SignalK kayıtları
signalk üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-400 Uncontrolled Resource Consumption2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-284 Improper Access Control1
- CWE-285 Improper Authorization1
- CWE-288 Authentication Bypass Using an Alternate Path or Channel1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2025-66398Kavram kanıtı | Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE)signalk · signal k server · CWE-78 | Yüksek8,8 | — | %19,8 | 1 Oca 2026 |
37İzleyin | CVE-2026-33950İstismar yok | signalk-server: Privilege Escalation by Admin Role Injection via /enableSecuritysignalk · signal k server · CWE-285 | Kritik9,4 | — | %0,4 | 2 Nis 2026 |
36İzleyin | CVE-2026-23515İstismar yok | RCE - Command Injection in Signal K set-system-time pluginsignalk · signal k server · CWE-78 | Yüksek8,8 | — | %4,5 | 2 Şub 2026 |
36İzleyin | CVE-2025-68620İstismar yok | Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Pollingsignalk · signal k server · CWE-288 | Kritik9,1 | — | %0,5 | 1 Oca 2026 |
35İzleyin | CVE-2025-69203İstismar yok | Signal K Server Vulnerable to Access Request Spoofingsignalk · signal k server · CWE-290 | Yüksek8,8 | — | %0,3 | 1 Oca 2026 |
34İzleyin | CVE-2026-41893İstismar yok | Signal K Server's WebSocket Login Endpoint Lacks Rate Limiting (Credential Brute-Force)signalk · signal k server · CWE-307 | Yüksek8,7 | — | %0,5 | 9 May 2026 |
30İzleyin | CVE-2026-39320İstismar yok | Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Pathssignalk · signal k server · CWE-400 | Yüksek7,5 | — | %0,6 | 20 Nis 2026 |
30İzleyin | CVE-2025-68272İstismar yok | Signal K Server Vulnerable to Denial of Service via Unrestricted Access Request Floodingsignalk · signal k server · CWE-400 | Yüksek7,5 | — | %0,5 | 1 Oca 2026 |
29İzleyin | CVE-2025-68619İstismar yok | Signal K Server Vulnerable to Remote Code Execution via Malicious npm Packagesignalk · signal k server · CWE-94 | Yüksek7,3 | — | %0,7 | 1 Oca 2026 |
27İzleyin | CVE-2026-33951İstismar yok | signalk-server: Unauthenticated Source Priorities Manipulationsignalk · signal k server · CWE-284 | Orta6,9 | — | %0,5 | 2 Nis 2026 |
24İzleyin | CVE-2026-34083İstismar yok | signalk-server: OAuth Authorization Code Theft via Unvalidated Host Header in OIDC Flowsignalk · signal k server · CWE-346 | Orta6,1 | — | %0,1 | 2 Nis 2026 |
21İzleyin | CVE-2025-68273Kavram kanıtı | Signal K Server Vulnerable to Unauthenticated Information Disclosure via Exposed Endpointssignalk · signal k server · CWE-200 | Orta5,3 | — | %0,8 | 1 Oca 2026 |
17İzleyin | CVE-2026-25228İstismar yok | SignalK Server has Path Traversal leading to information disclosuresignalk · signal k server · CWE-22 | Orta4,3 | — | %0,4 | 2 Şub 2026 |
8İzleyin | CVE-2026-35038İstismar yok | signalk-server: Arbitrary Prototype Read via `from` Field Bypasssignalk · signal k server · CWE-20 | Düşük2,1 | — | %0,4 | 2 Nis 2026 |
- CVE-2025-6639841Planlayın
Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE)
YüksekCVSS 8,8Kavram kanıtıEPSS %19signalk · signal k server1 Oca 2026
- CVE-2026-3395037İzleyin
signalk-server: Privilege Escalation by Admin Role Injection via /enableSecurity
KritikCVSS 9,4İstismar yokEPSS %0signalk · signal k server2 Nis 2026
- CVE-2026-2351536İzleyin
RCE - Command Injection in Signal K set-system-time plugin
YüksekCVSS 8,8İstismar yokEPSS %4signalk · signal k server2 Şub 2026
- CVE-2025-6862036İzleyin
Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Polling
KritikCVSS 9,1İstismar yokEPSS %0signalk · signal k server1 Oca 2026
- CVE-2025-6920335İzleyin
Signal K Server Vulnerable to Access Request Spoofing
YüksekCVSS 8,8İstismar yokEPSS %0signalk · signal k server1 Oca 2026
- CVE-2026-4189334İzleyin
Signal K Server's WebSocket Login Endpoint Lacks Rate Limiting (Credential Brute-Force)
YüksekCVSS 8,7İstismar yokEPSS %0signalk · signal k server9 May 2026
- CVE-2026-3932030İzleyin
Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths
YüksekCVSS 7,5İstismar yokEPSS %0signalk · signal k server20 Nis 2026
- CVE-2025-6827230İzleyin
Signal K Server Vulnerable to Denial of Service via Unrestricted Access Request Flooding
YüksekCVSS 7,5İstismar yokEPSS %0signalk · signal k server1 Oca 2026
- CVE-2025-6861929İzleyin
Signal K Server Vulnerable to Remote Code Execution via Malicious npm Package
YüksekCVSS 7,3İstismar yokEPSS %0signalk · signal k server1 Oca 2026
- CVE-2026-3395127İzleyin
signalk-server: Unauthenticated Source Priorities Manipulation
OrtaCVSS 6,9İstismar yokEPSS %0signalk · signal k server2 Nis 2026
- CVE-2026-3408324İzleyin
signalk-server: OAuth Authorization Code Theft via Unvalidated Host Header in OIDC Flow
OrtaCVSS 6,1İstismar yokEPSS %0signalk · signal k server2 Nis 2026
- CVE-2025-6827321İzleyin
Signal K Server Vulnerable to Unauthenticated Information Disclosure via Exposed Endpoints
OrtaCVSS 5,3Kavram kanıtıEPSS %0signalk · signal k server1 Oca 2026
- CVE-2026-2522817İzleyin
SignalK Server has Path Traversal leading to information disclosure
OrtaCVSS 4,3İstismar yokEPSS %0signalk · signal k server2 Şub 2026
- CVE-2026-350388İzleyin
signalk-server: Arbitrary Prototype Read via `from` Field Bypass
DüşükCVSS 2,1İstismar yokEPSS %0signalk · signal k server2 Nis 2026