СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-116050 krupalshah Employee Recruitment System Registration registerform3.php sql injection krupalshah / Employee Recruitment System | Высокий | 6.9 | 0,25 % | PoC | 25.10.2026 | |
| CVE-2026-72750 n8n before 1.123.67 SQL Injection via executeQuery Operation n8n-io / n8n | Средний | 5.3 | 0,47 % | 11.08.2026 | ||
| CVE-2026-59257 n8n - SQL Injection in MySQL v1 executeQuery Operation via Expression Interpolation n8n / n8n | Средний | 5.3 | 0,57 % | 08.07.2026 | ||
| CVE-2026-115997 pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection pig-mesh / pig | Высокий | 5.3 | 0,23 % | PoCПатч | 25.10.2026 | |
| CVE-2026-108087 Apache Cocoon: SQL Injection Apache Software Foundation / Apache Cocoon | Высокий | 8.8 | 0,25 % | 20.10.2026 | ||
| CVE-2026-11587 Authenticated SQL Injection via PHP Array Key in ACL Management (Resources & Actions) — Centreon 26.03.0 Centreon / Centreon | Высокий | 7.2 | — | 29.10.2026 | ||
| CVE-2026-61996 WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability favethemes / MLS On The Fly | Высокий | 8.5 | — | 29.10.2026 | ||
| CVE-2026-55465 Goobi viewer: Solr injection via unvalidated region parameter in spatial search intranda / goobi-viewer-core | Средний | 5.3 | 0,26 % | 23.10.2026 | ||
| CVE-2026-55444 Goobi viewer: Solr query injection via the legacy RSS servlet q and filterQuery parameters intranda / goobi-viewer-core | Средний | 5.3 | 0,25 % | 23.10.2026 | ||
| CVE-2026-54455 OpenCATS: Authenticated SQL injection in activity DataGrid date filters opencats / OpenCATS | Высокий | 7.6 | — | 29.10.2026 | ||
| CVE-2026-46531 Cacti: Authenticated Stored 2nd-Order SQL Injection in automation_tree_rule_items.field (incomplete-fix variant of CVE-2024-31460 / CVE-2025-24368) Cacti / cacti | Высокий | 5.5 | 0,2 % | PoC | 23.10.2026 | |
| CVE-2026-114621 baserCMS: SQL injection in the admin panel and admin API baserproject / basercms | Высокий | 8.8 | 0,35 % | 23.10.2026 | ||
| CVE-2026-39736 WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability Crocoblock / JetEngine | Высокий | 8.5 | — | 29.10.2026 | ||
| CVE-2026-116170 SiYuan before v3.8.7 SQL Injection via History Search op and query siyuan-note / siyuan | Высокий | 6.9 | 0,36 % | PoC | 25.10.2026 | |
| CVE-2026-116062 SourceCodester Performance Indicator System save_profile.php sql injection SourceCodester / Performance Indicator System | Высокий | 6.9 | 0,27 % | PoC | 25.10.2026 | |
| CVE-2026-116055 SourceCodester Performance Indicator System deleteproduct.php sql injection SourceCodester / Performance Indicator System | Высокий | 5.3 | 0,32 % | PoC | 25.10.2026 | |
| CVE-2026-49142 OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[] openemr / openemr | Высокий | 8.7 | — | Патч | 29.10.2026 | |
| CVE-2026-61569 AVideo-Encoder: pre-authentication streamer-login SQL injection WWBN / AVideo-Encoder | Критический | 7.5 | — | PoC | 29.10.2026 | |
| CVE-2026-23705 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit Fortinet / FortiAnalyzer · Fortinet / FortiManager | Средний | 6.5 | 0,31 % | 13.10.2026 | ||
| CVE-2026-116048 krupalshah EmployeeRecruitmentSystem Registration registerform1.php mysql_query sql injection krupalshah / EmployeeRecruitmentSystem | Высокий | 6.9 | 0,25 % | PoC | 25.10.2026 | |
| CVE-2026-115999 mansi-k Restaurant_IMS lsmodal.php mysqli_connect sql injection mansi-k / Restaurant_IMS | Средний | 6.9 | 0,26 % | 25.10.2026 | ||
| CVE-2026-114358 SQL Injection Vulnerability in Radius Xenia M2M Platform Radius Synergies / Radius Xenia M2M Platform | Критический | 9.3 | — | 29.10.2026 | ||
| CVE-2026-88075 Configuration Manager Elevation of Privilege Vulnerability Microsoft / Microsoft Configuration Manager · Microsoft / Microsoft Configuration Manager 2509 | Высокий | 8.8 | 0,83 % | Патч | 13.10.2026 | |
| CVE-2026-89216 vTables < 0.3 - Unauthenticated SQL Injection via orderby Parameter Unknown / vTables | Критический | 8.6 | — | PoC | 29.10.2026 | |
| CVE-2026-70049 Microsoft Configuration Manager Elevation of Privilege Vulnerability Microsoft / Microsoft Configuration Manager · Microsoft / Microsoft Configuration Manager 2509 | Высокий | 8.0 | 2,66 % | Патч | 13.10.2026 | |
| CVE-2026-70266 Microsoft Office SharePoint Elevation of Privilege Vulnerability Microsoft / Microsoft SharePoint Server Subscription Edition | Высокий | 8.8 | 1,08 % | Патч | 13.10.2026 | |
| CVE-2026-93904 Social Web Suite <= 4.1.12 - Unauthenticated SQL Injection via 'exclude_posts' Parameter dejanmarkovic / Social Web Suite – Social Media Auto Post, Social Media Auto Publish | Высокий | 7.5 | — | 29.10.2026 | ||
| CVE-2026-93855 SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection via 'subscriberid' Parameter brewlabs / SendPress Newsletters | Высокий | 7.5 | — | 29.10.2026 | ||
| CVE-2026-118192 JoomSport <= 5.7.11 - Authenticated (Contributor+) SQL Injection via 'team_id' Shortcode Attribute beardev / JoomSport – for Sports: Team & League, Football, Hockey & more | Средний | 6.5 | — | 29.10.2026 | ||
| CVE-2026-115965 WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability BuddyPress / BuddyPress | Высокий | 8.5 | — | 29.10.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.