dgraph kayıtları
dgraph üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-943 Improper Neutralization of Special Elements in Data Query Logic2
- CWE-326 Inadequate Encryption Strength1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2026-41492Kavram kanıtı | Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars in Dgraphdgraph · dgraph · CWE-200 | Kritik9,8 | — | %2,5 | 24 Nis 2026 |
40Planlayın | CVE-2026-34976Kavram kanıtı | Dgraph Affected by Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorizationdgraph · dgraph · CWE-862 | Kritik10,0 | — | %1,7 | 6 Nis 2026 |
37İzleyin | CVE-2026-40173İstismar yok | Dgraph: Unauthenticated pprof endpoint leaks admin auth tokendgraph · dgraph · CWE-200 | Kritik9,4 | — | %0,6 | 15 Nis 2026 |
36İzleyin | CVE-2026-41328İstismar yok | Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Fielddgraph · dgraph · CWE-943 | Kritik9,1 | — | %0,5 | 24 Nis 2026 |
36İzleyin | CVE-2026-41327İstismar yok | Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Fielddgraph · dgraph · CWE-943 | Kritik9,1 | — | %0,5 | 24 Nis 2026 |
22İzleyin | CVE-2023-31135İstismar yok | Dgraph Audit Log Encryption nonce reusedgraph · dgraph · CWE-326 | Orta5,5 | — | %0,2 | 17 May 2023 |
- CVE-2026-4149240Planlayın
Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars in Dgraph
KritikCVSS 9,8Kavram kanıtıEPSS %2dgraph · dgraph24 Nis 2026
- CVE-2026-3497640Planlayın
Dgraph Affected by Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorization
KritikCVSS 10,0Kavram kanıtıEPSS %2dgraph · dgraph6 Nis 2026
- CVE-2026-4017337İzleyin
Dgraph: Unauthenticated pprof endpoint leaks admin auth token
KritikCVSS 9,4İstismar yokEPSS %1dgraph · dgraph15 Nis 2026
- CVE-2026-4132836İzleyin
Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field
KritikCVSS 9,1İstismar yokEPSS %0dgraph · dgraph24 Nis 2026
- CVE-2026-4132736İzleyin
Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field
KritikCVSS 9,1İstismar yokEPSS %0dgraph · dgraph24 Nis 2026
- CVE-2023-3113522İzleyin
Dgraph Audit Log Encryption nonce reuse
OrtaCVSS 5,5İstismar yokEPSS %0dgraph · dgraph17 May 2023