CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-77709

    🚨 CVE-2026-77709 A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client...

  • CVE-2026-82308

    🚨 CVE-2026-82308 A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could...

  • CVE-2026-109683

    🚨 CVE-2026-109683 A newline injection vulnerability exists in the UPnP service of Archer BE805 v1 such that an adjacent attacker can supply...

  • CVE-2026-123974

    🚨 CVE-2026-123974 In all versions of PyTorch's TorchServe, a predictable extraction directory in /tmp lets a local user swap the model handler and...

  • CVE-2026-124025

    🚨 CVE-2026-124025 Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability in TicketController::ticket_print and the pdfThread...

  • CVE-2026-124026

    🚨 CVE-2026-124026 Bar Assistant 6.0.0-rc1 before 6.11.0 contains an incorrect authorization vulnerability in CocktailController::copy that allows...

  • CVE-2026-124027

    🚨 CVE-2026-124027 ChatWiki before 2.10.0 contains a missing authentication vulnerability in the GET /manage/getLibRawFileOnePage route that allows...

  • CVE-2026-124028

    🚨 CVE-2026-124028 mistral.rs before 0.9.5 contains a delimiter injection vulnerability in mistralrs-core that allows attackers to inject tool...

  • CVE-2026-124029

    🚨 CVE-2026-124029 Kopia through 0.23.1 contains a path traversal vulnerability in copyDirectoryContent that allows users with repository write...

  • CVE-2026-124030

    🚨 CVE-2026-124030 GPAC through 26.07.0 contains a type confusion vulnerability in gf_sg_command_apply() in src/scenegraph/commands.c that fails to...

  • CVE-2026-124031

    🚨 CVE-2026-124031 GPAC through 26.07.0 contains a type confusion vulnerability in drawable_get_aspect_2d_mpeg4() and TraverseShape() that casts a...

  • CVE-2026-124039

    🚨 CVE-2026-124039 Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports...

  • CVE-2026-124040

    🚨 CVE-2026-124040 CivetWeb through 1.16, when built with USE_HTTP2 and enable_http2 on, contains a use-after-free vulnerability in handle_http2()...

  • CVE-2026-33050

    🚨 CVE-2026-33050 GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to...

  • CVE-2026-46429

    🚨 CVE-2026-46429 GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to...

  • CVE-2026-55449

    🚨 CVE-2026-55449 CloudBeaver is a cloud database manager. Prior to 26.1.2, its resource-management project resolution accepts project identifiers...

  • CVE-2026-55649

    🚨 CVE-2026-55649 GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to...

  • CVE-2026-58490

    🚨 CVE-2026-58490 Tracecat is an open-source security automation platform for teams and AI agents. From version 0.37.0 until 1.0.0-beta.49, Docker...

Статистика статей

Статьи
53,082
Просмотры
226,877
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху