CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-35425

    🚨 CVE-2026-35425 Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.

  • CVE-2026-49159

    🚨 CVE-2026-49159 Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose...

  • CVE-2026-50517

    🚨 CVE-2026-50517 Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.

  • CVE-2026-54120

    🚨 CVE-2026-54120 Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.

  • CVE-2026-56160

    🚨 CVE-2026-56160 Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network.

  • CVE-2026-56165

    🚨 CVE-2026-56165 Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.

  • CVE-2026-56167

    🚨 CVE-2026-56167 Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.

  • CVE-2026-56191

    🚨 CVE-2026-56191 Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.

  • CVE-2026-58275

    🚨 CVE-2026-58275 Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2026-62825

    🚨 CVE-2026-62825 Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2026-11922

    🚨 CVE-2026-11922 A vulnerability in zenml-io/zenml versions 0.57.0 through 0.94.2 allows an attacker to bypass rate-limiting on the `POST...

  • CVE-2026-54422

    🚨 CVE-2026-54422 In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be...

  • CVE-2026-66138

    🚨 CVE-2026-66138 In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution...

  • CVE-2026-66139

    🚨 CVE-2026-66139 OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known.

  • CVE-2026-16519

    🚨 CVE-2026-16519 A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more...

  • CVE-2026-12702

    🚨 CVE-2026-12702 In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger...

  • CVE-2026-15704

    🚨 CVE-2026-15704 In Eclipse BaSyx Go Components versions up to and including 1.0.0, ABAC-enabled deployments are vulnerable to an authorization...

  • CVE-2026-24727

    🚨 CVE-2026-24727 An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate...

Статистика статей

Статьи
53,087
Просмотры
258,922
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху