CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-15812

    🚨 CVE-2026-15812 A vulnerability was found in the internal Access Control List (ACL) subsystem of kronosnet (Version affected: <= 1.34). When the...

  • CVE-2026-12547

    🚨 CVE-2026-12547 SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority (host:port). When the proxy...

  • CVE-2026-18207

    🚨 CVE-2026-18207 A flaw was found in the client policy enforcement mechanism of Keycloak. The issue occurs when the system checks group membership...

  • CVE-2026-18203

    🚨 CVE-2026-18203 A flaw was found in the group policy evaluation logic of Keycloak, an identity and access management solution. When a group...

  • CVE-2026-18208

    🚨 CVE-2026-18208 A flaw was found in the OIDC token introspection endpoint of the keycloak-services component. Keycloak is an open-source identity...

  • CVE-2026-18217

    🚨 CVE-2026-18217 A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution. The...

  • CVE-2026-17614

    🚨 CVE-2026-17614 A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileRepository.getFile() and...

  • CVE-2026-19608

    🚨 CVE-2026-19608 A flaw was found in the group policy provider of Keycloak authorization services, which is used to manage fine-grained access...

  • CVE-2026-19611

    🚨 CVE-2026-19611 A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse...

  • CVE-2026-89755

    🚨 CVE-2026-89755 In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: clear stale mapping after freeing...

  • CVE-2026-89058

    🚨 CVE-2026-89058 A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin...

  • CVE-2026-93492

    🚨 CVE-2026-93492 A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS frames with a very...

  • CVE-2026-93566

    🚨 CVE-2026-93566 A flaw was found in Netty. A remote attacker could exploit this by sending a specially crafted HTTP request that includes control...

  • CVE-2026-93573

    🚨 CVE-2026-93573 A flaw was found in Netty's HTTP/1.1 decoder. This vulnerability allows a remote attacker to bypass `Transfer-Encoding` header...

  • CVE-2026-93579

    🚨 CVE-2026-93579 A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as...

  • CVE-2026-93562

    🚨 CVE-2026-93562 A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker...

  • CVE-2026-93574

    🚨 CVE-2026-93574 A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this vulnerability by sending a...

  • CVE-2026-93999

    🚨 CVE-2026-93999 A flaw was found in the OIDC protocol implementation of Keycloak, an open-source identity and access management solution. The...

Статистика статей

Статьи
53,084
Просмотры
231,620
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху