СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-62910 Microsoft Exchange Server Elevation of Privilege Vulnerability Microsoft / Microsoft Exchange Server 2016 Cumulative Update 23 · Microsoft / Microsoft Exchange Server 2019 Cumulative Update 14 | Высокий | 7.2 | 1 % | Патч | 11.08.2026 | |
| CVE-2026-114716 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulner Roundcube / Webmail · roundcube / webmail | Высокий | 8.5 | 0,44 % | Патч | 22.10.2026 | |
| CVE-2026-114717 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulner Roundcube / Webmail · roundcube / webmail | Средний | 5.8 | 0,45 % | Патч | 22.10.2026 | |
| CVE-2026-114725 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulner Roundcube / Webmail · roundcube / webmail | Средний | 5.0 | 0,33 % | Патч | 22.10.2026 | |
| CVE-2026-114726 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulner Roundcube / Webmail · roundcube / webmail | Средний | 5.8 | 0,4 % | Патч | 22.10.2026 | |
| CVE-2026-33603 Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS ch Open-Xchange GmbH / OX Dovecot Pro · dovecot / dovecot | Средний | 6.8 | 0,21 % | 12.05.2026 | ||
| CVE-2026-50218 Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT t Akamai / Guardicore Platform Agent | Высокий | 8.5 | 0,33 % | 14.10.2026 | ||
| CVE-2026-106583 In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to i OpenBSD / OpenSSH | Низкий | 2.5 | 0,15 % | 07.10.2026 | ||
| CVE-2026-107448 Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.6 Wizards of the Coast / Magic: The Gathering Arena | Средний | 3.4 | 0,2 % | PoC | 08.10.2026 | |
| CVE-2026-81521 Cross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go Driver MongoDB / GO Driver | Высокий | 7.1 | 0,24 % | 27.08.2026 | ||
| CVE-2026-105444 dotnet eShop Ordering API OrdersApi.cs GetOrderAsync resource injection dotnet / eShop | Средний | 5.3 | 0,24 % | 06.10.2026 | ||
| CVE-2026-100884 Krayin laravel-crm attachment-download Endpoint acl.php resource injection Krayin / laravel-crm | Высокий | 5.3 | 0,29 % | PoCПатч | 28.09.2026 | |
| CVE-2026-95847 Moquette client IDs can cause cross-session H2 durable-queue corruption moquette-io / moquette | Критический | 8.8 | 0,34 % | PoC | 23.09.2026 | |
| CVE-2026-94149 Omega Solution HRM OS Role Permission Retrieval Endpoint permission resource injection Omega Solution / HRM OS | Высокий | 5.3 | 0,38 % | PoC | 21.09.2026 | |
| CVE-2026-3855 Improper Control of Resource Identifiers ('Resource Injection') in GitLab GitLab / GitLab | Средний | 3.1 | 0,34 % | PoC | 16.09.2026 | |
| CVE-2026-81524 Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver MongoDB / C Driver | Средний | 5.3 | 0,27 % | 27.08.2026 | ||
| CVE-2026-15186 macrozheng mall Portal Endpoint create resource injection macrozheng / mall | Средний | 5.3 | 0,41 % | 09.07.2026 | ||
| CVE-2026-13493 AIDC-AI ComfyUI-Copilot Workflow Checkpoint Restore conversation_api.py resource injection AIDC-AI / ComfyUI-Copilot | Средний | 2.3 | 0,37 % | PoCПатч | 28.06.2026 | |
| CVE-2026-12207 medkey-org medkey HTTP REST API PatientController.php actionGetPatientById resource injection medkey-org / medkey | Высокий | 5.3 | 0,23 % | PoC | 15.06.2026 | |
| CVE-2026-10624 SourceCodester Human Resource Management Employee View detailview.php resource injection SourceCodester / Human Resource Management | Высокий | 5.3 | 0,24 % | PoC | 02.06.2026 | |
| CVE-2026-10299 code-projects Online Hospital Management System viewdoctortimings.php resource injection code-projects / Online Hospital Management System | Высокий | 5.1 | 0,27 % | PoC | 02.06.2026 | |
| CVE-2026-10168 OUSL-GROUP-BrinaryBrains School Student Management System Parents.php marks resource injection OUSL-GROUP-BrinaryBrains / School Student Management System | Высокий | 5.3 | 0,24 % | PoC | 31.05.2026 | |
| CVE-2026-9438 yashpokharna2555 StudentManagementSystem courseDel.php resource injection yashpokharna2555 / StudentManagementSystem | Высокий | 5.3 | 0,32 % | PoC | 25.05.2026 | |
| CVE-2026-7303 Xuxueli xxl-job Execution Log JobLogController.java logDetailCat resource injection Xuxueli / xxl-job | Высокий | 6.3 | 0,42 % | PoCПатч | 28.04.2026 | |
| CVE-2026-5414 Newgen OmniDocs WebApiRequestRedirection resource injection Newgen / OmniDocs | Высокий | 6.9 | 0,33 % | PoC | 02.04.2026 | |
| CVE-2026-5031 BichitroGan ISP Billing Software Endpoint users-view resource injection BichitroGan / ISP Billing Software | Высокий | 5.3 | 0,23 % | PoC | 29.03.2026 | |
| CVE-2026-3693 Shy2593666979 AgentChat User Endpoint user.py update_user_info resource injection Shy2593666979 / AgentChat | Высокий | 6.9 | 0,42 % | PoC | 08.03.2026 | |
| CVE-2025-43491 Poly Lens Desktop Application – Privilege Escalation HP, Inc. / Poly Lens | Высокий | 7.3 | 0,29 % | 09.09.2025 | ||
| CVE-2025-12919 EverShop Order Order.resolvers.js resource injection n/a / EverShop · @evershop/evershop | Высокий | 6.3 | 0,5 % | PoC | 09.11.2025 | |
| CVE-2025-12918 yungifez Skuul School Management System View Fee Invoice fee-invoices resource injection yungifez / Skuul School Management System | Средний | 2.3 | 0,41 % | PoC | 09.11.2025 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.