СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-119736 Attendo Admin Android 3.0.13 Hard-coded MQTT Broker Credentials Petpooja / Munshi | Критический | 8.8 | — | PoC | 02.11.2026 | |
| CVE-2026-92450 Kiloview E3 NDI Encoder Use of Hard-coded Credentials Kiloview / E3 Firmware | Высокий | 8.7 | 0,38 % | 23.10.2026 | ||
| CVE-2026-81964 Windows Update Orchestrator Service Security Feature Bypass Vulnerability Microsoft / Windows 10 Version 21H2 · Microsoft / Windows 10 Version 22H2 | Средний | 5.5 | 0,34 % | Патч | 13.10.2026 | |
| CVE-2026-7003 WIT SynApps Runtime 1.4.11 Hardcoded OAuth Credentials Disclosure WIT / SynApps Runtime | Высокий | 6.9 | 0,29 % | PoC | 30.10.2026 | |
| CVE-2026-119662 Songloft 2.9.0 before 2.13.6 Hardcoded Admin Credentials in Embedded Backend songloft-org / songloft | Критический | 8.7 | 0,43 % | PoCПатч | 30.10.2026 | |
| CVE-2026-93290 Use of Hard-coded Credentials in Eufy Omni C20 Eufy / Omni C20 | Средний | 6.8 | 0,11 % | 24.09.2026 | ||
| CVE-2026-61729 SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection socfortress / CoPilot | Критический | 9.4 | 0,38 % | 30.10.2026 | ||
| CVE-2026-59229 Apache IoTDB: Legacy Pipe Privilege Escalation Apache Software Foundation / Apache IoTDB | Высокий | 8.8 | 0,45 % | 21.10.2026 | ||
| CVE-2025-34509 Sitecore XM and XP Hardcoded Credentials Sitecore / Experience Manager · Sitecore / Experience Platform | Критический | 7.5 | 55,87 % | PoC | 17.06.2025 | |
| CVE-2026-111419 Hardcoded API Token in Foxit Official Website Foxit Software Inc. / foxit.com | Высокий | 8.6 | 0,35 % | 29.10.2026 | ||
| CVE-2026-118601 Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability Alpine / iLX-F511 | Средний | 6.3 | 0,27 % | 28.10.2026 | ||
| CVE-2026-54631 Part-DB: Hardcoded APP_SECRET enables forged remember-me cookie Part-DB / Part-DB-server | Высокий | 6.3 | 0,19 % | PoC | 23.10.2026 | |
| CVE-2026-114119 Best Practice Software Bp Premier before 1.14.1.1128 Hardcoded SQL Server Administrative Credential Best Practice Software / Bp Premier | Критический | 9.3 | 0,43 % | Патч | 21.10.2026 | |
| CVE-2024-46508 yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not n/a / n/a · yeti-platform / yeti | Критический | 7.5 | 0,43 % | PoC | 08.05.2026 | |
| CVE-2026-114088 Trigger.dev before 4.5.4 Hardcoded Coordinator Secret Authentication Bypass via Socket.IO triggerdotdev / trigger.dev · trigger.dev | Критический | 8.3 | 0,4 % | PoC | 21.10.2026 | |
| CVE-2024-7952 DataEdgePlatform DataMosaix™ Private Cloud Rockwell Automation / DataEdgePlatform DataMosaix™ Private Cloud | Высокий | 8.7 | 0,54 % | 01.09.2026 | ||
| CVE-2024-32387 An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacke n/a / n/a | Средний | 5.7 | 0,3 % | 16.07.2026 | ||
| CVE-2026-18449 Supermicro BMC contains a SMCRAKP Fixed Key vulnerability SMCI / X12SPI | Высокий | 7.5 | 0,34 % | 27.10.2026 | ||
| CVE-2025-55449 AstrBot is vulnerable to RCE with hard-coded JWT signing keys n/a / n/a · astrbot | Критический | 9.8 | 0,28 % | Патч | 08.05.2026 | |
| CVE-2026-71960 Cudy WR3000 2.0 Hard-coded JWT Secret Authentication Bypass via MQTT Shenzhen Cudy Technology Co., Ltd. / WR3000 2.0 · Shenzhen Cudy Technology Co., Ltd. / P5 V1.1 | Критический | 9.3 | 0,53 % | 19.08.2026 | ||
| CVE-2026-35503 SenseLive X3050 Use of Hard-coded Credentials SenseLive / X3050 · senselive / x3500_firmware | Критический | 9.3 | 0,55 % | 24.04.2026 | ||
| CVE-2026-7579 AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials AstrBotDevs / AstrBot · astrbot | Высокий | 6.9 | 0,29 % | PoC | 01.05.2026 | |
| CVE-2026-6610 liangliangyy DjangoBlog Setting settings.py hard-coded credentials liangliangyy / DjangoBlog | Высокий | 6.3 | 0,27 % | PoC | 20.04.2026 | |
| CVE-2026-6578 liangliangyy DjangoBlog Setting settings.py hard-coded credentials liangliangyy / DjangoBlog | Высокий | 6.3 | 0,32 % | PoC | 20.04.2026 | |
| CVE-2026-6574 osuuu LightPicture API Upload Endpoint lp.sql hard-coded credentials osuuu / LightPicture | Высокий | 6.9 | 0,28 % | PoC | 19.04.2026 | |
| CVE-2026-5189 Nexus Repository 3 - Hardcoded Credential in Internal Database Component Sonatype / Nexus Repository · sonatype / nexus_repository_manager | Критический | 9.2 | 0,53 % | Патч | 15.04.2026 | |
| CVE-2026-4832 CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to s Schneider Electric / Easergy MiCOM P14x · Schneider Electric / Easergy MiCOM P24x | Средний | 6.9 | 0,27 % | 14.04.2026 | ||
| CVE-2026-25601 Credential Exposure vulnerability in MEPIS RM Metronik d.o.o. / MEPIS RM · metronik / mepis_rm | Средний | 6.7 | 0,16 % | 01.04.2026 | ||
| CVE-2026-7414 Hardcoded credentials in Yarbo robot firmware Yarbo / Firmware · yarbo / lawn_mower_firmware | Критический | 9.8 | 0,53 % | PoC | 07.05.2026 | |
| CVE-2026-8032 PicoTronica e-Clinic Healthcare System ECHS echs.js hard-coded credentials PicoTronica / e-Clinic Healthcare System ECHS | Высокий | 6.9 | 0,28 % | PoC | 06.05.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.