Статьи Support
🚨 CVE-2026-121509
A security flaw has been discovered in Headless CMS Plugin up to 2.0.4 on WordPress. This affects the function get_required_post_data of the file /wp-json/rae/v1/post of the component REST API. The manipulation of the argument post_id/post_slug results in information...
🚨 CVE-2026-55186
Silverstripe MFA provides multi-factor authentication for Silverstripe CMS. Prior to 6.0.0, the CMS 5 password reset flow can issue a logged-in session after a user changes a password but before the user's configured multi-factor authentication challenge is completed. An...
🚨 CVE-2026-61495
TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerability in the MTP device class helper mtp_container_get_string() in src/class/mtp/mtp.h that allows a malicious USB host to corrupt adjacent memory by supplying a crafted MTP string with an...
🚨 CVE-2026-82154
Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.
🚨 CVE-2026-82160
Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script...
🚨 CVE-2026-121531
A vulnerability has been found in Umami 3.3.x/3.4.0/3.4.1. This affects an unknown part of the file src/app/api/auth/login/route.ts of the component 2FA Policy Handler. The manipulation leads to use of single-factor authentication. It is possible to initiate the attack...
🚨 CVE-2022-29966
Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or cause a denial-of-service condition.
🚨 CVE-2022-30267
Emerson Ovation
was found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to push malicious firmware images, cause a denial-of-service condition, or achieve remote code execution.
🚨 CVE-2026-104608
A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). babeld held references into internal collections while calling into the SSH library, where a re-entrant callback could modify a collection and invalidate those...
🚨 CVE-2026-108324
Tanium addressed a denial of service vulnerability in Tanium Client.
🚨 CVE-2026-109836
The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be read or written.
🚨 CVE-2026-110288
A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete stored Slack and Microsoft Teams ChatOps configuration and provider credentials by inducing an authenticated Management Console operator's...
🚨 CVE-2026-116646
Tanium addressed an uncontrolled resource consumption vulnerability in Threat Response.
🚨 CVE-2026-116648
Tanium addressed an improper output sanitization vulnerability in Discover.
🚨 CVE-2026-116650
Tanium addressed an unauthorized code execution vulnerability in Threat Response.
🚨 CVE-2026-116651
Tanium addressed an unauthorized code execution vulnerability in Threat Response.
🚨 CVE-2026-116652
Tanium addressed a business logic error in Threat Response.
🚨 CVE-2026-116653
Tanium addressed an improper input validation vulnerability in Threat Response.
🚨 CVE-2026-116654
Tanium addressed an improper input validation vulnerability in Threat Response.
🚨 CVE-2026-116661
Tanium addressed an improper access controls vulnerability in Enforce.
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.