СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-102727 FTP Passive Data Connection Not Bound to the Authenticated Control Peer Eclipse Foundation / Eclipse ThreadX NetX Duo | Средний | 6.0 | 0,2 % | 29.09.2026 | ||
| CVE-2024-24974 The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed OpenVPN / OpenVPN 2 · openvpn / openvpn | Высокий | 7.5 | 9,76 % | 08.07.2024 | ||
| CVE-2026-70212 Windows Security Center Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.0 | 0,27 % | Патч | 13.10.2026 | |
| CVE-2026-85925 Azure Key Vault Client SDK Elevation of Privilege Vulnerability Microsoft / azure-keyvault-administration · Microsoft / azure-keyvault-certificates | Высокий | 8.2 | 0,53 % | Патч | 13.10.2026 | |
| CVE-2026-78501 Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability Microsoft / Microsoft 365 Copilot's Business Chat | Высокий | 8.6 | 0,54 % | Патч | 18.09.2026 | |
| CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability Microsoft / Azure SQL Managed Instance | Высокий | 8.7 | 0,65 % | Патч | 07.08.2026 | |
| CVE-2026-55655 Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions Red Hat / Red Hat Enterprise Linux 10 · Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Support | Средний | 6.1 | 0,12 % | 23.06.2026 | ||
| CVE-2026-10756 TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access... Hitachi Energy / TRO600 Series Firmware | Высокий | 7.7 | 0,18 % | 27.10.2026 | ||
| CVE-2026-34205 Home Assistant: Unauthenticated App (Add-on) Endpoints Exposed to Local Network via Host Network Mode home-assistant / Home Assistant Operating System · home-assistant / Home Assistant Supervisor | Критический | 9.7 | 0,27 % | 27.03.2026 | ||
| CVE-2026-22726 Route Services Firewall Bypass CloudFoundry Foundation / Routing release · CloudFoundry Foundation / CF Deployment | Средний | 5.0 | 0,2 % | 01.05.2026 | ||
| CVE-2026-110909 Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP reques Wheels / Wheels CLI | Средний | 5.0 | 0,13 % | 15.10.2026 | ||
| CVE-2026-102085 Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker Juniper Networks / Junos OS Evolved | Средний | 6.9 | 0,29 % | 14.10.2026 | ||
| CVE-2026-90461 OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when I OpenStack / Ironic | Средний | 6.3 | 0,36 % | 12.09.2026 | ||
| CVE-2026-86345 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result Red Hat / Red Hat Directory Server 11 · Red Hat / Red Hat Directory Server 12 | Критический | 9.0 | 0,38 % | 02.10.2026 | ||
| CVE-2026-92173 Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privil Meta Platforms, Inc / Meta Horizon OS | Критический | 9.1 | 0,29 % | 30.09.2026 | ||
| CVE-2026-92172 Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged P Meta Platforms, Inc / Meta Horizon OS | Высокий | 8.8 | 0,29 % | 30.09.2026 | ||
| CVE-2026-101891 WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access WatchGuard / WatchGuard AP | Критический | 9.3 | 0,31 % | 28.09.2026 | ||
| CVE-2026-82932 Missing Firewall Configuration in mH-DEVELOPER F&F Filipowski / mH-DEVELOPER | Средний | 5.3 | 0,17 % | 28.09.2026 | ||
| CVE-2026-91166 Warpgate: Web SSH stores a jump host's key against the target's address, so it validates as the target warp-tech / warpgate | Высокий | 5.7 | 0,22 % | PoC | 21.09.2026 | |
| CVE-2026-96454 Pake grants unrestricted IPC access to every HTTPS origin loaded in generated applications tw93 / Pake | Высокий | 8.2 | 0,48 % | 23.09.2026 | ||
| CVE-2026-81871 OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning open-telemetry / opentelemetry-go | Средний | 6.3 | 0,2 % | 16.09.2026 | ||
| CVE-2026-13608 OpenLDAP SASL authentication bypass curl / curl | Критический | 7.4 | 0,5 % | PoC | 06.09.2026 | |
| CVE-2026-87734 An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly OCaml / utcp | Критический | 7.5 | 0,51 % | PoC | 09.09.2026 | |
| CVE-2024-43571 Sudo for Windows Spoofing Vulnerability Microsoft / Windows 11 Version 24H2 | Средний | 5.6 | 0,62 % | Патч | 08.10.2024 | |
| CVE-2026-12539 Docker Sandboxes ICMP egress restriction bypass after daemon restart Docker / Docker Sandboxes | Средний | 5.1 | 0,14 % | 18.06.2026 | ||
| CVE-2026-12039 Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution Docker / Docker Sandboxes | Средний | 5.7 | 0,1 % | 18.06.2026 | ||
| CVE-2026-18655 Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt Injection AWS / amazon-mq-mcp-server | Высокий | 7.1 | 0,42 % | Патч | 03.08.2026 | |
| CVE-2026-23904 Apache Kyuubi: Unrestricted access via Kyuubi engine-ui proxy Apache Software Foundation / Apache Kyuubi | Высокий | 7.3 | 0,85 % | Патч | 29.07.2026 | |
| CVE-2026-63226 Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement restrict Ricoh Company / Ricoh printers and Multifunction Printers (MFPs) | Средний | 6.9 | 0,38 % | 23.07.2026 | ||
| CVE-2026-8920 Improper Restriction of Communication Channel to Intended Endpoints and External Control of File Nam ASUS / Aura Wallpaper Service | Высокий | 8.5 | 0,11 % | 15.07.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.