CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-72592

    🚨 CVE-2026-72592 An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to execute...

  • CVE-2026-72593

    🚨 CVE-2026-72593 A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the...

  • CVE-2026-72688

    🚨 CVE-2026-72688 A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to...

  • CVE-2026-72689

    🚨 CVE-2026-72689 A broken object-level authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote...

  • CVE-2026-72690

    🚨 CVE-2026-72690 An improper authorization vulnerability in Attendize through commit 9289acb allows an authenticated remote attacker to inject...

  • CVE-2026-72691

    🚨 CVE-2026-72691 An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to...

  • CVE-2026-72692

    🚨 CVE-2026-72692 A missing authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to...

  • CVE-2026-71959

    🚨 CVE-2026-71959 Bitwarden Server before 2026.7.2 does not verify that the caller is a member of the organization identified in a POST /collect...

  • CVE-2026-72751

    🚨 CVE-2026-72751 CTI-Transmute is affected by a stored cross-site scripting (XSS) vulnerability in the conversion graph used to visualise...

  • CVE-2026-72759

    🚨 CVE-2026-72759 In affected versions of MISP cti-transmute, the conversion-history details endpoint performs an incomplete authorization check...

  • CVE-2026-72760

    🚨 CVE-2026-72760 Affected versions of MISP cti-transmute disclose users' email addresses through the account following-list endpoint. When an...

  • CVE-2026-72718

    🚨 CVE-2026-72718 goose is general-purpose AI agent that runs on your machine. Prior to 1.44.0, the `goose review` command runs the system `git`...

  • CVE-2026-71576

    🚨 CVE-2026-71576 A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming...

  • CVE-2026-71577

    🚨 CVE-2026-71577 A flaw was found in multicluster-global-hub. During a ManagedClusterMigration, the system incorrectly grants all managed hubs...

  • CVE-2026-70622

    🚨 CVE-2026-70622 tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::append_dir_all() function that...

  • CVE-2026-71962

    🚨 CVE-2026-71962 Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST...

  • CVE-2026-71964

    🚨 CVE-2026-71964 CyberPanel 2.4.3, fixed in commit eca0c3c, contains an arbitrary file read vulnerability in the file manager component that...

  • CVE-2026-71967

    🚨 CVE-2026-71967 OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA...

Статистика статей

Статьи
53,087
Просмотры
261,983
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху