Эксплуатируемые и новые серьёзные CVE: октябрь 2026 г.

Security Advisory 0195

• RCE без входа
• Ошибки памяти

arista networks · wi-fi access points6 окт. 2026 г.

Security Advisory 0198

• RCE без входа
• Ошибки памяти

arista networks · wi-fi access points6 окт. 2026 г.

Security Advisory 0197

• RCE без входа
• Ошибки памяти

arista networks · wi-fi access points6 окт. 2026 г.

Security Advisory 0194

• RCE без входа
• Ошибки памяти

arista networks · wi-fi access points6 окт. 2026 г.

Security Advisory 0194

• RCE без входа
• Ошибки памяти

arista networks · wi-fi access points6 окт. 2026 г.

Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception

• Нарушение контроля доступа (IDOR)

elastic · kibana6 окт. 2026 г.

Incorrect Authorization in Elasticsearch Leading to Privilege Escalation

• Нарушение контроля доступа (IDOR)

elastic · elasticsearch6 окт. 2026 г.

Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure

• Нарушение контроля доступа (IDOR)

elastic · elasticsearch6 окт. 2026 г.

Gitea built-in SSH server authentication bypass through key case folding

• Без аутентификации
• Обход аутентификации

gitea · gitea6 окт. 2026 г.

Gitea API team demotion not applied to unit permissions

gitea · gitea6 окт. 2026 г.

Gitea trusted workflow cancellation by unapproved fork runs

• Без аутентификации

gitea · gitea6 окт. 2026 г.

Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation

fedoraproject · sssd6 окт. 2026 г.

Gitea fork workflow job revival through later approval

gitea · gitea6 окт. 2026 г.

Gitea fork workflow approval bypass through cancel and rerun

• Нарушение контроля доступа (IDOR)

gitea · gitea6 окт. 2026 г.

Gitea SSRF through Git HTTP redirects in mirrors and fetches

• Без аутентификации
• SSRF

gitea · gitea6 окт. 2026 г.

Handlebars: JavaScript Injection via Own Property Check Bypass

• Без аутентификации

handlebars-lang · handlebars.js6 окт. 2026 г.

Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams)

• RCE без входа

handlebars-lang · handlebars.js6 окт. 2026 г.

StableLib: Stack exhaustion denial of service via deeply nested CBOR arrays, maps, or tags

• Без аутентификации
• Отказ в обслуживании

stablelib · stablelib6 окт. 2026 г.

StableLib: Prototype poisoning via `__proto__` map keys in CBOR decoding

• Без аутентификации
• Prototype pollution

stablelib · stablelib6 окт. 2026 г.

yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user

• Состояние гонки

yawkat · lz4-java6 окт. 2026 г.

Gitea repository migration SSRF through DNS rebinding

• Без аутентификации
• SSRF

gitea · gitea6 окт. 2026 г.

Gitea WebAuthn bypass during OAuth and OIDC sign-in

• Без аутентификации
• Обход аутентификации

gitea · gitea6 окт. 2026 г.

Authentication Bypass in the Web Management Interface of AOS-S

• Без аутентификации
• Обход аутентификации

hewlett packard enterprise (hpe) · aos-switch (aos-s)6 окт. 2026 г.

Authentication Bypass Vulnerability in the Management Interface of AOS-S

• Без аутентификации
• Обход аутентификации

hewlett packard enterprise (hpe) · aos-switch (aos-s)6 окт. 2026 г.

Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-S

• RCE без входа
• Ошибки памяти

hewlett packard enterprise (hpe) · aos-switch (aos-s)6 окт. 2026 г.

Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Execution in AOS-S

• RCE без входа
• Ошибки памяти

hewlett packard enterprise (hpe) · aos-switch (aos-s)6 окт. 2026 г.

Unauthenticated Adjacent Buffer Overflow Vulnerability Leading to Information Disclosure in AOS-S

• Без аутентификации
• Ошибки памяти

hewlett packard enterprise (hpe) · aos-switch (aos-s)6 окт. 2026 г.

Unauthenticated Buffer Overflow Vulnerabilities lead to Information Disclosure in AOS-S

• Без аутентификации
• Ошибки памяти

hewlett packard enterprise (hpe) · aos-switch (aos-s)6 окт. 2026 г.

