Эксплуатируемые и новые серьёзные CVE: сентябрь 2026 г.
7 964 записей · 32 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
Страница 34 из 80
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
31Наблюдать | CVE-2026-64712Эксплойта нет | This issue was addressed with improved checks.apple · macos · CWE-284 | Высокая7,8 | — | 0,1 % | 14 сент. 2026 г. |
28Наблюдать | CVE-2026-64736Эксплойта нет | An out-of-bounds access issue was addressed with improved bounds checking.apple · ipados · CWE-125 | Высокая7,1 | — | 0,1 % | 14 сент. 2026 г. |
29Наблюдать | CVE-2026-64752Эксплойта нет | A memory corruption issue was addressed by removing the vulnerable code.apple · ipados · CWE-787 | Высокая7,3 | — | 0,1 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-64761Эксплойта нет | A privacy issue was addressed with improved handling of user preferences.apple · ipados · CWE-200 | Высокая7,5 | — | 0,3 % | 14 сент. 2026 г. |
31Наблюдать | CVE-2026-64790Эксплойта нет | A path handling issue was addressed with improved validation.apple · macos · CWE-22 | Высокая7,8 | — | 0,1 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-65342Эксплойта нет | A permissions issue was addressed with improved validation.apple · macos · CWE-862 | Высокая7,5 | — | 0,3 % | 14 сент. 2026 г. |
31Наблюдать | CVE-2026-65344Эксплойта нет | An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 | Высокая7,8 | — | 0,1 % | 14 сент. 2026 г. |
32Наблюдать | CVE-2026-65354Эксплойта нет | A permissions issue was addressed with additional restrictions.apple · ipados · CWE-269 | Высокая8,2 | — | 0,1 % | 14 сент. 2026 г. |
31Наблюдать | CVE-2026-65357Эксплойта нет | The issue was addressed with improved memory handling.apple · ipados · CWE-120 | Высокая7,8 | — | 0,1 % | 14 сент. 2026 г. |
28Наблюдать | CVE-2026-65359Эксплойта нет | An out-of-bounds read was addressed with improved bounds checking.apple · ipados · CWE-125 | Высокая7,1 | — | 0,1 % | 14 сент. 2026 г. |
31Наблюдать | CVE-2026-65362Эксплойта нет | This issue was addressed with improved checks.apple · macos · CWE-284 | Высокая7,8 | — | 0,1 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-65364Эксплойта нет | An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 | Высокая7,5 | — | 0,7 % | 14 сент. 2026 г. |
35Наблюдать | CVE-2026-65374Есть PoC | A memory corruption issue was addressed with improved validation.apple · macos · CWE-787 | Высокая8,8 | — | 0,5 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-65375Эксплойта нет | The issue was addressed with improved authentication.apple · macos · CWE-287 | Высокая7,5 | — | 0,6 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-65378Эксплойта нет | An authorization issue was addressed with improved state management.apple · macos · CWE-863 | Высокая7,5 | — | 0,3 % | 14 сент. 2026 г. |
40В плане | CVE-2026-65381Эксплойта нет | A validation issue existed in the entitlement verification.apple · macos · CWE-862 | Критическая10,0 | — | 0,3 % | 14 сент. 2026 г. |
35Наблюдать | CVE-2026-65390Эксплойта нет | An integer overflow was addressed with improved input validation.apple · safari · CWE-190 | Высокая8,8 | — | 0,4 % | 14 сент. 2026 г. |
35Наблюдать | CVE-2026-65391Эксплойта нет | An out-of-bounds write issue was addressed with improved bounds checking.apple · safari · CWE-190 | Высокая8,8 | — | 0,4 % | 14 сент. 2026 г. |
31Наблюдать | CVE-2026-65398Эксплойта нет | An out-of-bounds access issue was addressed with improved bounds checking.apple · ipados · CWE-120 | Высокая7,8 | — | 0,1 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-65410Эксплойта нет | The issue was addressed with improved checks.apple · ipados · CWE-248 | Высокая7,5 | — | 0,4 % | 14 сент. 2026 г. |
39Наблюдать | CVE-2026-65414Эксплойта нет | An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 | Критическая9,8 | — | 1,2 % | 14 сент. 2026 г. |
32Наблюдать | CVE-2026-65415Эксплойта нет | A race condition was addressed with additional validation.apple · ipados · CWE-362 | Высокая8,1 | — | 0,3 % | 14 сент. 2026 г. |
37Наблюдать | CVE-2026-67399Эксплойта нет | Deserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attackers to execute arbitrary code.webpros · whmcs · CWE-502 | Критическая9,3 | — | 0,7 % | 14 сент. 2026 г. |
34Наблюдать | CVE-2026-68489Эксплойта нет | Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to executwebpros · plesk extension "ruby" · CWE-96 | Высокая8,7 | — | 0,6 % | 14 сент. 2026 г. |
28Наблюдать | CVE-2026-81901Эксплойта нет | Concrete CMS 9.2.0 to 9.5.2 is vulnerable to stored XSS due to missing authorization in the `PUT /pages/{cID}` endpointconcretecms · concrete cms · CWE-862 | Высокая7,2 | — | 0,3 % | 14 сент. 2026 г. |
28Наблюдать | CVE-2026-81902Эксплойта нет | Concrete CMS 9.0.0 to 9.5.2 is vulnerable to CSRF on Orphan Block Cleanupconcretecms · concrete cms · CWE-352 | Высокая7,1 | — | 0,2 % | 14 сент. 2026 г. |
28Наблюдать | CVE-2026-81903Эксплойта нет | Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Stored XSS via Page Container iconconcretecms · concrete cms · CWE-79 | Высокая7,0 | — | 0,3 % | 14 сент. 2026 г. |
31Наблюдать | CVE-2026-84497Эксплойта нет | A buffer overflow was addressed with improved size validation.apple · ipados · CWE-120 | Высокая7,8 | — | 0,1 % | 14 сент. 2026 г. |
31Наблюдать | CVE-2026-84505Эксплойта нет | An out-of-bounds write issue was addressed with improved bounds checking.apple · macos · CWE-787 | Высокая7,8 | — | 0,1 % | 14 сент. 2026 г. |
31Наблюдать | CVE-2026-84507Эксплойта нет | A race condition was addressed with improved state handling.apple · ipados · CWE-362 | Высокая7,8 | — | 0,1 % | 14 сент. 2026 г. |
31Наблюдать | CVE-2026-84511Эксплойта нет | An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 | Высокая7,8 | — | 0,1 % | 14 сент. 2026 г. |
35Наблюдать | CVE-2026-84512Эксплойта нет | A buffer overflow was addressed with improved bounds checking.apple · macos · CWE-120 | Высокая8,8 | — | 0,4 % | 14 сент. 2026 г. |
31Наблюдать | CVE-2026-84515Эксплойта нет | An out-of-bounds write issue was addressed with improved bounds checking.apple · macos · CWE-787 | Высокая7,8 | — | 0,1 % | 14 сент. 2026 г. |
32Наблюдать | CVE-2026-84516Эксплойта нет | An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 | Высокая8,1 | — | 0,4 % | 14 сент. 2026 г. |
39Наблюдать | CVE-2026-84520Есть PoC | A buffer overflow was addressed with improved size validation.apple · macos · CWE-120 | Критическая9,8 | — | 0,4 % | 14 сент. 2026 г. |
32Наблюдать | CVE-2026-84535Эксплойта нет | An authorization issue was addressed with improved state management.apple · macos · CWE-284 | Высокая8,2 | — | 0,1 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-84543Есть PoC | An out-of-bounds access issue was addressed with improved bounds checking.apple · macos · CWE-125 | Высокая7,5 | — | 0,4 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-84544Эксплойта нет | An integer overflow was addressed with improved input validation.apple · macos · CWE-190 | Высокая7,5 | — | 0,5 % | 14 сент. 2026 г. |
33Наблюдать | CVE-2026-84546Эксплойта нет | An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 | Высокая8,4 | — | 0,1 % | 14 сент. 2026 г. |
28Наблюдать | CVE-2026-84548Эксплойта нет | An integer overflow was addressed with improved input validation.apple · macos · CWE-190 | Высокая7,1 | — | 0,1 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-84549Эксплойта нет | An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 | Высокая7,5 | — | 0,5 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-84553Эксплойта нет | A resource exhaustion issue was addressed with improved input validation.apple · macos · CWE-400 | Высокая7,5 | — | 0,6 % | 14 сент. 2026 г. |
39Наблюдать | CVE-2026-84561Эксплойта нет | A double free issue was addressed with improved memory management.apple · ipados · CWE-415 | Критическая9,8 | — | 0,6 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-84563Эксплойта нет | A logic issue was addressed with improved checks.apple · macos · CWE-843 | Высокая7,5 | — | 0,4 % | 14 сент. 2026 г. |
28Наблюдать | CVE-2026-84565Эксплойта нет | An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 | Высокая7,1 | — | 0,1 % | 14 сент. 2026 г. |
31Наблюдать | CVE-2026-84566Эксплойта нет | The issue was addressed with improved memory handling.apple · ipados · CWE-119 | Высокая7,8 | — | 0,1 % | 14 сент. 2026 г. |
31Наблюдать | CVE-2026-84568Есть PoC | A path traversal issue was addressed with improved path validation.apple · macos · CWE-22 | Высокая7,8 | — | 0,1 % | 14 сент. 2026 г. |
28Наблюдать | CVE-2026-84572Эксплойта нет | An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 | Высокая7,1 | — | 0,1 % | 14 сент. 2026 г. |
31Наблюдать | CVE-2026-84575Эксплойта нет | An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 | Высокая7,8 | — | 0,1 % | 14 сент. 2026 г. |
32Наблюдать | CVE-2026-84577Эксплойта нет | An access issue was addressed with additional sandbox restrictions.apple · macos · CWE-120 | Высокая8,2 | — | 0,1 % | 14 сент. 2026 г. |
35Наблюдать | CVE-2026-84578Эксплойта нет | A logic issue was addressed with improved checks.apple · macos · CWE-693 | Высокая8,8 | — | 0,1 % | 14 сент. 2026 г. |
33Наблюдать | CVE-2026-84580Эксплойта нет | The issue was addressed with improved checks.apple · macos · CWE-862 | Высокая8,4 | — | 0,1 % | 14 сент. 2026 г. |
33Наблюдать | CVE-2026-84581Эксплойта нет | A buffer overflow was addressed with improved bounds checking.apple · macos · CWE-120 | Высокая8,4 | — | 0,1 % | 14 сент. 2026 г. |
33Наблюдать | CVE-2026-84584Эксплойта нет | This issue was addressed with improved handling of symlinks.apple · macos · CWE-59 | Высокая8,4 | — | 0,1 % | 14 сент. 2026 г. |
22Наблюдать | CVE-2026-84589Есть PoC | A permissions issue was addressed with additional restrictions.apple · macos · CWE-863 | Средняя5,5 | — | 0,1 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-84598Эксплойта нет | A path traversal issue was addressed with improved path validation.apple · ipados · CWE-22 | Высокая7,5 | — | 0,4 % | 14 сент. 2026 г. |
21Наблюдать | CVE-2026-84600Есть PoC | An authorization issue was addressed with improved state management.apple · ipados · CWE-285 | Средняя5,4 | — | 0,2 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-84606Эксплойта нет | A privacy issue was addressed with improved handling of identifiers.apple · ipados · CWE-287 | Высокая7,5 | — | 0,4 % | 14 сент. 2026 г. |
31Наблюдать | CVE-2026-84607Эксплойта нет | A race condition was addressed with improved state management.apple · ipados · CWE-362 | Высокая7,8 | — | 0,1 % | 14 сент. 2026 г. |
39Наблюдать | CVE-2026-84609Эксплойта нет | A permissions issue was addressed with improved path validation.apple · ipados · CWE-120 | Критическая9,8 | — | 0,6 % | 14 сент. 2026 г. |
29Наблюдать | CVE-2026-84611Эксплойта нет | An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 | Высокая7,3 | — | 0,1 % | 14 сент. 2026 г. |
22Наблюдать | CVE-2026-84616Есть PoC | A type confusion issue was addressed with improved memory handling.apple · ipados · CWE-441 | Средняя5,5 | — | 0,1 % | 14 сент. 2026 г. |
29Наблюдать | CVE-2026-84620Эксплойта нет | An integer overflow was addressed with improved input validation.apple · ipados · CWE-190 | Высокая7,3 | — | 0,1 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-84623Эксплойта нет | An authorization issue was addressed with improved state management.apple · ipados · CWE-287 | Высокая7,5 | — | 0,3 % | 14 сент. 2026 г. |
36Наблюдать | CVE-2026-84625Эксплойта нет | A permissions issue was addressed with additional sandbox restrictions.apple · ipados · CWE-200 | Критическая9,1 | — | 0,4 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-84629Эксплойта нет | This issue was addressed with additional entitlement checks.apple · ipados · CWE-862 | Высокая7,5 | — | 0,4 % | 14 сент. 2026 г. |
31Наблюдать | CVE-2026-84631Эксплойта нет | This issue was addressed with additional entitlement checks.apple · macos · CWE-280 | Высокая7,8 | — | 0,1 % | 14 сент. 2026 г. |
29Наблюдать | CVE-2026-84632Эксплойта нет | The issue was addressed with improved memory handling.apple · ipados · CWE-120 | Высокая7,3 | — | 0,1 % | 14 сент. 2026 г. |
22Наблюдать | CVE-2026-84636Есть PoC | An authorization issue was addressed with improved state management.apple · ipados · CWE-285 | Средняя5,5 | — | 0,2 % | 14 сент. 2026 г. |
36Наблюдать | CVE-2026-86881Есть PoC | A certificate validation issue was addressed with improved certificate validation.apple · ipados · CWE-295 | Критическая9,1 | — | 0,3 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-86894Эксплойта нет | A logic issue was addressed with improved checks.apple · macos · CWE-693 | Высокая7,5 | — | 0,3 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-86895Эксплойта нет | An information disclosure issue was addressed with improved state management.apple · ipados · CWE-200 | Высокая7,5 | — | 0,4 % | 14 сент. 2026 г. |
28Наблюдать | CVE-2026-86901Эксплойта нет | An out-of-bounds write issue was addressed with improved bounds checking.apple · macos · CWE-787 | Высокая7,1 | — | 0,1 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-86904Эксплойта нет | A privacy issue was addressed with improved state management.apple · ipados · CWE-359 | Высокая7,5 | — | 0,4 % | 14 сент. 2026 г. |
31Наблюдать | CVE-2026-86917Эксплойта нет | A permissions issue was addressed with additional restrictions.apple · macos · CWE-280 | Высокая7,8 | — | 0,1 % | 14 сент. 2026 г. |
32Наблюдать | CVE-2026-90896Эксплойта нет | Missing authentication in Ecommerce Template checkout session endpoint allows unauthenticated disclosure of buyer PIImarcoscamara01 · ecommerce template · CWE-306 | Высокая8,2 | — | 0,7 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-54155Эксплойта нет | node-opcua: Missing nonce verification in UserNameIdentityToken authenticationnode-opcua · node-opcua · CWE-347 | Высокая7,7 | — | 0,4 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-54156Эксплойта нет | node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoSnode-opcua · node-opcua · CWE-770 | Высокая7,5 | — | 0,7 % | 14 сент. 2026 г. |
33Наблюдать | CVE-2026-55451Эксплойта нет | gettext-converter: Prototype pollution in js2i18next() via crafted translation keyslocize · gettext-converter · CWE-1321 | Высокая8,3 | — | 0,5 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-57579Эксплойта нет | Alchemy: Unauthenticated nested page API leaks restricted & unpublished contentalchemycms · alchemy_cms · CWE-862 | Высокая7,5 | — | 0,6 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-59960Эксплойта нет | Argos JavaScript: CI Branch Name OS Command Injection in @argos-ci/coreargos-ci · argos-javascript · CWE-78 | Высокая7,5 | — | 0,6 % | 14 сент. 2026 г. |
35Наблюдать | CVE-2026-61701Эксплойта нет | Laravel MagicLink: Insecure Deserialization of MagicLink Actions Leads to Remote Code Executioncesargb · laravel-magiclink · CWE-502 | Высокая8,8 | — | 0,7 % | 14 сент. 2026 г. |
28Наблюдать | CVE-2026-12756Эксплойта нет | Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026ibm · business automation workflow containers and traditional · CWE-611 | Высокая7,1 | — | 0,4 % | 14 сент. 2026 г. |
34Наблюдать | CVE-2026-91144Эксплойта нет | ZFile through 5.0.5 Share Entry Filter Bypass via Download Endpointzfile-dev · zfile · CWE-639 | Высокая8,7 | — | 0,5 % | 14 сент. 2026 г. |
28Наблюдать | CVE-2026-91145Эксплойта нет | Activiti through 7.1.0.M6 Expression Injection via Mail Taskactiviti · activiti · CWE-917 | Высокая7,1 | — | 0,4 % | 14 сент. 2026 г. |
33Наблюдать | CVE-2026-34151Есть PoC | XWiki Platform: Resource path traversal via /skin/ action endpoint in Jetty 12+xwiki · xwiki-platform · CWE-24 | Высокая8,2 | — | 2,4 % | 14 сент. 2026 г. |
34Наблюдать | CVE-2026-49250Эксплойта нет | Conform: parseSubmission vulnerable to CPU exhaustion when parsing many unique form fieldsedmundhung · conform · CWE-407 | Высокая8,7 | — | 0,5 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-50270Эксплойта нет | dd-trace-java: Improper parsing of W3C baggage headers may lead to DoSdatadog · dd-trace-java · CWE-770 | Высокая7,5 | — | 0,7 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-53659Эксплойта нет | http4k: Unbounded gzip decompression in `ServerFilters.GZip` / `RequestFilters.GunZip` allowed memory-exhaustion DoShttp4k · http4k · CWE-409 | Высокая7,5 | — | 0,6 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-53752Эксплойта нет | docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Serviceplutext · docx4j · CWE-674 | Высокая7,5 | — | 0,6 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-54087Эксплойта нет | EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageFieldeasycorp · easyadminbundle · CWE-79 | Высокая7,6 | — | 0,4 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-54175Эксплойта нет | backpack/crud: Unverified password change in MyAccountController via mass assignmentlaravel-backpack · crud · CWE-620 | Высокая7,6 | — | 0,5 % | 14 сент. 2026 г. |
32Наблюдать | CVE-2026-54178Эксплойта нет | backpack/crud: Arbitrary file deletion via attacker-controlled clear_<attr>[] in HasUploadFields::uploadMultipleFilesToDisklaravel-backpack · crud · CWE-22 | Высокая8,1 | — | 0,5 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-54180Эксплойта нет | backpack/crud: CRUD panel query scopes are not enforced on Update, Delete, and Reorder (cross-tenant IDOR)laravel-backpack · crud · CWE-639 | Высокая7,6 | — | 0,4 % | 14 сент. 2026 г. |
32Наблюдать | CVE-2026-54182Эксплойта нет | backpack/crud: OS command injection in Stats::makeCurlRequest via attacker-controlled Host header (pre-auth)laravel-backpack · crud · CWE-20 | Высокая8,1 | — | 0,7 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-54567Эксплойта нет | Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)jugmac00 · flask-reuploaded · CWE-178 | Высокая7,5 | — | 0,6 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-55091Эксплойта нет | flat-to-nested: Prototype pollution in flat-to-nested convert() via __proto__ parent/id keyjoaonuno · flat-to-nested-js · CWE-915 | Высокая7,5 | — | 0,4 % | 14 сент. 2026 г. |
30Наблюдать | CVE-2026-55253Эксплойта нет | LangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposurelangchain-ai · langchain-mongodb · CWE-943 | Высокая7,7 | — | 0,5 % | 14 сент. 2026 г. |
32Наблюдать | CVE-2026-57577Эксплойта нет | DotVVM: ReDOS in routingriganti · dotvvm · CWE-1333 | Высокая8,2 | — | 0,5 % | 14 сент. 2026 г. |
36Наблюдать | CVE-2026-57578Эксплойта нет | DotVVM: Missing authorization in AuthorizeActionFilterriganti · dotvvm · CWE-862 | Критическая9,2 | — | 0,6 % | 14 сент. 2026 г. |
- CVE-2026-6471231Наблюдать
This issue was addressed with improved checks.
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-6473628Наблюдать
An out-of-bounds access issue was addressed with improved bounds checking.
ВысокаяCVSS 7,1Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-6475229Наблюдать
A memory corruption issue was addressed by removing the vulnerable code.
ВысокаяCVSS 7,3Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-6476130Наблюдать
A privacy issue was addressed with improved handling of user preferences.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-6479031Наблюдать
A path handling issue was addressed with improved validation.
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-6534230Наблюдать
A permissions issue was addressed with improved validation.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-6534431Наблюдать
An out-of-bounds write issue was addressed with improved bounds checking.
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-6535432Наблюдать
A permissions issue was addressed with additional restrictions.
ВысокаяCVSS 8,2Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-6535731Наблюдать
The issue was addressed with improved memory handling.
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-6535928Наблюдать
An out-of-bounds read was addressed with improved bounds checking.
ВысокаяCVSS 7,1Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-6536231Наблюдать
This issue was addressed with improved checks.
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-6536430Наблюдать
An out-of-bounds read was addressed with improved bounds checking.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-6537435Наблюдать
A memory corruption issue was addressed with improved validation.
ВысокаяCVSS 8,8Есть PoCEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-6537530Наблюдать
The issue was addressed with improved authentication.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-6537830Наблюдать
An authorization issue was addressed with improved state management.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-6538140В плане
A validation issue existed in the entitlement verification.
КритическаяCVSS 10,0Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-6539035Наблюдать
An integer overflow was addressed with improved input validation.
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %apple · safari14 сент. 2026 г.
- CVE-2026-6539135Наблюдать
An out-of-bounds write issue was addressed with improved bounds checking.
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %apple · safari14 сент. 2026 г.
- CVE-2026-6539831Наблюдать
An out-of-bounds access issue was addressed with improved bounds checking.
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-6541030Наблюдать
The issue was addressed with improved checks.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-6541439Наблюдать
An out-of-bounds write issue was addressed with improved bounds checking.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %apple · ipados14 сент. 2026 г.
- CVE-2026-6541532Наблюдать
A race condition was addressed with additional validation.
ВысокаяCVSS 8,1Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-6739937Наблюдать
Deserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attackers to execute arbitrary code.
КритическаяCVSS 9,3Эксплойта нетEPSS 0 %webpros · whmcs14 сент. 2026 г.
- CVE-2026-6848934Наблюдать
Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execut
ВысокаяCVSS 8,7Эксплойта нетEPSS 0 %webpros · plesk extension "ruby"14 сент. 2026 г.
- CVE-2026-8190128Наблюдать
Concrete CMS 9.2.0 to 9.5.2 is vulnerable to stored XSS due to missing authorization in the `PUT /pages/{cID}` endpoint
ВысокаяCVSS 7,2Эксплойта нетEPSS 0 %concretecms · concrete cms14 сент. 2026 г.
- CVE-2026-8190228Наблюдать
Concrete CMS 9.0.0 to 9.5.2 is vulnerable to CSRF on Orphan Block Cleanup
ВысокаяCVSS 7,1Эксплойта нетEPSS 0 %concretecms · concrete cms14 сент. 2026 г.
- CVE-2026-8190328Наблюдать
Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Stored XSS via Page Container icon
ВысокаяCVSS 7,0Эксплойта нетEPSS 0 %concretecms · concrete cms14 сент. 2026 г.
- CVE-2026-8449731Наблюдать
A buffer overflow was addressed with improved size validation.
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8450531Наблюдать
An out-of-bounds write issue was addressed with improved bounds checking.
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8450731Наблюдать
A race condition was addressed with improved state handling.
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8451131Наблюдать
An out-of-bounds write issue was addressed with improved bounds checking.
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8451235Наблюдать
A buffer overflow was addressed with improved bounds checking.
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8451531Наблюдать
An out-of-bounds write issue was addressed with improved bounds checking.
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8451632Наблюдать
An out-of-bounds read was addressed with improved bounds checking.
ВысокаяCVSS 8,1Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8452039Наблюдать
A buffer overflow was addressed with improved size validation.
КритическаяCVSS 9,8Есть PoCEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8453532Наблюдать
An authorization issue was addressed with improved state management.
ВысокаяCVSS 8,2Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8454330Наблюдать
An out-of-bounds access issue was addressed with improved bounds checking.
ВысокаяCVSS 7,5Есть PoCEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8454430Наблюдать
An integer overflow was addressed with improved input validation.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8454633Наблюдать
An out-of-bounds write issue was addressed with improved bounds checking.
ВысокаяCVSS 8,4Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8454828Наблюдать
An integer overflow was addressed with improved input validation.
ВысокаяCVSS 7,1Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8454930Наблюдать
An out-of-bounds read was addressed with improved bounds checking.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8455330Наблюдать
A resource exhaustion issue was addressed with improved input validation.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8456139Наблюдать
A double free issue was addressed with improved memory management.
КритическаяCVSS 9,8Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8456330Наблюдать
A logic issue was addressed with improved checks.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8456528Наблюдать
An out-of-bounds read was addressed with improved bounds checking.
ВысокаяCVSS 7,1Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8456631Наблюдать
The issue was addressed with improved memory handling.
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8456831Наблюдать
A path traversal issue was addressed with improved path validation.
ВысокаяCVSS 7,8Есть PoCEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8457228Наблюдать
An out-of-bounds read was addressed with improved bounds checking.
ВысокаяCVSS 7,1Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8457531Наблюдать
An out-of-bounds write issue was addressed with improved bounds checking.
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8457732Наблюдать
An access issue was addressed with additional sandbox restrictions.
ВысокаяCVSS 8,2Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8457835Наблюдать
A logic issue was addressed with improved checks.
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8458033Наблюдать
The issue was addressed with improved checks.
ВысокаяCVSS 8,4Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8458133Наблюдать
A buffer overflow was addressed with improved bounds checking.
ВысокаяCVSS 8,4Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8458433Наблюдать
This issue was addressed with improved handling of symlinks.
ВысокаяCVSS 8,4Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8458922Наблюдать
A permissions issue was addressed with additional restrictions.
СредняяCVSS 5,5Есть PoCEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8459830Наблюдать
A path traversal issue was addressed with improved path validation.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8460021Наблюдать
An authorization issue was addressed with improved state management.
СредняяCVSS 5,4Есть PoCEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8460630Наблюдать
A privacy issue was addressed with improved handling of identifiers.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8460731Наблюдать
A race condition was addressed with improved state management.
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8460939Наблюдать
A permissions issue was addressed with improved path validation.
КритическаяCVSS 9,8Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8461129Наблюдать
An out-of-bounds write issue was addressed with improved bounds checking.
ВысокаяCVSS 7,3Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8461622Наблюдать
A type confusion issue was addressed with improved memory handling.
СредняяCVSS 5,5Есть PoCEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8462029Наблюдать
An integer overflow was addressed with improved input validation.
ВысокаяCVSS 7,3Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8462330Наблюдать
An authorization issue was addressed with improved state management.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8462536Наблюдать
A permissions issue was addressed with additional sandbox restrictions.
КритическаяCVSS 9,1Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8462930Наблюдать
This issue was addressed with additional entitlement checks.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8463131Наблюдать
This issue was addressed with additional entitlement checks.
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8463229Наблюдать
The issue was addressed with improved memory handling.
ВысокаяCVSS 7,3Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8463622Наблюдать
An authorization issue was addressed with improved state management.
СредняяCVSS 5,5Есть PoCEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8688136Наблюдать
A certificate validation issue was addressed with improved certificate validation.
КритическаяCVSS 9,1Есть PoCEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8689430Наблюдать
A logic issue was addressed with improved checks.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8689530Наблюдать
An information disclosure issue was addressed with improved state management.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8690128Наблюдать
An out-of-bounds write issue was addressed with improved bounds checking.
ВысокаяCVSS 7,1Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-8690430Наблюдать
A privacy issue was addressed with improved state management.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %apple · ipados14 сент. 2026 г.
- CVE-2026-8691731Наблюдать
A permissions issue was addressed with additional restrictions.
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %apple · macos14 сент. 2026 г.
- CVE-2026-9089632Наблюдать
Missing authentication in Ecommerce Template checkout session endpoint allows unauthenticated disclosure of buyer PII
ВысокаяCVSS 8,2Эксплойта нетEPSS 0 %marcoscamara01 · ecommerce template14 сент. 2026 г.
- CVE-2026-5415530Наблюдать
node-opcua: Missing nonce verification in UserNameIdentityToken authentication
ВысокаяCVSS 7,7Эксплойта нетEPSS 0 %node-opcua · node-opcua14 сент. 2026 г.
- CVE-2026-5415630Наблюдать
node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoS
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %node-opcua · node-opcua14 сент. 2026 г.
- CVE-2026-5545133Наблюдать
gettext-converter: Prototype pollution in js2i18next() via crafted translation keys
ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %locize · gettext-converter14 сент. 2026 г.
- CVE-2026-5757930Наблюдать
Alchemy: Unauthenticated nested page API leaks restricted & unpublished content
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %alchemycms · alchemy_cms14 сент. 2026 г.
- CVE-2026-5996030Наблюдать
Argos JavaScript: CI Branch Name OS Command Injection in @argos-ci/core
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %argos-ci · argos-javascript14 сент. 2026 г.
- CVE-2026-6170135Наблюдать
Laravel MagicLink: Insecure Deserialization of MagicLink Actions Leads to Remote Code Execution
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %cesargb · laravel-magiclink14 сент. 2026 г.
- CVE-2026-1275628Наблюдать
Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
ВысокаяCVSS 7,1Эксплойта нетEPSS 0 %ibm · business automation workflow containers and traditional14 сент. 2026 г.
- CVE-2026-9114434Наблюдать
ZFile through 5.0.5 Share Entry Filter Bypass via Download Endpoint
ВысокаяCVSS 8,7Эксплойта нетEPSS 0 %zfile-dev · zfile14 сент. 2026 г.
- CVE-2026-9114528Наблюдать
Activiti through 7.1.0.M6 Expression Injection via Mail Task
ВысокаяCVSS 7,1Эксплойта нетEPSS 0 %activiti · activiti14 сент. 2026 г.
- CVE-2026-3415133Наблюдать
XWiki Platform: Resource path traversal via /skin/ action endpoint in Jetty 12+
ВысокаяCVSS 8,2Есть PoCEPSS 2 %xwiki · xwiki-platform14 сент. 2026 г.
- CVE-2026-4925034Наблюдать
Conform: parseSubmission vulnerable to CPU exhaustion when parsing many unique form fields
ВысокаяCVSS 8,7Эксплойта нетEPSS 0 %edmundhung · conform14 сент. 2026 г.
- CVE-2026-5027030Наблюдать
dd-trace-java: Improper parsing of W3C baggage headers may lead to DoS
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %datadog · dd-trace-java14 сент. 2026 г.
- CVE-2026-5365930Наблюдать
http4k: Unbounded gzip decompression in `ServerFilters.GZip` / `RequestFilters.GunZip` allowed memory-exhaustion DoS
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %http4k · http4k14 сент. 2026 г.
- CVE-2026-5375230Наблюдать
docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %plutext · docx4j14 сент. 2026 г.
- CVE-2026-5408730Наблюдать
EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField
ВысокаяCVSS 7,6Эксплойта нетEPSS 0 %easycorp · easyadminbundle14 сент. 2026 г.
- CVE-2026-5417530Наблюдать
backpack/crud: Unverified password change in MyAccountController via mass assignment
ВысокаяCVSS 7,6Эксплойта нетEPSS 0 %laravel-backpack · crud14 сент. 2026 г.
- CVE-2026-5417832Наблюдать
backpack/crud: Arbitrary file deletion via attacker-controlled clear_<attr>[] in HasUploadFields::uploadMultipleFilesToDisk
ВысокаяCVSS 8,1Эксплойта нетEPSS 0 %laravel-backpack · crud14 сент. 2026 г.
- CVE-2026-5418030Наблюдать
backpack/crud: CRUD panel query scopes are not enforced on Update, Delete, and Reorder (cross-tenant IDOR)
ВысокаяCVSS 7,6Эксплойта нетEPSS 0 %laravel-backpack · crud14 сент. 2026 г.
- CVE-2026-5418232Наблюдать
backpack/crud: OS command injection in Stats::makeCurlRequest via attacker-controlled Host header (pre-auth)
ВысокаяCVSS 8,1Эксплойта нетEPSS 0 %laravel-backpack · crud14 сент. 2026 г.
- CVE-2026-5456730Наблюдать
Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %jugmac00 · flask-reuploaded14 сент. 2026 г.
- CVE-2026-5509130Наблюдать
flat-to-nested: Prototype pollution in flat-to-nested convert() via __proto__ parent/id key
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %joaonuno · flat-to-nested-js14 сент. 2026 г.
- CVE-2026-5525330Наблюдать
LangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure
ВысокаяCVSS 7,7Эксплойта нетEPSS 0 %langchain-ai · langchain-mongodb14 сент. 2026 г.
- CVE-2026-5757732Наблюдать
DotVVM: ReDOS in routing
ВысокаяCVSS 8,2Эксплойта нетEPSS 0 %riganti · dotvvm14 сент. 2026 г.
- CVE-2026-5757836Наблюдать
DotVVM: Missing authorization in AuthorizeActionFilter
КритическаяCVSS 9,2Эксплойта нетEPSS 0 %riganti · dotvvm14 сент. 2026 г.