СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-90872 Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server Progress Software / WS_FTP Server | Средний | 6.6 | — | 29.10.2026 | ||
| CVE-2026-116058 Alfresco Activiti JuelScriptEngine.java JuelScriptEngine.eval code injection Alfresco / Activiti | Средний | 5.3 | 0,38 % | 25.10.2026 | ||
| CVE-2026-61991 WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability Ajax Load More / AjaxLoadMore Cache | Критический | 10.0 | — | 29.10.2026 | ||
| CVE-2026-119028 oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non-String Enum Values oapi-codegen / oapi-codegen | Высокий | 8.7 | — | Патч | 29.10.2026 | |
| CVE-2026-119027 oapi-codegen 2.5.0 before 2.8.1 Code Injection via servers[].x-go-name Extension oapi-codegen / oapi-codegen | Высокий | 7.7 | — | Патч | 29.10.2026 | |
| CVE-2026-118905 nvm_ls lets an untrusted version string inject sed commands, executing arbitrary commands with GNU sed nvm-sh / nvm | Высокий | 7.1 | — | Патч | 29.10.2026 | |
| CVE-2026-18894 Langflow OSS is affected by multiple vulnerabilities IBM / Langflow OSS | Средний | 6.5 | — | Патч | 29.10.2026 | |
| CVE-2026-115970 Travisun Opptrix Import Endpoint import code injection Travisun / Opptrix | Высокий | 6.9 | 0,3 % | PoC | 24.10.2026 | |
| CVE-2026-110309 Langflow OSS is affected by multiple vulnerabilities IBM / Langflow OSS | Высокий | 8.8 | — | Патч | 29.10.2026 | |
| CVE-2026-110193 Langflow OSS is affected by multiple vulnerabilities IBM / Langflow OSS | Высокий | 8.8 | — | Патч | 29.10.2026 | |
| CVE-2026-110186 Langflow OSS is affected by multiple vulnerabilities IBM / Langflow OSS | Критический | 9.8 | — | Патч | 29.10.2026 | |
| CVE-2026-107329 Langflow OSS is affected by multiple vulnerabilities IBM / Langflow OSS | Критический | 9.9 | — | Патч | 29.10.2026 | |
| CVE-2026-107328 Langflow OSS is affected by multiple vulnerabilities IBM / Langflow OSS | Критический | 9.9 | — | Патч | 29.10.2026 | |
| CVE-2026-104339 Langflow OSS is affected by multiple vulnerabilities IBM / Langflow OSS | Критический | 9.8 | — | Патч | 29.10.2026 | |
| CVE-2026-104328 Langflow OSS is affected by multiple vulnerabilities IBM / Langflow OSS | Высокий | 8.8 | — | Патч | 29.10.2026 | |
| CVE-2026-101288 Langflow OSS is affected by multiple vulnerabilities IBM / Langflow OSS | Высокий | 8.8 | — | Патч | 29.10.2026 | |
| CVE-2026-61564 AVideo-Encoder: unauthenticated installer PHP code injection WWBN / AVideo-Encoder | Критический | 10.0 | — | 29.10.2026 | ||
| CVE-2026-118618 Ultralytics parse_model Code Injection Remote Code Execution Vulnerability Ultralytics / Ultralytics | Высокий | 7.8 | — | 28.10.2026 | ||
| CVE-2026-118616 Ultralytics parse_model Code Injection Remote Code Execution Vulnerability Ultralytics / Ultralytics | Высокий | 7.8 | — | 28.10.2026 | ||
| CVE-2026-118614 Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability Ultralytics / Ultralytics | Высокий | 7.8 | — | 28.10.2026 | ||
| CVE-2026-102870 ASP.NET Core Remote Code Execution Vulnerability Microsoft / .NET 10.0 installed on Linux · Microsoft / .NET 10.0 installed on Mac OS | Высокий | 8.8 | 0,91 % | Патч | 13.10.2026 | |
| CVE-2026-115301 Contact Form by Supsystic < 1.11.1 - Admin+ SSTI via Form Text Block Unknown / Contact Form by Supsystic | Критический | 7.2 | — | PoC | 29.10.2026 | |
| CVE-2026-96220 Windows Assigned Access Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1809 · Microsoft / Windows 10 Version 21H2 | Высокий | 7.8 | 0,3 % | Патч | 13.10.2026 | |
| CVE-2026-85359 Windows Performance Monitor Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.8 | 0,75 % | Патч | 13.10.2026 | |
| CVE-2026-83759 Windows Encrypting File System (EFS) Remote Code Execution Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 8.8 | 0,93 % | Патч | 13.10.2026 | |
| CVE-2026-102863 Microsoft Office SharePoint Elevation of Privilege Vulnerability Microsoft / Microsoft SharePoint Server Subscription Edition | Высокий | 8.8 | 1,02 % | Патч | 13.10.2026 | |
| CVE-2026-103572 Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability Microsoft / Microsoft Visual Studio 2022 version 17.14 · Microsoft / Microsoft Visual Studio 2026 version 18.10 | Высокий | 8.8 | 0,99 % | Патч | 13.10.2026 | |
| CVE-2026-118585 configuroweb inventariobasico Add Product addlist.php cross site scripting configuroweb / inventariobasico | Высокий | 5.1 | — | PoC | 29.10.2026 | |
| CVE-2026-57142 PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml MervinPraison / PraisonAI | Критический | 7.8 | 0,15 % | PoC | 23.10.2026 | |
| CVE-2026-115536 gedelumbung HospitalManagement Admin Routing routing_pages.php simpan cross site scripting gedelumbung / HospitalManagement | Высокий | 5.3 | 0,27 % | PoC | 23.10.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.