Authenticated Privilege Escalation Vulnerability in the API of AOS-S

hewlett packard enterprise (hpe) · aos-switch (aos-s)6 окт. 2026 г.

Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager

• RCE без входа
• Десериализация

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution

• RCE без входа

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access

• Без аутентификации
• Обход аутентификации

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager

• RCE без входа

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager

• RCE без входа
• SQL-инъекция
• Инъекция команд

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface

• SQL-инъекция

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Authentication Bypass Vulnerabilities in ClearPass Policy Manager

• Без аутентификации
• Обход аутентификации

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Improper Access Control in HPE Networking ClearPass Android Client Application

• Без аутентификации
• Нарушение контроля доступа (IDOR)

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface

• SQL-инъекция

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management Interface

• RCE без входа
• XSS

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager

• RCE
• Обход пути

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent

• RCE без входа

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Command Injection Vulnerability in the ClearPass Policy Manager Client Software

• RCE без входа
• Инъекция команд

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager API

• RCE
• Инъекция команд

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager

• Без аутентификации
• Обход пути

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux Agent

• Локальное повышение привилегий

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Software

• Локальное повышение привилегий
• Слабая криптография

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Local Authenticated Buffer Overflow Vulnerability in the ClearPass Policy Manager OnGuard Agent

• RCE
• Локальное повышение привилегий
• Ошибки памяти

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass

• Без аутентификации
• Обход пути

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Manager

• RCE

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager API

• RCE
• SQL-инъекция

hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 окт. 2026 г.

Gitea deploy key pushes acting as the repository owner

• Нарушение контроля доступа (IDOR)

gitea · gitea6 окт. 2026 г.

Gitea push mirror SSRF and forced writes to internal Git hosts

• SSRF
• Состояние гонки

gitea · gitea6 окт. 2026 г.

Apache Commons BCEL: Class repositories cache class files under their self-declared names, enabling cache poisoning

• Без аутентификации

apache software foundation · apache commons bcel6 окт. 2026 г.

Gitea fork workflow approval bypass through maintainer-triggered events

• Без аутентификации

gitea · gitea6 окт. 2026 г.

Gitea review and execution mismatch through duplicate tree entries

• Без аутентификации

gitea · gitea6 окт. 2026 г.

Gitea denial of service through external issue tracker patterns

• Без аутентификации
• Ошибки памяти
• Отказ в обслуживании

gitea · gitea6 окт. 2026 г.

Gitea installer authentication bypass for existing accounts

• Без аутентификации
• Обход аутентификации

gitea · gitea6 окт. 2026 г.

Gitea Actions memory exhaustion through large static matrices

• Без аутентификации
• Отказ в обслуживании

gitea · gitea6 окт. 2026 г.

Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free

• RCE
• Ошибки памяти

red hat · red hat enterprise linux 106 окт. 2026 г.

Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

• Нарушение контроля доступа (IDOR)

aws · qnabot-on-aws6 окт. 2026 г.

Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import

• RCE

aws · bedrock-agentcore-starter-toolkit6 окт. 2026 г.

Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file

• RCE
• Ошибки памяти

red hat · red hat enterprise linux 106 окт. 2026 г.

Backstage: Improper validation of MkDocs plugin configuration in TechDocs

• SSRF

linuxfoundation · backstage plugin-techdocs-node6 окт. 2026 г.

Backstage: Insufficient audience validation in the Cloudflare Access auth provider

• Обход аутентификации

linuxfoundation · backstage/plugin-auth-backend-module-cloudflare-access-provider6 окт. 2026 г.

Backstage: Improper input validation in Sentry scaffolder actions

• Утечка информации

linuxfoundation · backstage/plugin-scaffolder-backend-module-sentry6 окт. 2026 г.

Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions

• Обход пути

linuxfoundation · backstage/plugin-scaffolder-backend-module-bitbucket-cloud6 окт. 2026 г.

Backstage: Improper authentication in the OIDC provider

• Обход аутентификации

linuxfoundation · backstage/plugin-auth-backend-module-oidc-provider6 окт. 2026 г.

