Статьи Support
🚨 CVE-2026-118017
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159.
🚨 CVE-2026-118018
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159.
🚨 CVE-2026-118019
Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159.
🚨 CVE-2026-118020
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159.
🚨 CVE-2026-118021
Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159.
🚨 CVE-2026-118022
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159.
🚨 CVE-2026-118023
Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159.
🚨 CVE-2026-118024
Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159.
🚨 CVE-2026-118025
Other issue in the SVG component. This vulnerability was fixed in Firefox 159.
🚨 CVE-2026-118026
Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159.
🚨 CVE-2026-118027
Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.
🚨 CVE-2026-12887
In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a script step so the script executes outside of the parent directory.
🚨 CVE-2026-16307
Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects EdoWEB: before 780-g7.
🚨 CVE-2026-68866
PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Relative Path Traversal vulnerability in...
🚨 CVE-2026-90726
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high...
🚨 CVE-2026-90727
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Relative Path Traversal...
🚨 CVE-2026-94346
PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Path Traversal...
🚨 CVE-2026-94347
PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Process Control...
🚨 CVE-2026-105987
KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker can inject arbitrary JavaScript payload into a stickynote annotation. When any user opens the document, the viewer renders the annotation...
🚨 CVE-2026-117505
A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipulation results in resource consumption. The attack can be initiated remotely. Upgrading to version...
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.