IPv6 category bypasses is_url_safe HackingRepo / dssrf-js · dssrf | Критический | 8.7 | 0,41 % | PoC | 12.05.2026 | |
| CVE-2026-8740 Sanluan PublicCMS templateResult API TemplateResultDirective.java execute special elements used in a template engine Sanluan / PublicCMS | Высокий | 5.3 | 0,23 % | PoC | 17.05.2026 | |
| CVE-2026-108570 Furion .NET Framework View ViewEngine.cs RunCompile special elements in template engine Furion / .NET Framework | Высокий | 5.3 | 0,28 % | PoC | 11.10.2026 | |
| CVE-2026-103540 formtools.org Form Tools Client Settings Clients.class.php updateClientSettingsTab special elements in template engine formtools.org / Form Tools | Высокий | 5.3 | 0,24 % | PoC | 01.10.2026 | |
| CVE-2026-102771 Naichen ThinkCMF Email Template MailController.php templatePut special elements in template engine Naichen / ThinkCMF | Высокий | 5.1 | 0,24 % | PoC | 30.09.2026 | |
| CVE-2025-0716 AngularJS improper sanitization in SVG '' element Google / AngularJS · angular | Высокий | 4.8 | 0,41 % | PoC | 29.04.2025 | |
| CVE-2024-8373 AngularJS improper sanitization in '' element Google / AngularJS · angularjs / angular.js | Высокий | 4.8 | 0,64 % | PoC | 09.09.2024 | |
| CVE-2026-86206 Access control filter bypass allows unauthorised access to APIs N-able / N-central | Средний | 6.9 | 1,12 % | 05.09.2026 | ||
| CVE-2026-78140 Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine Dromara / UJCMS | Высокий | 5.1 | 0,41 % | PoC | 23.08.2026 | |
| CVE-2026-75979 xianrendzw EasyReport SQL Preview Endpoint DesignerController.java previewSqlText special elements in template engine xianrendzw / EasyReport | Высокий | 5.3 | 0,41 % | PoC | 19.08.2026 | |
| CVE-2026-19929 OpenBoxes Template Processing DocumentController.groovy buildZebraTemplate special elements in template engine n/a / OpenBoxes | Высокий | 5.3 | 0,5 % | PoCПатч | 16.08.2026 | |
| CVE-2026-11998 AngularJS XSS via SCE resource URL sanitization bypass Google / AngularJS · Red Hat / Red Hat Enterprise Linux 10 | Критический | 7.6 | 0,4 % | PoC | 24.06.2026 | |
| CVE-2026-18632 langgenius dify Jinja2 jinja2_transformer.py jinja2.Template special elements used in a template engine langgenius / dify | Высокий | 5.3 | 0,39 % | PoC | 03.08.2026 | |
| CVE-2026-29186 @backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution backstage / backstage · Red Hat / Red Hat Developer Hub 1.8 | Высокий | 7.7 | 0,87 % | 07.03.2026 | ||
| CVE-2026-47323 Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering Apache Software Foundation / Apache Camel · Red Hat / OpenShift Serverless | Критический | 9.8 | 19,56 % | 19.05.2026 | ||
| CVE-2026-5559 AntaresMugisho PyBlade AST Validation sandbox.py _is_safe_ast special elements used in a template engine AntaresMugisho / PyBlade · pyblade | Высокий | 5.3 | 0,32 % | PoC | 05.04.2026 | |
| CVE-2026-2969 datapizza-labs datapizza-ai Jinja2 Template prompt.py ChatPromptTemplate special elements used in a template engine datapizza-labs / datapizza-ai · datapizza-ai-core | Высокий | 5.1 | 0,76 % | PoC | 23.02.2026 | |
| CVE-2024-32162 CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion. n/a / n/a · cmseasy / cmseasy | Средний | 4.3 | 0,4 % | 17.04.2024 | ||
| CVE-2025-6518 PySpur-Dev pyspur Jinja2 Template single_llm_call.py SingleLLMCallNode special elements used in a template engine PySpur-Dev / pyspur · pyspur | Высокий | 5.3 | 0,4 % | PoC | 23.06.2025 | |
| CVE-2026-48208 Denial-of-Service via SVG Rendering in Ticket OTRS AG / OTRS · OTRS AG / ((OTRS)) Community Edition | Средний | 6.5 | 0,31 % | 01.06.2026 | ||
| CVE-2026-9498 Dromara lamp-cloud Message Template GroovyClassLoader.parseClass special elements used in a template engine Dromara / lamp-cloud | Высокий | 5.3 | 0,3 % | PoC | 25.05.2026 | |
| CVE-2026-7164 pf can overflow the stack parsing crafted SCTP packets FreeBSD / FreeBSD | Высокий | 7.5 | 0,43 % | 30.04.2026 | ||
| CVE-2026-3725 1024-lab/lab1024 SmartAdmin FreeMarker Template MailService.java freemarkerResolverContent special elements used in a template engine 1024-lab / SmartAdmin · lab1024 / SmartAdmin | Высокий | 5.3 | 0,45 % | PoC | 08.03.2026 | |
| CVE-2026-3714 OpenCart Incomplete Fix CVE-2024-36694 template.php save special elements used in a template engine n/a / OpenCart | Средний | 5.1 | 0,3 % | 08.03.2026 | ||
| CVE-2025-14731 CTCMS Content Management System Frontend/Template Management CT_Parser.php special elements used in a template engine CTCMS / Content Management System | Высокий | 5.3 | 0,45 % | PoC | 16.12.2025 | |
| CVE-2025-2336 AngularJS improper sanitization in SVG '' element with 'ngSanitize' Google / AngularJS · angular-sanitize | Высокий | 4.8 | 0,31 % | PoC | 04.06.2025 | |
| CVE-2025-59303 HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, HAProxy / HAProxy Kubernetes Ingress Controller | Средний | 6.4 | 0,27 % | 08.10.2025 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.