CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-56211

    🚨 CVE-2026-56211 A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation...

  • CVE-2026-15143

    🚨 CVE-2026-15143 A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply...

  • CVE-2026-15574

    🚨 CVE-2026-15574 A flaw was found in the vllm-orchestrator-gateway component. The system's production binary logs all incoming authorization...

  • CVE-2026-13717

    🚨 CVE-2026-13717 A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving...

  • CVE-2026-18618

    🚨 CVE-2026-18618 A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to known...

  • CVE-2026-18621

    🚨 CVE-2026-18621 A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by...

  • CVE-2026-18941

    🚨 CVE-2026-18941 A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is...

  • CVE-2026-18947

    🚨 CVE-2026-18947 A flaw was found in Feast. An authorization bypass vulnerability exists in the /materialize and /materialize-incremental...

  • CVE-2026-18949

    🚨 CVE-2026-18949 A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account...

  • CVE-2026-19654

    🚨 CVE-2026-19654 A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence...

  • CVE-2026-15218

    🚨 CVE-2026-15218 A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI. These ServiceAccounts are...

  • CVE-2026-73198

    🚨 CVE-2026-73198 A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the `/ipa/i18n_messages` endpoint...

  • CVE-2026-86320

    🚨 CVE-2026-86320 A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An...

  • CVE-2026-93567

    🚨 CVE-2026-93567 A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly uses the...

  • CVE-2026-93569

    🚨 CVE-2026-93569 A flaw was found in Netty. A remote unauthenticated attacker can exploit a vulnerability in Netty's HTTP/1 to HTTP/2 conversion...

  • CVE-2026-84286

    🚨 CVE-2026-84286 ExLlamaV3’s EXL3 loader uses an untrusted, model-supplied index to select a CUDA kernel without first verifying that the index is...

  • CVE-2026-109720

    🚨 CVE-2026-109720 JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5...

  • CVE-2026-109721

    🚨 CVE-2026-109721 Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR...

Статистика статей

Статьи
53,082
Просмотры
209,808
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху