C/CONATION SECURITY
EnglishCMS

UNIFIED INTELLIGENCE CORPUS

Одно событие. Все материалы.

Уязвимости, патчи, атаки, утечки, исследования и репринты — связанные в единое досье, без потери первоисточника.

30событий
Сбросить
vendor
RUПодтверждено1 документов

ROSA-SA-2026-3340

ПО: Kernel 6.1.190 ОС: ROSA-CHROME unaffected versions >= kernel-6.1.190 affected versions < k...

advisory:ROSA-SA-2026-3340
Покрытие: 1ru-rosa-advisories-json
vendor
RUПодтверждено1 документов

ROSA-SA-2026-3333

ПО: Google Brotli ОС: ROSA Virtualization 2.1 unaffected versions >= brotli 1.0.10 affected ver...

advisory:ROSA-SA-2026-3333
Покрытие: 1ru-rosa-advisories-json
vendor
RUПодтверждено3 документов

ROSA-SA-2026-3332

ПО: Google Brotli ОС: ROSA Virtualization 3.0

advisory:ROSA-SA-2026-3331advisory:ROSA-SA-2026-3332cve:CVE-2026-111497
Покрытие: 3ru-rosa-advisories-json · global-cisa-kev
vulnerability
GLOBALПодтверждено1 документов

EUVD-2026-121039 / GHSA-vmhf-j68f-c7h8 CVE-2026-125871

The sourcecache expansion module in MISP Modules (misp-modules) contains a Server-Side Request Forgery (SSRF) vulnerability. When a user with permission to create or modify attributes of type 'link' or 'url' submits an attribute value, the module passes the URL directly to its internal archiving function without any validation of the target address. An attacker can therefore craft a URL pointing to loopback addresses (e.g., 127.0.0.1), private network ranges, link-local addresses, or cloud metadata endpoints (e.g., 169.254.169.254). The MISP server will issue an HTTP request to that target and store the response body in the event, effectively exfiltrating data from internal services to the attacker through the MISP interface. Non-HTTP schemes such as file:// are also accepted, potentially

cve:CVE-2026-125871euvd:EUVD-2026-121039ghsa:GHSA-vmhf-j68f-c7h8
Покрытие: 1eu-euvd-last
vulnerability
GLOBALПодтверждено1 документов

Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability

Openwave Messaging Limited Webtop Media Transcoder contains an incorrect resource transfer between spheres vulnerability that may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.

cve:CVE-2026-111793
Покрытие: 1global-cisa-kev
vulnerability
GLOBALПодтверждено2 документов

Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability

Cisco BroadWorks contains an improper restriction of XML external entity reference vulnerability that could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system.

cve:CVE-2026-111560cve:CVE-2026-111793cve:CVE-2026-116606cve:CVE-2026-124194cve:CVE-2026-125350
Покрытие: 2global-cisa-kev · global-cisa-advisories-rss
vulnerability
GLOBALПодтверждено1 документов

Barracuda Networks Multiple Products OS Command Injection Vulnerability

Barracuda Networks Email Security Gateway (ESG), Load Balancer, Application Delivery Controller (ADC), Message Archiver (BMA), WAF Control Center (WCC), Web Application Firewall (WAF), and Web Security Gateway (WSG) contain an OS command injection vulnerability. This vulnerability could allow an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently processed. This vulnerability can be chained with CVE-2026-116606

cve:CVE-2026-111560cve:CVE-2026-116606
Покрытие: 1global-cisa-kev
vulnerability
GLOBALПодтверждено1 документов

Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability

Barracuda Networks Email Security Gateway (ESG) contains an authentication bypass using an alternate path or channel that could allow an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s global configuration. This vulnerability can be chained with CVE-2026-111560.

cve:CVE-2026-111560cve:CVE-2026-116606
Покрытие: 1global-cisa-kev
vulnerability
GLOBALПодтверждено1 документов

Google Chromium Use-After-Free Vulnerability

Google Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the sandbox via a specially crafted webpage. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

cve:CVE-2026-125350
Покрытие: 1global-cisa-kev
vulnerability
GLOBALПодтверждено2 документов

GPUStack Improper Authentication Vulnerability

GPUStack contains an improper authentication vulnerability which could allow unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml.

cve:CVE-2026-102895cve:CVE-2026-116779cve:CVE-2026-123158cve:CVE-2026-123218
Покрытие: 2global-cisa-kev · global-cisa-advisories-rss
vulnerability
GLOBALПодтверждено1 документов

OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability

OpenBSD OpenSSH on Linux contains an unexpected status code or return value vulnerability that could allow for authentication bypass.

cve:CVE-2026-123158
Покрытие: 1global-cisa-kev
vulnerability
GLOBALПодтверждено1 документов

SignalWire FreeSwitch Code Injection Vulnerability

SignalWire FreeSwitch contains a code injection vulnerability that permits configuration and credential disclosure, arbitrary call control, and command execution.

cve:CVE-2026-116779
Покрытие: 1global-cisa-kev
vulnerability
GLOBALПодтверждено1 документов

IBM Aspera Faspex Incorrect Authorization Vulnerability

IBM Aspera Faspex contains an incorrect authorization vulnerability that could allow an authenticated user to craft a specific message to bypass authorization, causing privilege escalations.

cve:CVE-2026-123218
Покрытие: 1global-cisa-kev
vulnerability
GLOBALПодтверждено1 документов

EUVD-2026-118028 / CVE-2026-123087 GHSA-x2hr-mpw9-c694

SQL injection vulnerability in Atmira’s SIREC. The server retrieves the value of a field from a JSON object containing user-supplied information and concatenates it into an SQL statement without properly sanitising the input. This allows the original query to be altered via malicious input, causing the database to return unexpected information.

cve:CVE-2026-123087euvd:EUVD-2026-118028ghsa:GHSA-x2hr-mpw9-c694
Покрытие: 1eu-euvd-last
vulnerability
GLOBALПодтверждено1 документов

EUVD-2026-118025 / GHSA-fjqr-7p2w-j9wx CVE-2026-123660

In Vulnerability-Lookup 5.5.1 up to but not including 6.4.1, a signed-in user could make the server allocate memory far out of proportion to their input through a webhook notification's payload template. Each placeholder's format specifier was passed unchanged to Python's string formatting, which builds the padded result before its size can be checked. A template of a few dozen bytes, such as {"text": "{title:>999999999}"}, therefore produced a string of about 1 GB when the notification form test-rendered it on save, and repeating such fields multiplied the cost. Templates that passed the save check could also repeat placeholders such as {text} thousands of times; the notification daemon rebuilt those on every webhook delivery. Deeply nested templates raised an unhandled recursion error (H

cve:CVE-2026-123660euvd:EUVD-2026-118025ghsa:GHSA-fjqr-7p2w-j9wx
Покрытие: 1eu-euvd-last
vulnerability
GLOBALПодтверждено2 документов

SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability

SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).

cve:CVE-2026-19868
Покрытие: 2global-cisa-kev · global-cisa-advisories-rss
vulnerability
GLOBALПодтверждено1 документов

EUVD-2026-117820 / GHSA-j2mc-9j97-fjf4 CVE-2026-111494

Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any certificate and a permissive hostname validator. Additionally, the app allows unencrypted HTTP traffic. An attacker capable of intercepting the victim's traffic could read and modify communications, including credentials and personal data.

cve:CVE-2026-111494euvd:EUVD-2026-117820ghsa:GHSA-j2mc-9j97-fjf4
Покрытие: 1eu-euvd-last
vendor
GLOBALПодтверждено0 документов

Post-Quantum Questions to Ask Your Vendors

CISA, the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and the National Security Agency (NSA) released joint guidance and an accompanying quick-reference list to help organizations assess vendor readiness for transitioning to post-quantum cryptography (PQC). As quantum computing advances, widely used public-key cryptography will become vulnerable to compromise from cryptographically relevant quantum computers (CRQCs). To protect their systems and data, organizations must plan for and transition to PQC—which includes algorithms capable of withstanding both classical computing and quantum-enabled threats—before CRQCs become available. Many organizations rely on third-party vendors for managed services, cloud capabilities, and other cryptography-dependent pro

Покрытие: 0
vendor
GLOBALПодтверждено0 документов

US Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems

Overview The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Health and Human Services (HHS), U.S. Department of Agriculture (USDA), and the Department of Transportation (DoT)—hereafter referred to as “the authoring organizations”—are aware of malicious cyber activity targeting industrial refrigeration and cold chain monitoring systems globally. Organizations in the Healthcare and Public Health, Chemical, Food and Agriculture, and Transportation Systems Sectors widely use these systems, including in refrigerated transport services, for automated and remote monitoring of temperatures, continuous temperature logging, defrost cycle management, and energy optimization. The authoring organizations urge owners and operators to defend against this a

Покрытие: 0
vendor
GLOBALПодтверждено1 документов

Post-Quantum Questions to Ask Your Vendors

CISA, the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and the National Security Agency (NSA) released joint guidance and an accompanying quick-reference list to help organizations assess vendor readiness for transitioning to post-quantum cryptography (PQC). As quantum computing advances, widely used public-key cryptography will become vulnerable to compromise from cryptographically relevant quantum computers (CRQCs). To protect their systems and data, organizations must plan for and transition to PQC—which includes algorithms capable of withstanding both classical computing and quantum-enabled threats—before CRQCs become available. Many organizations rely on third-party vendors for managed services, cloud capabilities, and other cryptography-dependent pro

Покрытие: 1global-cisa-advisories-rss
vendor
GLOBALПодтверждено1 документов

US Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems

Overview The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Health and Human Services (HHS), U.S. Department of Agriculture (USDA), and the Department of Transportation (DoT)—hereafter referred to as “the authoring organizations”—are aware of malicious cyber activity targeting industrial refrigeration and cold chain monitoring systems globally. Organizations in the Healthcare and Public Health, Chemical, Food and Agriculture, and Transportation Systems Sectors widely use these systems, including in refrigerated transport services, for automated and remote monitoring of temperatures, continuous temperature logging, defrost cycle management, and energy optimization. The authoring organizations urge owners and operators to defend against this a

Покрытие: 1global-cisa-advisories-rss
vulnerability
GLOBALПодтверждено2 документов

Apple Multiple Products Improper Authentication Vulnerability

Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.

cve:CVE-2024-27834
Покрытие: 2global-cisa-kev · global-cisa-advisories-rss
vendor
GLOBALПодтверждено1 документов

Subnet Solutions PowerSYSTEM Center

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute unauthorized SQL commands and gain access to unauthorized resources. The following versions of Subnet Solutions PowerSYSTEM Center are affected: PowerSYSTEM Center 2020 <=5.29.x (CVE-2026-63017) PowerSYSTEM Center 2024 >=6.0.x|<=6.2.x (CVE-2026-63017, CVE-2026-63774) PowerSYSTEM Center 2026 >=7.0.x|<=7.1.x (CVE-2026-63017, CVE-2026-63774) CVSS Vendor Equipment v3 9 Subnet Solutions PowerSYSTEM Center 2 Vulnerabilities Incorrect Authorization, Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Background Critical Infrastructure Sectors: Critical Manufacturing, Energy Countries/Areas Deployed: Worldwide Company Headquarters Location: Canada Vulnerabilities E

cve:CVE-2026-63017cve:CVE-2026-63774
Покрытие: 1global-cisa-advisories-rss
vulnerability
GLOBALПодтверждено2 документов

WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability

WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is due to predictable, web-accessible staging paths used during full-package core upgrades.

cve:CVE-2026-119977
Покрытие: 2global-cisa-kev · global-cisa-advisories-rss
vulnerability
GLOBALПодтверждено4 документов

Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357.

cve:CVE-2026-104935cve:CVE-2026-111357cve:CVE-2026-118527
Покрытие: 4global-cisa-kev · global-cisa-advisories-rss
vendor
GLOBALПодтверждено1 документов

Hitachi Energy TRO600 series products

View CSAF Summary Hitachi Energy is aware of multiple vulnerabilities that affect the TRO600 series product versions listed in this document. These vulnerabilities can be exploited for remote code execution (RCE) to carry out further attacks and disclosure of sensitive information. Please refer to the Recommended Immediate Actions section for information about the mitigation/remediation. The following versions of Hitachi Energy TRO600 series products are affected: TRO600 vers:TRO600/<=9.2.1.6, vers:TRO600/<=9.1.1.0, 9.2.2.1, 9.1.2.0 (CVE-2026-10756, CVE-2026-106087) CVSS Vendor Equipment v3 7.5 Hitachi Energy TRO600 2 Vulnerabilities Improper Restriction of Communication Channel to Intended Endpoints, Missing Authentication for Critical Function Background Critical Infrastructure Sectors:

cve:CVE-2026-106087cve:CVE-2026-10756
Покрытие: 1global-cisa-advisories-rss
vendor
GLOBALПодтверждено1 документов

Siemens Mendix SAML Module

View CSAF Summary Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens Mendix SAML Module are affected: Mendix SAML (Mendix 10 compatible) vers:intdot/<4.2.4 (CVE-2026-89209) Mendix SAML (Mendix 11 compatible) vers:intdot/<4.2.4 (CVE-2026-89209) Mendix SAML (Mendix 9 compatible) vers:intdot/<3.6.29 (CVE-2026-89209) CVSS Vendor Equipment v3 6.8 Siemens Mendix SAML (Mendix 10 compatible) 1 Vulnerability Authentication Bypass by Capture-replay Background Critical Infrastructure Sectors:

cve:CVE-2026-89209
Покрытие: 1global-cisa-advisories-rss
vendor
GLOBALПодтверждено1 документов

Hitachi Energy CoreTec Product

View CSAF Summary Hitachi Energy is aware of OS command injection and Dirty Frag vulnerabilities that affect CoreTec product versions listed in this document. Successful exploitation of these vulnerabilities could result in impact on confidentiality, integrity and availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation. The following versions of Hitachi Energy CoreTec Product are affected: CoreTec5 vers:CoreTec5/<=3.4.0, 5.0.0 (CVE-2026-13162, CVE-2026-43284) CoreTec4 vers:CoreTec4/<=3.4.0 (CVE-2026-13162) CVSS Vendor Equipment v3 8.8 Hitachi Energy CoreTec5 2 Vulnerabilities Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Write-what-where Condition Background Critical Infras

cve:CVE-2026-13162cve:CVE-2026-43284
Покрытие: 1global-cisa-advisories-rss
vulnerability
GLOBALПодтверждено2 документов

GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.

cve:CVE-2026-76418cve:CVE-2026-97229
Покрытие: 2global-cisa-kev · global-cisa-advisories-rss