Backstage: Improper input validation in cloud storage URL readers

• Обход пути

linuxfoundation · backstage/backend defaults6 окт. 2026 г.

HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata

• RCE
• Ошибки памяти

the hdf group · hdf56 окт. 2026 г.

Mozilla's Node-convict (version 6.2.2 and later) is vulnerable to a Denial of Service vulnerability caused by incomplete prototype‑pollution

• Без аутентификации
• Отказ в обслуживании

mozilla · node-convict6 окт. 2026 г.

In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.

• Без аутентификации

openbsd · openssh6 окт. 2026 г.

In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.

• Без аутентификации

openbsd · openssh6 окт. 2026 г.

Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent a

• RCE

amd · amd instinct™ mi2106 окт. 2026 г.

Gitea OAuth2 refresh token grant accepts access tokens

• Без аутентификации
• Обход аутентификации

gitea · gitea6 окт. 2026 г.

Gitea tag delete route deletes releases without release permission

gitea · gitea6 окт. 2026 г.

Backstage: Improper URL validation in catalog entity placeholder resolution

• Нарушение контроля доступа (IDOR)

linuxfoundation · backstage plugin-catalog-backend6 окт. 2026 г.

Backstage: Improper task state validation in Scaffolder backend

linuxfoundation · backstage/plugin-scaffolder-backend6 окт. 2026 г.

Backstage: Sensitive information exposure in Scaffolder

• Утечка информации

linuxfoundation · backstage/plugin-scaffolder-backend6 окт. 2026 г.

Backstage: Scaffolder action input authorization bypass

linuxfoundation · backstage/plugin-scaffolder-backend6 окт. 2026 г.

Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend

• RCE

linuxfoundation · backstage plugin-techdocs-node6 окт. 2026 г.

Backstage: Improper validation of MkDocs theme configuration in TechDocs

• RCE

linuxfoundation · backstage plugin-techdocs-node6 окт. 2026 г.

NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data.

• Десериализация

nvidia · model-optimizer6 окт. 2026 г.

Gitea push mirror local path check uses the repository owner

• Нарушение контроля доступа (IDOR)

gitea · gitea6 окт. 2026 г.

Langflow OSS is affected by multiple vulnerabilities

• RCE
• Нарушение контроля доступа (IDOR)

langflow · langflow7 окт. 2026 г.

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.

openbsd · openssh7 окт. 2026 г.

Langflow OSS is affected by multiple vulnerabilities

• RCE без входа

langflow · langflow7 окт. 2026 г.

Langflow OSS is affected by multiple vulnerabilities

• RCE

langflow · langflow7 окт. 2026 г.

Langflow OSS is affected by multiple vulnerabilities

• RCE

langflow · langflow7 окт. 2026 г.

Langflow OSS is affected by multiple vulnerabilities

• RCE

langflow · langflow7 окт. 2026 г.

Langflow OSS is affected by multiple vulnerabilities

• Десериализация

langflow · langflow7 окт. 2026 г.

Langflow OSS is affected by multiple vulnerabilities

• RCE

langflow · langflow7 окт. 2026 г.

Langflow OSS is affected by multiple vulnerabilities

• RCE без входа

langflow · langflow7 окт. 2026 г.

Langflow OSS is affected by multiple vulnerabilities

• RCE без входа

langflow · langflow7 окт. 2026 г.

Langflow OSS is affected by multiple vulnerabilities

• Нарушение контроля доступа (IDOR)

langflow · langflow7 окт. 2026 г.

Langflow OSS is affected by multiple vulnerabilities

• RCE

langflow · langflow7 окт. 2026 г.

Langflow OSS is affected by multiple vulnerabilities

• RCE

langflow · langflow7 окт. 2026 г.

Langflow OSS is affected by multiple vulnerabilities

• RCE

langflow · langflow7 окт. 2026 г.

Langflow OSS is affected by multiple vulnerabilities

• RCE

langflow · langflow7 окт. 2026 г.

Langflow OSS is affected by multiple vulnerabilities

• RCE

langflow · langflow7 окт. 2026 г.

Langflow OSS is affected by multiple vulnerabilities

• RCE

langflow · langflow7 окт. 2026 г.