CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-72573

    🚨 CVE-2026-72573 An OS command injection vulnerability in 4xmen/pm2panel (all versions) allows an authenticated remote attacker to execute...

  • CVE-2026-72574

    🚨 CVE-2026-72574 A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthenticated remote attacker to control the...

  • CVE-2026-72575

    🚨 CVE-2026-72575 An improper authorization vulnerability in daptin through v0.12.34 allows unauthenticated remote attackers to read, create...

  • CVE-2026-72576

    🚨 CVE-2026-72576 A stored cross-site scripting (XSS) vulnerability in Bludit 4.0.0-beta allows a low-privileged authenticated user (Author role)...

  • CVE-2026-72577

    🚨 CVE-2026-72577 Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code...

  • CVE-2026-72578

    🚨 CVE-2026-72578 A cross-site request forgery (CSRF) vulnerability in FreePBX Framework 17.0 allows an unauthenticated remote attacker to perform...

  • CVE-2026-72579

    🚨 CVE-2026-72579 An OS command injection vulnerability in NASA HyperCP (main branch) allows a network-adjacent attacker who can intercept or spoof...

  • CVE-2026-72580

    🚨 CVE-2026-72580 An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary...

  • CVE-2026-72581

    🚨 CVE-2026-72581 A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to make...

  • CVE-2026-72582

    🚨 CVE-2026-72582 A NULL pointer dereference vulnerability in fastschema through v0.15.1 allows an unauthenticated remote attacker to crash the...

  • CVE-2026-72583

    🚨 CVE-2026-72583 A stored cross-site scripting (XSS) vulnerability in fastschema through v0.15.1 allows a low-privileged authenticated user to...

  • CVE-2026-72584

    🚨 CVE-2026-72584 A time-of-check/time-of-use (TOCTOU) race condition in fastschema through v0.15.1 allows an unauthenticated remote attacker to...

  • CVE-2026-72586

    🚨 CVE-2026-72586 A missing authentication vulnerability in frangoteam/FUXA through 1.3.3 allows an unauthenticated remote attacker to query all...

  • CVE-2026-72587

    🚨 CVE-2026-72587 A cache poisoning vulnerability in CoreBunch/Instatic through 0.0.14 allows an unauthenticated remote attacker to poison the...

  • CVE-2026-72588

    🚨 CVE-2026-72588 A user enumeration vulnerability in bluewave-labs/Checkmate through 2.1.0 allows an unauthenticated remote attacker to determine...

  • CVE-2026-72589

    🚨 CVE-2026-72589 An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to...

  • CVE-2026-72590

    🚨 CVE-2026-72590 An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to...

  • CVE-2026-72591

    🚨 CVE-2026-72591 A server-side request forgery (SSRF) vulnerability in gabehf/Koito through v0.3.2 allows an authenticated user to make the server...

Статистика статей

Статьи
53,087
Просмотры
261,983
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху