HKUDS kayıtları
hkuds üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %90
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-276 Incorrect Default Permissions2
- CWE-287 Improper Authentication1
- CWE-347 Improper Verification of Cryptographic Signature1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2026-40502İstismar yok | OpenHarness Remote Administrative Command Injection via Gateway Handlerhkuds · openharness · CWE-862 | Yüksek8,7 | — | %1,6 | 15 Nis 2026 |
34İzleyin | CVE-2026-7551İstismar yok | HKUDS OpenHarness Remote Command Execution via /bridge Slash Commandhkuds · openharness · CWE-78 | Yüksek8,7 | — | %0,6 | 30 Nis 2026 |
34İzleyin | CVE-2026-32847İstismar yok | DeepCode 1.2.0 Path Traversal via SPA Catch-All Route in main.pyhkuds · deepcode · CWE-22 | Yüksek8,7 | — | %0,3 | 28 May 2026 |
34İzleyin | CVE-2026-6819İstismar yok | HKUDS OpenHarness Plugin Management Command Exposurehkuds · openharness · CWE-276 | Yüksek8,7 | — | %0,2 | 21 Nis 2026 |
34İzleyin | CVE-2026-40515İstismar yok | OpenHarness Permission Bypass via grep and glob root argumenthkuds · openharness · CWE-863 | Yüksek8,7 | — | %0,2 | 17 Nis 2026 |
33İzleyin | CVE-2026-6823İstismar yok | HKUDS OpenHarness Insecure Default Remote Channel Allowlisthkuds · openharness · CWE-276 | Yüksek8,3 | — | %0,3 | 21 Nis 2026 |
31İzleyin | CVE-2026-40516İstismar yok | OpenHarness SSRF via web_fetch and web_searchhkuds · openharness · CWE-918 | Yüksek7,8 | — | %0,1 | 17 Nis 2026 |
28İzleyin | CVE-2026-40503İstismar yok | OpenHarness Path Traversal Information Disclosure via /memory showhkuds · openharness · CWE-22 | Yüksek7,1 | — | %0,4 | 15 Nis 2026 |
26İzleyin | CVE-2026-39413İstismar yok | LightRAG has a JWT Algorithm Confusion Vulnerability in LightRAG APIhkuds · lightrag · CWE-347 | Orta6,5 | — | %0,1 | 8 Nis 2026 |
21İzleyin | CVE-2026-6729İstismar yok | HKUDS OpenHarness Session Key Collision Privilege Escalationhkuds · openharness · CWE-287 | Orta5,3 | — | %0,1 | 20 Nis 2026 |
- CVE-2026-4050235İzleyin
OpenHarness Remote Administrative Command Injection via Gateway Handler
YüksekCVSS 8,7İstismar yokEPSS %1hkuds · openharness15 Nis 2026
- CVE-2026-755134İzleyin
HKUDS OpenHarness Remote Command Execution via /bridge Slash Command
YüksekCVSS 8,7İstismar yokEPSS %0hkuds · openharness30 Nis 2026
- CVE-2026-3284734İzleyin
DeepCode 1.2.0 Path Traversal via SPA Catch-All Route in main.py
YüksekCVSS 8,7İstismar yokEPSS %0hkuds · deepcode28 May 2026
- CVE-2026-681934İzleyin
HKUDS OpenHarness Plugin Management Command Exposure
YüksekCVSS 8,7İstismar yokEPSS %0hkuds · openharness21 Nis 2026
- CVE-2026-4051534İzleyin
OpenHarness Permission Bypass via grep and glob root argument
YüksekCVSS 8,7İstismar yokEPSS %0hkuds · openharness17 Nis 2026
- CVE-2026-682333İzleyin
HKUDS OpenHarness Insecure Default Remote Channel Allowlist
YüksekCVSS 8,3İstismar yokEPSS %0hkuds · openharness21 Nis 2026
- CVE-2026-4051631İzleyin
OpenHarness SSRF via web_fetch and web_search
YüksekCVSS 7,8İstismar yokEPSS %0hkuds · openharness17 Nis 2026
- CVE-2026-4050328İzleyin
OpenHarness Path Traversal Information Disclosure via /memory show
YüksekCVSS 7,1İstismar yokEPSS %0hkuds · openharness15 Nis 2026
- CVE-2026-3941326İzleyin
LightRAG has a JWT Algorithm Confusion Vulnerability in LightRAG API
OrtaCVSS 6,5İstismar yokEPSS %0hkuds · lightrag8 Nis 2026
- CVE-2026-672921İzleyin
HKUDS OpenHarness Session Key Collision Privilege Escalation
OrtaCVSS 5,3İstismar yokEPSS %0hkuds · openharness20 Nis 2026