CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-70340

    🚨 CVE-2026-70340 Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

  • CVE-2026-65680

    🚨 CVE-2026-65680 Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate...

  • CVE-2026-69102

    🚨 CVE-2026-69102 MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT signing secret in application-maxkey.properties that...

  • CVE-2026-69113

    🚨 CVE-2026-69113 Cap v0.3.1 contains a broken access control vulnerability in the POST /api/video/comment endpoint that allows authenticated users...

  • CVE-2026-69115

    🚨 CVE-2026-69115 OpenIM Server v3.8.3 contains a missing authorization vulnerability that allows any authenticated user to access admin-only...

  • CVE-2026-69117

    🚨 CVE-2026-69117 NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API...

  • CVE-2026-69119

    🚨 CVE-2026-69119 Taubyte Tau v1.1.10 contains a missing authorization vulnerability in the services/auth HTTP service that allows any...

  • CVE-2026-45618

    🚨 CVE-2026-45618 LiquidJS is a Shopify/GitHub Pages compatible template engine. Prior to version 10.26.0, it is possible to execute arbitrary code...

  • CVE-2026-65655

    🚨 CVE-2026-65655 When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal...

  • CVE-2026-66145

    🚨 CVE-2026-66145 An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which...

  • CVE-2026-66146

    🚨 CVE-2026-66146 Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions that...

  • CVE-2026-70339

    🚨 CVE-2026-70339 Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker...

  • CVE-2026-55676

    🚨 CVE-2026-55676 Malcolm is a network traffic analysis tool suite. The file-upload component (FilePond PHP backend) accepts uploads at `POST...

  • CVE-2026-63134

    🚨 CVE-2026-63134 Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, `safe-extract.py` protects file extraction with...

  • CVE-2026-63177

    🚨 CVE-2026-63177 Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, role-based access control enforced in the Nginx...

  • CVE-2026-66147

    🚨 CVE-2026-66147 An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions...

  • CVE-2026-66148

    🚨 CVE-2026-66148 An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1044) and...

  • CVE-2026-66149

    🚨 CVE-2026-66149 Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an...

Статистика статей

Статьи
53,088
Просмотры
264,220
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху