CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-115718

    🚨 CVE-2026-115718 Frappe Builder versions 1.33.0 before 1.36.0 contain a missing authorization vulnerability in the improve_prompt endpoint that...

  • CVE-2026-116818

    🚨 CVE-2026-116818 OpenPanel before 3.0.0 contains an unauthenticated ClickHouse SQL injection vulnerability that allows remote attackers to inject...

  • CVE-2026-123271

    🚨 CVE-2026-123271 ChatCLI before v1.215.2 contains an improper validation vulnerability in the MCP OAuth login flow that uses server-supplied...

  • CVE-2026-123272

    🚨 CVE-2026-123272 Mark3labs mcp-go before v1.2.1 contains an improper validation vulnerability in OAuthHandler.fetchServerMetadata that allows...

  • CVE-2026-124331

    🚨 CVE-2026-124331 A vulnerability was identified in Jinher OA C6. This impacts an unknown function of the file...

  • CVE-2026-124424

    🚨 CVE-2026-124424 WWBN AVideo contains a path traversal vulnerability in plugin/AI/receiveAsync.json.php that allows holders of any valid AI token...

  • CVE-2026-124425

    🚨 CVE-2026-124425 Parse Server 8.6.109 before 8.6.116 and 9.10.6-alpha.1 before 9.10.7-alpha.2 contains an information disclosure vulnerability in...

  • CVE-2026-124426

    🚨 CVE-2026-124426 Craft CMS from 5.0.0 before 5.11.2 contains an authorization bypass vulnerability that allows unauthenticated attackers to read...

  • CVE-2026-124427

    🚨 CVE-2026-124427 Craft CMS from 5.0.0 before 5.11.2 contains an authorization bypass vulnerability that allows anonymous GraphQL clients to read...

  • CVE-2026-124428

    🚨 CVE-2026-124428 Craft CMS from 5.7.0 before 5.11.2 contains an arbitrary file read vulnerability that allows authenticated control panel users...

  • CVE-2026-124429

    🚨 CVE-2026-124429 Craft CMS from 5.0.0 before 5.11.2 contains a privilege escalation vulnerability that allows unauthenticated public registrants...

  • CVE-2026-124430

    🚨 CVE-2026-124430 Craft CMS from 5.10.0 before 5.11.2 contains a remote code execution vulnerability that allows non-administrator control panel...

  • CVE-2026-124431

    🚨 CVE-2026-124431 Craft CMS from 5.10.0 before 5.11.2 contains an authorization bypass vulnerability that allows authenticated low-privileged...

  • CVE-2026-124432

    🚨 CVE-2026-124432 phpMyFAQ 4.1.9 before 4.1.11 and 4.2.0 pre-releases before 4.2.0-beta.3 contain an account enumeration vulnerability in the...

  • CVE-2026-124433

    🚨 CVE-2026-124433 phpMyFAQ before 4.1.11 contains an insufficient authorization vulnerability that allows delegated administrators holding only...

  • CVE-2026-124434

    🚨 CVE-2026-124434 Grav Lightbox Gallery plugin 1.1.0 before 1.3.2 on Grav 2.x calls any medium method named in image, thumb or thumb_options...

  • CVE-2026-124435

    🚨 CVE-2026-124435 OpenRemote before 1.32.2 contains a stored cross-site scripting vulnerability that allows authenticated users with write:admin...

  • CVE-2026-124436

    🚨 CVE-2026-124436 OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access and modify...

Статистика статей

Статьи
53,082
Просмотры
218,839
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху