CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-122054

    🚨 CVE-2026-122054 Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C...

  • CVE-2026-102345

    🚨 CVE-2026-102345 Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the new Vue-based ticket interface can...

  • CVE-2026-107846

    🚨 CVE-2026-107846 bitcoinjs-lib is a JavaScript Bitcoin library for Node.js and browsers. From 2.3.0 until 5.2.1, 6.1.8, and 7.0.2, fastMerkleRoot...

  • CVE-2026-113780

    🚨 CVE-2026-113780 ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.5.5 until 5.5.6, 6.0.4, and 6.1.1, the esp_tee...

  • CVE-2026-113782

    🚨 CVE-2026-113782 ESP-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.2.0 until 5.2.8, 5.3.6, 5.4.5, 5.5.5, and 6.0.3...

  • CVE-2026-113783

    🚨 CVE-2026-113783 ESP-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.2.3 until 5.3.7, 5.4.5, 5.5.6, and 6.0.3, the...

  • CVE-2026-121928

    🚨 CVE-2026-121928 A vulnerability was identified in InfiniFlow RAGFlow up to 0.27.2. This issue affects some unknown processing of the file...

  • CVE-2026-121929

    🚨 CVE-2026-121929 A security flaw has been discovered in EmpireSoft EmpireCMS up to 8.0. Impacted is an unknown function of the file...

  • CVE-2026-121930

    🚨 CVE-2026-121930 A weakness has been identified in Linksys WRT54GL 4.30.18. The affected element is the function system of the file apply.cgi of...

  • CVE-2026-121931

    🚨 CVE-2026-121931 A security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impacted element is the function system of the file...

  • CVE-2026-121932

    🚨 CVE-2026-121932 A vulnerability was detected in Linksys E5350 1.0.00.037. This affects the function system of the file /wizard/apply.cgi...

  • CVE-2026-122124

    🚨 CVE-2026-122124 On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi credentials via the...

  • CVE-2026-122148

    🚨 CVE-2026-122148 In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An...

  • CVE-2026-63183

    🚨 CVE-2026-63183 OmniAuth is a flexible authentication system utilizing Rack middleware. Prior to 2.2.0, OmniAuth derives provider callback URLs...

  • CVE-2026-82029

    🚨 CVE-2026-82029 Invoice Ninja before 5.13.28 contains a broken access control vulnerability that allows authenticated vendor-portal contacts to...

  • CVE-2026-82033

    🚨 CVE-2026-82033 DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missing authentication vulnerability in its...

  • CVE-2026-97701

    🚨 CVE-2026-97701 Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, the authenticated POST /messages/render...

  • CVE-2026-112568

    🚨 CVE-2026-112568 A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS...

Статистика статей

Статьи
53,087
Просмотры
260,726
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху