CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-66144

    🚨 CVE-2026-66144 Although remote policy references are not retrieved during policy normalization, if they are manually retrieved via the API it...

  • CVE-2026-7484

    🚨 CVE-2026-7484 External control of Assumed-Immutable web parameter vulnerability in ABIS Technology Ltd. Co. AVESİS allows Accessing...

  • CVE-2026-9765

    🚨 CVE-2026-9765 Note: The CVE and blog post don't exist because we determined this is actually a cloud-only issue. Access Controls are “Broken”...

  • CVE-2026-16799

    🚨 CVE-2026-16799 Improper access control in the automation tests and workflows features in Devolutions PowerShell Universal 2026.2.2 and earlier...

  • CVE-2026-16800

    🚨 CVE-2026-16800 Improper control of generation of code ('Code Injection') in the schedule feature in Devolutions PowerShell Universal 2026.2.2...

  • CVE-2026-16801

    🚨 CVE-2026-16801 Improper control of generation of code ('Code Injection') in the variables feature in Devolutions PowerShell Universal 2026.2.2...

  • CVE-2026-16802

    🚨 CVE-2026-16802 Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier...

  • CVE-2026-49326

    🚨 CVE-2026-49326 Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service...

  • CVE-2026-55729

    🚨 CVE-2026-55729 Exposure of Sensitive Information (CWE-200) in LWEB802 browser `localStorage` in Loytec LWEB-802 before 5.0.8 on all platforms...

  • CVE-2026-55730

    🚨 CVE-2026-55730 Reflected Cross-Site Scripting (CWE-79) in LWEB802 in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated...

  • CVE-2026-56163

    🚨 CVE-2026-56163 Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate...

  • CVE-2026-57106

    🚨 CVE-2026-57106 Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2026-58586

    🚨 CVE-2026-58586 Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp. Image::WebP does not link to the system...

  • CVE-2026-58630

    🚨 CVE-2026-58630 Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2026-66004

    🚨 CVE-2026-66004 BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows...

  • CVE-2026-66005

    🚨 CVE-2026-66005 Jan through 0.8.4, fixed in commit 3e1c1e7, contains a CORS misconfiguration vulnerability in its local API server that allows...

  • CVE-2026-66006

    🚨 CVE-2026-66006 lakeFS through 1.83.0, fixed in commit 71a45ee, contains an authentication bypass vulnerability in the /setup_comm_prefs endpoint...

  • CVE-2026-66007

    🚨 CVE-2026-66007 Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where...

Статистика статей

Статьи
53,087
Просмотры
258,922
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху