CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-7872

    🚨 CVE-2026-7872 IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files including the JWT signing key and...

  • CVE-2026-8056

    🚨 CVE-2026-8056 IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters at runtime via the API. A...

  • CVE-2026-8476

    🚨 CVE-2026-8476 IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism...

  • CVE-2026-49834

    🚨 CVE-2026-49834 sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with...

  • CVE-2026-49852

    🚨 CVE-2026-49852 joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior...

  • CVE-2026-4942

    🚨 CVE-2026-4942 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to send a specifically crafted message and downgrade the Transport...

  • CVE-2026-50151

    🚨 CVE-2026-50151 oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in...

  • CVE-2026-50162

    🚨 CVE-2026-50162 oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, resolveWritePath() in content/file/file.go uses a lexical...

  • CVE-2026-50163

    🚨 CVE-2026-50163 oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a...

  • CVE-2026-50197

    🚨 CVE-2026-50197 Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.10, zalando/skipper's OpenPolicyAgent...

  • CVE-2026-52199

    🚨 CVE-2026-52199 An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the sbin/adbd...

  • CVE-2026-54463

    🚨 CVE-2026-54463 websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, draft versions of the WebSocket protocol in...

  • CVE-2026-54464

    🚨 CVE-2026-54464 ### Impact If this library is used in tandem with the `permessage-deflate` extension, a WebSocket server or client can be made...

  • CVE-2026-54465

    🚨 CVE-2026-54465 websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, when websocket-driver is used to implement a...

  • CVE-2026-7667

    🚨 CVE-2026-7667 IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an...

  • CVE-2026-7754

    🚨 CVE-2026-7754 IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure default...

  • CVE-2026-7755

    🚨 CVE-2026-7755 IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP...

  • CVE-2026-7771

    🚨 CVE-2026-7771 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted statements...

Статистика статей

Статьи
53,091
Просмотры
267,014
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху