Эксплуатируемые и новые серьёзные CVE: сентябрь 2026 г.

knowns through 0.33.0 Path Traversal via code.find MCP tool

• Обход пути

knowns-dev · knowns10 сент. 2026 г.

knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption

• Нарушение контроля доступа (IDOR)

knowns-dev · knowns10 сент. 2026 г.

Anchor CMS through 0.12.7 Privilege Escalation via Missing Authorization on Admin User-Management Endpoints

• Нарушение контроля доступа (IDOR)

anchorcms · anchor cms10 сент. 2026 г.

An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpoint

• RCE без входа

flowiseai · flowise10 сент. 2026 г.

Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary comma

• RCE без входа
• Инъекция команд

webpros · configserver security & firewall10 сент. 2026 г.

OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allo

• RCE без входа
• Инъекция команд

webpros · configserver security & firewall10 сент. 2026 г.

Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.

• Обход пути

webpros · plesk10 сент. 2026 г.

A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local privilege escalation to root

• Состояние гонки

webpros · plesk10 сент. 2026 г.

FileRun < 2026.3.0 OS Command Injection via PhotoProofSheet Handler

• RCE
• Инъекция команд

filerun · filerun10 сент. 2026 г.

FileRun < 2026.3.0 OS Command Injection via escapeshellcmd() No-Op Redefinition

• RCE
• Инъекция команд

filerun · filerun10 сент. 2026 г.

FileRun < 2026.3.0 Authenticated SQL Injection via Groups Add Action

• RCE
• SQL-инъекция

filerun · filerun10 сент. 2026 г.

FileRun < 2026.3.0 PHP Object Injection via Perms::getPerms()

• RCE
• Десериализация

filerun · filerun10 сент. 2026 г.

Integer overflow in tensor buffer validation in Deep Java Library

• Без аутентификации
• Ошибки памяти

amazon · deep java library10 сент. 2026 г.

rclone: RC per-server auth-proxy bypass

• Без аутентификации
• Нарушение контроля доступа (IDOR)

rclone · rclone10 сент. 2026 г.

rclone: S3 multipart declared-length memory exhaustion

• Без аутентификации
• Отказ в обслуживании

rclone · rclone10 сент. 2026 г.

Tesseract: ReadNormProtos stack buffer overflow

• Ошибки памяти

tesseract-ocr · tesseract ocr10 сент. 2026 г.

Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch

• Десериализация
• Ошибки памяти

tesseract-ocr · tesseract ocr10 сент. 2026 г.

Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch

• Десериализация
• Ошибки памяти

tesseract-ocr · tesseract ocr10 сент. 2026 г.

Capgo Authorization Bypass via Stale Channel Permission Overrides

• Без аутентификации
• Нарушение контроля доступа (IDOR)

cap-go · capgo.app10 сент. 2026 г.

Capgo AAL1 Session MFA Bypass via Direct RBAC Authorization

• Без аутентификации
• Обход аутентификации

cap-go · capgo.app10 сент. 2026 г.

Capgo API Key Manager Authentication Bypass via x-limited-key-id

• Обход аутентификации
• Нарушение контроля доступа (IDOR)

cap-go · capgo.app10 сент. 2026 г.

Capgo SSO Provider Authentication Bypass via PostgREST Direct Write

• Без аутентификации
• Обход аутентификации
• Нарушение контроля доступа (IDOR)

cap-go · capgo.app10 сент. 2026 г.

Traefik v3.7.0 Authentication Bypass via from-to-www-redirect

• Без аутентификации
• Обход аутентификации
• Нарушение контроля доступа (IDOR)

traefik · traefik10 сент. 2026 г.

Renovate before 44.11.3 Credential Exfiltration via Link Header

• Без аутентификации
• Открытый редирект

renovatebot · renovate10 сент. 2026 г.

Renovate before 44.11.3 Credential Exfiltration via Link Header

• Без аутентификации
• Открытый редирект

renovatebot · renovate10 сент. 2026 г.

Renovate before 44.11.2 Credential Exfiltration via Link Header

• Без аутентификации
• Открытый редирект

renovatebot · renovate10 сент. 2026 г.

Renovate before 44.14.4 TLS Private Key Log Sanitisation

• Утечка информации

renovatebot · renovate10 сент. 2026 г.

Renovate before 44.14.7 Command Injection via depName

• RCE
• Инъекция команд

renovatebot · renovate10 сент. 2026 г.

Renovate before 44.14.7 Command Injection via gradle-wrapper

• RCE
• Инъекция команд

renovatebot · renovate10 сент. 2026 г.

Renovate before 44.11.2 Credential Exfiltration via Link Header

• Без аутентификации
• Открытый редирект

renovatebot · renovate10 сент. 2026 г.

Renovate before 44.14.7 Command Injection via Mix organization

• RCE
• Инъекция команд

renovatebot · renovate10 сент. 2026 г.

Renovate before 44.14.7 Command Injection via distributionType

• RCE
• Инъекция команд

renovatebot · renovate10 сент. 2026 г.

OpenPanel through 2.3.0 SQL Injection via unvalidated profile filter column identifier

• SQL-инъекция

openpanel-dev · openpanel10 сент. 2026 г.

OpenPanel through 2.3.0 Read-Only Access Level Enforcement Bypass via Mutations

openpanel-dev · openpanel10 сент. 2026 г.

OpenPanel through 2.3.0 Unauthenticated Share Lookup Information Disclosure

• Без аутентификации
• Утечка информации

openpanel-dev · openpanel10 сент. 2026 г.

CP210x Driver Memory Corruption results in Arbitrary Code Execution

• RCE
• Ошибки памяти

silicon labs · silabser.sys driver10 сент. 2026 г.

An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/puma_http11/http11_parser.rl file

• RCE без входа

10 сент. 2026 г.

Tesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fields

• Ошибки памяти

tesseract-ocr · tesseract ocr10 сент. 2026 г.

Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization

tesseract-ocr · tesseract ocr10 сент. 2026 г.

Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddata

• Ошибки памяти

tesseract-ocr · tesseract ocr10 сент. 2026 г.

passport-saml-encrypted through 0.1.13 Authentication Bypass via Missing Signature Verification

• Без аутентификации
• Обход аутентификации
• Слабая криптография

krakenjs · passport-saml-encrypted10 сент. 2026 г.

passport-saml-encrypted through 0.1.13 XML Signature Wrapping via Assertion Prepending

• Без аутентификации
• Слабая криптография

krakenjs · passport-saml-encrypted10 сент. 2026 г.

zstd-jni 1.5.5-6 through 1.5.7-13 Out-of-Bounds Read via Negative Offset

• Без аутентификации
• Ошибки памяти

luben · zstd-jni10 сент. 2026 г.

@eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name

• Без аутентификации
• XSS

npm · @eigenpal/docx-editor-core10 сент. 2026 г.

Suricata lua/tls: null dereference in TlsGetCertInfo

• Без аутентификации
• Ошибки памяти
• Отказ в обслуживании

oisf · suricata10 сент. 2026 г.

Suricata http2: decompression bomb can cause denial of service in Suricata

• Без аутентификации
• Отказ в обслуживании

oisf · suricata10 сент. 2026 г.

Consul vulnerable to an authorization bypass in the catalog node-write path

• Нарушение контроля доступа (IDOR)

hashicorp · consul10 сент. 2026 г.

Consul-template vulnerable to an information disclosure issue in error handling

• Утечка информации

hashicorp · tooling10 сент. 2026 г.

Consul vulnerable to an authorization bypass in the Connect service mesh

hashicorp · consul10 сент. 2026 г.

Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java Driver

• Без аутентификации
• Ошибки памяти

mongodb · java driver10 сент. 2026 г.

Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent

• SSRF

aws · amazon ssm agent10 сент. 2026 г.

IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

• Без аутентификации
• Обход аутентификации
• Отказ в обслуживании

ibm · websphere application server10 сент. 2026 г.

WordPress Wise Chat plugin <= 3.4.2 - PHP Object Injection vulnerability

• Без аутентификации
• Десериализация

marcin · wise chat10 сент. 2026 г.

WordPress Return Refund and Exchange For WooCommerce plugin <= 4.6.4 - Broken Access Control vulnerability

• Без аутентификации
• Нарушение контроля доступа (IDOR)

wp swings · return refund and exchange for woocommerce10 сент. 2026 г.

Gvfs: gvfs-admin socket ownership race permits local root

• Локальное повышение привилегий
• Состояние гонки

gnome · gvfs10 сент. 2026 г.

isomorphic-git < 1.42.0 Prototype Pollution via getRemoteInfo

• Без аутентификации
• Prototype pollution

isomorphic-git · isomorphic-git10 сент. 2026 г.

OpenNMS missing authorization on /api/v2 PATCH endpoints allows unauthenticated configuration changes

• Без аутентификации
• Обход аутентификации
• Нарушение контроля доступа (IDOR)

the opennms group · horizon10 сент. 2026 г.

In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and pro

• Без аутентификации
• Слабая криптография

ocaml · jose10 сент. 2026 г.

The cstruct package before 6.3.0 for OCaml mishandles indexes.

• Без аутентификации

ocaml · cstruct10 сент. 2026 г.

A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated us

• Локальное повышение привилегий

lenovo · filez client10 сент. 2026 г.

A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the

lenovo · file manager application10 сент. 2026 г.

A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese marke

• RCE
• Инъекция команд

lenovo · tianxi ai agent pc application10 сент. 2026 г.

Suricata http1: quadratic Content-Disposition processing can lead to denial of service

• Без аутентификации
• Отказ в обслуживании

oisf · suricata10 сент. 2026 г.

An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrar

• RCE
• Обход аутентификации
• Локальное повышение привилегий

lenovo · software fix10 сент. 2026 г.

A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attack

• Без аутентификации
• Зашитые учётные данные

lenovo · health application10 сент. 2026 г.

A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insufficient validation o

• Ошибки памяти

10 сент. 2026 г.

An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 due to insufficient validation of file-controll

• Без аутентификации
• Ошибки памяти

10 сент. 2026 г.

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

• RCE без входа
• Нарушение контроля доступа (IDOR)

langflow · langflow10 сент. 2026 г.

OpenNMS SQL injection in shipped Asset Management JasperReports via the DATE_FORMAT parameter (ROLE_USER)

• RCE
• SQL-инъекция

the opennms group · meridian10 сент. 2026 г.

Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/templat

• RCE
• SSTI

forgejo · forgejo10 сент. 2026 г.

IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

• RCE
• Обход аутентификации
• Локальное повышение привилегий

ibm · websphere application server10 сент. 2026 г.

IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

ibm · websphere application server10 сент. 2026 г.

Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

• Без аутентификации

ibm · common licensing10 сент. 2026 г.

IBM webMethods Integration Server is vulnerable to an XML external entity injection (XXE) attack when processing XML data

• XXE

ibm · webmethods integration server10 сент. 2026 г.

FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scripting (XSS).

• XSS

10 сент. 2026 г.

Suricata http2: protocol-change type confusion can lead to denial of service

• Без аутентификации

oisf · suricata10 сент. 2026 г.

Suricata dnp3: unbounded reassembly can lead to resource exhaustion

• Без аутентификации
• Отказ в обслуживании

oisf · suricata10 сент. 2026 г.

Suricata nfs: unbounded stateful structures can lead to resource exhaustion

• Без аутентификации
• Отказ в обслуживании

oisf · suricata10 сент. 2026 г.

Suricata ldap: unbounded responses per transaction can lead to resource exhaustion

• Без аутентификации
• Отказ в обслуживании

oisf · suricata10 сент. 2026 г.

ikev2: unbounded client transform storage can lead to resource exhaustion

• Без аутентификации
• Отказ в обслуживании

oisf · suricata10 сент. 2026 г.

Suricata lua: excessive flow variable registration can bypass sandbox

• Без аутентификации

oisf · suricata10 сент. 2026 г.

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via

• Без аутентификации

10 сент. 2026 г.

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a den

• Без аутентификации
• Отказ в обслуживании

10 сент. 2026 г.

An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial

• Без аутентификации
• Отказ в обслуживании

10 сент. 2026 г.

An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of servic

• Без аутентификации
• Отказ в обслуживании

10 сент. 2026 г.

IBM App Connect Enterprise is vulnerable to privilege escalation and Denial of Service

• Нарушение контроля доступа (IDOR)

ibm · app connect enterprise10 сент. 2026 г.

Multiple vulnerabilities in IBM Aspera Enterprise Webapps

• Локальное повышение привилегий

ibm · aspera enterprise webapps10 сент. 2026 г.

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

• RCE

langflow · langflow10 сент. 2026 г.

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

• RCE
• Инъекция команд

langflow · langflow10 сент. 2026 г.

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

• RCE

langflow · langflow10 сент. 2026 г.

IBM ContextForge MCP Gateway is affected by use of default credentials

• Без аутентификации
• Зашитые учётные данные

ibm · contextforge10 сент. 2026 г.

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

• RCE
• Инъекция команд

langflow · langflow10 сент. 2026 г.

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

• RCE без входа
• Инъекция команд

langflow · langflow10 сент. 2026 г.

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

• RCE

langflow · langflow10 сент. 2026 г.

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

• Без аутентификации
• CSRF

ibm · datastage on cloud pak for data10 сент. 2026 г.

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

• Обход пути

ibm · datastage on cloud pak for data10 сент. 2026 г.

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

• Нарушение контроля доступа (IDOR)

ibm · datastage on cloud pak for data10 сент. 2026 г.

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

• RCE без входа

langflow · langflow10 сент. 2026 г.

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

• SSRF

ibm · datastage on cloud pak for data10 сент. 2026 г.

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

• Нарушение контроля доступа (IDOR)

ibm · datastage on cloud pak for data10 сент. 2026 г.