СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-16313 Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export Red Hat / Red Hat Enterprise Linux 10 · Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Support | Высокий | 7.6 | 0,35 % | 28.07.2026 | ||
| CVE-2026-121946 zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 CRLF Header Injection via Message Builders zbateson / mail-mime-parser | Высокий | 6.9 | — | PoCПатч | 04.11.2026 | |
| CVE-2026-119415 CakePHP through 5.4.3 MIME Header Injection via FormDataPart Content-Type cakephp / cakephp | Средний | 6.3 | 0,37 % | Патч | 30.10.2026 | |
| CVE-2026-57154 OPNsense: Configuration line injection via multiple GUI text fields opnsense / core | Высокий | 8.1 | 0,46 % | 03.11.2026 | ||
| CVE-2026-121432 AzuraCast before 0.24.0 CRLF Injection via Mount display_name in PLS Playlist AzuraCast / AzuraCast | Средний | 5.1 | 0,19 % | 03.11.2026 | ||
| CVE-2026-118371 LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line OpenBSD / LibreSSL | Средний | 6.3 | 0,14 % | Патч | 28.10.2026 | |
| CVE-2026-3633 Libsoup: libsoup: header and http request injection via crlf injection Red Hat / Red Hat Enterprise Linux 10 · Red Hat / Red Hat Enterprise Linux 6 | Низкий | 3.9 | 0,24 % | 17.03.2026 | ||
| CVE-2026-3634 Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header Red Hat / Red Hat Enterprise Linux 10 · Red Hat / Red Hat Enterprise Linux 6 | Средний | 3.9 | 0,2 % | PoC | 17.03.2026 | |
| CVE-2026-13575 HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI Продукт уточняется | Информационный | — | 0,93 % | Патч | 01.11.2026 | |
| CVE-2026-116237 Oray Pugongying X5 Pro Dnsmasq crlf injection Oray / Pugongying X5 Pro | Критический | 9.3 | 0,35 % | PoC | 26.10.2026 | |
| CVE-2026-116234 Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection Oray / Pugongying X5 Pro | Критический | 9.4 | 0,46 % | PoC | 26.10.2026 | |
| CVE-2026-116231 Oray Pugongying X5 Pro Ser2net crlf injection Oray / Pugongying X5 Pro | Критический | 9.4 | 0,44 % | PoC | 26.10.2026 | |
| CVE-2026-115785 Zimbra Collaboration Suite Data Source Test SMTP Command Injection via Unsanitized Email Address Zimbra / Zimbra Collaboration Suite · synacor / zimbra_collaboration_suite | Средний | 4.3 | 0,75 % | 23.10.2026 | ||
| CVE-2026-3234 Mod_proxy_cluster: mod_proxy_cluster: response body corruption via crlf injection Red Hat / Red Hat Enterprise Linux 10 · Red Hat / Red Hat Enterprise Linux 9 | Средний | 4.3 | 0,33 % | 12.03.2026 | ||
| CVE-2026-116233 Oray Pugongying X5 Pro Dnsmasq crlf injection Oray / Pugongying X5 Pro | Критический | 9.4 | 0,46 % | PoC | 26.10.2026 | |
| CVE-2026-119560 OPNsense core through 26.7.8 NTP Configuration Injection via GPS and PPS Fudge Fields opnsense / core | Средний | 6.0 | 0,34 % | 30.10.2026 | ||
| CVE-2026-119424 OPNsense before 26.7.8 Wireless WPA Configuration Line Injection via Identity opnsense / core | Средний | 6.1 | 0,42 % | Патч | 30.10.2026 | |
| CVE-2026-119417 CakePHP through 5.4.3 Email Header Injection via Bare CR/LF in SmtpTransport and MailTransport cakephp / cakephp | Средний | 6.3 | 0,45 % | Патч | 30.10.2026 | |
| CVE-2026-114720 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vuln Roundcube / Webmail · roundcube / webmail | Высокий | 7.1 | 0,79 % | Патч | 22.10.2026 | |
| CVE-2026-82854 Nodemailer before 8.0.4 SMTP Command Injection via envelope.size nodemailer / nodemailer · nodemailer | Критический | 9.3 | 1,98 % | 31.08.2026 | ||
| CVE-2026-115303 Contact Form by Supsystic < 1.11.1 - Unauthenticated CRLF / Email Header Injection via Reply-To Field Mapping Unknown / Contact Form by Supsystic | Средний | 3.7 | 0,22 % | PoC | 29.10.2026 | |
| CVE-2026-113715 virtualenv: Venv configuration readback can reinterpret path boundaries pypa / virtualenv · virtualenv | Средний | 2.0 | 0,24 % | PoC | 20.10.2026 | |
| CVE-2026-118372 LibreSSL ocspcheck through 4.4.0 CRLF Injection via AIA OCSP URL Path OpenBSD / LibreSSL | Средний | 6.3 | 0,15 % | Патч | 28.10.2026 | |
| CVE-2026-39983 FTP Command Injection via CRLF in basic-ftp patrickjuchli / basic-ftp · Red Hat / Red Hat Developer Hub 1.8 | Критический | 8.6 | 2,19 % | PoCПатч | 09.04.2026 | |
| CVE-2026-39958 oma-topic: name Field in Topic Manifests (topic.json) May Allow CRLF Injection AOSC-Dev / oma | Средний | 5.2 | 0,36 % | 09.04.2026 | ||
| CVE-2026-35517 Pi-hole FTL affected by Remote Code Execution (RCE) via dns.upstreams Newline Injection pi-hole / FTL · pi-hole / ftldns | Критический | 8.8 | 0,87 % | PoC | 07.04.2026 | |
| CVE-2026-6351 Openfind｜MailGates/MailAudit - CRLF Injection Openfind / MailGates · Openfind / MailAudit | Высокий | 8.7 | 0,59 % | 16.04.2026 | ||
| CVE-2026-35601 Vikunja has an iCalendar Property Injection via CRLF in CalDAV Task Output go-vikunja / vikunja · vikunja / vikunja | Высокий | 4.1 | 0,2 % | PoC | 10.04.2026 | |
| CVE-2026-35521 Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.hosts Newline Injection pi-hole / FTL · pi-hole / ftldns | Критический | 8.8 | 0,71 % | PoC | 07.04.2026 | |
| CVE-2026-35520 Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.leaseTime Newline Injection pi-hole / FTL · pi-hole / ftldns | Критический | 8.8 | 0,71 % | PoC | 07.04.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.