CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-9791

    🚨 CVE-2026-9791 A flaw was found in Keycloak. An authenticated user with existing organization membership can exploit this flaw by accessing...

  • CVE-2026-9792

    🚨 CVE-2026-9792 A flaw was found in Keycloak's Client Policies, specifically within the `org.keycloak.protocol.oidc` component. When certain...

  • CVE-2026-9793

    🚨 CVE-2026-9793 A flaw was found in Keycloak. When a JSON Web Encryption (JWE) encrypted request object is submitted, Keycloak may incorrectly...

  • CVE-2026-9795

    🚨 CVE-2026-9795 A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature. An administrator with limited client management...

  • CVE-2026-9796

    🚨 CVE-2026-9796 A flaw was found in Keycloak. An authenticated administrator with the `manage-clients` role can exploit a Time-of-check to...

  • CVE-2026-9798

    🚨 CVE-2026-9798 A flaw was found in Keycloak, an open-source identity and access management solution. When a user account is temporarily locked...

  • CVE-2026-9801

    🚨 CVE-2026-9801 A flaw was found in Keycloak. A remote attacker with high privileges, such as a realm administrator configuring a malicious...

  • CVE-2026-9802

    🚨 CVE-2026-9802 A flaw was found in Keycloak. When revokeRefreshToken=true is enabled and persistent session storage is in use, a server restart...

  • CVE-2026-9803

    🚨 CVE-2026-9803 A flaw was found in Keycloak's ClientRegistrationAuth component. A remote unauthenticated attacker can exploit this vulnerability...

  • CVE-2026-44604

    🚨 CVE-2026-44604 A command injection vulnerability was discovered in the `rpmuncompress` utility of RPM. When extracting certain archive formats...

  • CVE-2026-9806

    🚨 CVE-2026-9806 A stored cross-site scripting (XSS) vulnerability exists in the notification panel of CTI Transmute in versions prior to the...

  • CVE-2026-12318

    🚨 CVE-2026-12318 Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

  • CVE-2026-12319

    🚨 CVE-2026-12319 Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

  • CVE-2026-12320

    🚨 CVE-2026-12320 Information disclosure in the Password Manager component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

  • CVE-2026-12321

    🚨 CVE-2026-12321 JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

  • CVE-2026-12322

    🚨 CVE-2026-12322 Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

  • CVE-2026-12323

    🚨 CVE-2026-12323 Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

  • CVE-2026-12324

    🚨 CVE-2026-12324 Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 152, Firefox ESR...

Статистика статей

Статьи
53,101
Просмотры
291,400
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху