СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-107040 Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to... n/a / n/a | Критический | 9.1 | 0,17 % | PoC | 29.10.2026 | |
| CVE-2026-107048 An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101... n/a / n/a | Критический | 9.8 | 0,18 % | PoC | 29.10.2026 | |
| CVE-2026-107059 An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of... n/a / n/a | Критический | 7.5 | 0,2 % | PoC | 29.10.2026 | |
| CVE-2026-107043 Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily... n/a / n/a | Критический | 9.1 | 0,16 % | PoC | 29.10.2026 | |
| CVE-2026-107038 Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized... n/a / n/a | Критический | 9.1 | 0,17 % | PoC | 29.10.2026 | |
| CVE-2026-107033 Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode... n/a / n/a | Высокий | 6.5 | 0,16 % | PoC | 29.10.2026 | |
| CVE-2026-107027 Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized... n/a / n/a | Критический | 9.1 | 0,17 % | PoC | 29.10.2026 | |
| CVE-2026-107021 Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo... n/a / n/a | Критический | 9.1 | 0,17 % | PoC | 29.10.2026 | |
| CVE-2026-107057 An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a... n/a / n/a | Критический | 9.8 | 0,39 % | 29.10.2026 | ||
| CVE-2026-107051 Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows... n/a / n/a | Высокий | 7.5 | 0,25 % | 29.10.2026 | ||
| CVE-2026-107046 A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast... n/a / n/a | Средний | 5.3 | 0,28 % | 29.10.2026 | ||
| CVE-2026-107041 Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode... n/a / n/a | Высокий | 7.5 | 0,4 % | 29.10.2026 | ||
| CVE-2026-107036 Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized... n/a / n/a | Средний | 5.1 | 0,13 % | 29.10.2026 | ||
| CVE-2026-107030 Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows... n/a / n/a | Высокий | 7.5 | 0,34 % | 29.10.2026 | ||
| CVE-2026-107025 Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows... n/a / n/a | Высокий | 7.5 | 0,31 % | 29.10.2026 | ||
| CVE-2026-107014 Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized... n/a / n/a | Критический | 9.1 | 0,3 % | 29.10.2026 | ||
| CVE-2026-107019 Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2... n/a / n/a | Высокий | 8.8 | 0,32 % | 29.10.2026 | ||
| CVE-2026-20470 In Telephony, there is a possible information disclosure due to a missing permission check. This cou MediaTek, Inc. / MediaTek chipset | Средний | 6.2 | 0,17 % | 03.08.2026 | ||
| CVE-2026-107032 Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized... n/a / n/a | Критический | 9.1 | 0,5 % | PoC | 29.10.2026 | |
| CVE-2026-3291 Samsung Print Service Plugin – Potential Information Disclosure HP, Inc / Samsung Print Service Plugin · hp / samsung_print_service_plugin | Средний | 6.9 | 0,1 % | 07.05.2026 | ||
| CVE-2026-44279 An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 Fortinet / FortiTokenAndroid · fortinet / fortitoken_mobile | Средний | 5.5 | 0,1 % | 12.05.2026 | ||
| CVE-2026-113385 LeeDrOiD Labs Shortcutter 2 App ToggleGeneric.java Class.forName improper export of android application components LeeDrOiD Labs / Shortcutter 2 App | Высокий | 4.8 | 0,13 % | PoCПатч | 20.10.2026 | |
| CVE-2026-21127 Improper export of android application components in Samsung Account prior to version 15.7.01.1 allo Samsung Mobile / Samsung Account | Средний | 6.9 | 0,11 % | 12.10.2026 | ||
| CVE-2026-20516 In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could MediaTek, Inc. / MediaTek chipset | Средний | 5.5 | 0,13 % | 07.09.2026 | ||
| CVE-2026-68928 Acode: Exported TerminalService (bundled terminal plugin) lets any installed app execute arbitrary shell commands as Acode Acode-Foundation / Acode | Критический | 8.6 | 0,2 % | PoC | 18.09.2026 | |
| CVE-2026-12960 An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third ASUS / Router app | Средний | 6.0 | 0,16 % | 03.07.2026 | ||
| CVE-2026-86701 Android application "ManabiPocket for Parents" contains an improper access control vulnerability in NTT DOCOMO BUSINESS, Inc. / ManabiPocket for Parents | Низкий | 1.8 | 0,14 % | 15.09.2026 | ||
| CVE-2026-81301 Ekia File Manager 1.2.7 - Exported ContentProvider allows unauthorized file access Ekia / File Manager | Высокий | 8.5 | 0,16 % | 14.09.2026 | ||
| CVE-2026-18994 A potential improper authorization vulnerability was reported in the Lenovo File Manager Android App Lenovo / File Manager Application | Высокий | 8.4 | 0,14 % | 11.09.2026 | ||
| CVE-2026-45528 In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere ch Google / Android | Высокий | 7.3 | 0,09 % | 08.09.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.