Lỗ hổng mới
Lỗ hổng nghiêm trọng mới công bố (CVSS ≥ ngưỡng) hoặc đang bị khai thác thực tế (CISA KEV), gom từ NVD, GitHub Advisory, CVE.org, OSV và CISA KEV.
| ID | Tóm tắt | CVSS | Sản phẩm / package | Công bố | Nguồn |
|---|---|---|---|---|---|
| CVE-2026-92744 RCE Truy cập trái phép | Delinea Privilege Manager agent unauthenticated remote code execution vulnerability | 8.7 HIGH | Delinea Privilege Manager | NVD, CVE.org | |
| CVE-2026-61707 RCE Truy cập trái phép | SOCFortress CoPilot: Stored case-report template injection permits backend code execution | 9.0 CRITICAL | socfortress CoPilot | NVD, CVE.org | |
| CVE-2026-61671 Truy cập trái phép | WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle Classes | 8.1 HIGH | LabRedesCefetRJ WeGIA | NVD, CVE.org | |
| CVE-2026-103093 RCE Truy cập trái phép | Sandbox Escape via Table Rotation in ServiceNow AI Platform | 9.4 CRITICAL | ServiceNow ServiceNow AI Platform | NVD, CVE.org | |
| CVE-2026-119168 Truy cập trái phép | Nomad allocation data migration may allow host directory permission modification via symlink following | 8.8 HIGH | HashiCorp Nomad, HashiCorp Nomad Enterprise | NVD, CVE.org | |
| CVE-2026-119115 Truy cập trái phép | Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes | 8.5 HIGH | AWS aws-privateca-issuer | NVD, CVE.org | |
| GHSA-w9x9-j56r-h98r Truy cập trái phép | @eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy | 8.2 HIGH | npm/@eeacms/volto-chatbot | GitHub Advisory, OSV.dev | |
| CVE-2026-119129 Truy cập trái phép | ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 Account Takeover via Device Authorization Approval | 8.1 HIGH | zitadel zitadel | NVD, CVE.org | |
| CVE-2026-119127 Truy cập trái phép | ZITADEL 4.0.0 before 4.19.5 Account Takeover via Login V2 Host Header Injection | 8.1 HIGH | zitadel zitadel | NVD, CVE.org | |
| CVE-2026-90867 Truy cập trái phép | Improper Access Control of Web Admin Console in Progress WS_FTP Server | 8.1 HIGH | Progress Software WS_FTP Server | NVD, CVE.org | |
| CVE-2026-90863 RCE Truy cập trái phép | Privilege Escalation via Missing Authorization in WS_FTP Manager | 9.1 CRITICAL | Progress Software WS_FTP Server | NVD, CVE.org | |
| CVE-2026-84295 Truy cập trái phép | Improper Authentication in Progress WS_FTP Server | 10.0 CRITICAL | Progress Software WS_FTP Server | NVD, CVE.org | |
| CVE-2026-118082 Truy cập trái phép | WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerability | 8.8 HIGH | BuddyBoss Buddyboss Platform | NVD, CVE.org | |
| CVE-2026-88077 Truy cập trái phép | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 8.8 HIGH | Microsoft Microsoft Edge (Chromium-based) | NVD, CVE.org | |
| CVE-2026-85899 RCE Truy cập trái phép | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 8.1 HIGH | Microsoft Microsoft Edge (Chromium-based) | NVD, CVE.org | |
| CVE-2026-96203 RCE Truy cập trái phép | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 8.8 HIGH | Microsoft Microsoft Edge (Chromium-based) | NVD, CVE.org | |
| CVE-2026-93680 Truy cập trái phép | Langflow OSS is affected by multiple vulnerabilities | 9.8 CRITICAL | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-103092 Truy cập trái phép | Langflow OSS is affected by multiple vulnerabilities | 8.8 HIGH | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-107327 RCE Truy cập trái phép | Langflow OSS is affected by multiple vulnerabilities | 8.8 HIGH | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-110196 RCE Truy cập trái phép | Langflow OSS is affected by multiple vulnerabilities | 8.8 HIGH | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-49142 Truy cập trái phép Lộ dữ liệu | OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[] | 8.8 HIGH | openemr openemr | NVD, CVE.org | |
| CVE-2026-111419 Truy cập trái phép | Hardcoded API Token in Foxit Official Website | 8.6 HIGH | Foxit Software Inc. foxit.com | NVD, CVE.org | |
| CVE-2026-113616 Truy cập trái phép | LogixFast Auth < 1.0.4 - Unauthenticated Account Takeover via Password Reset | 9.8 CRITICAL | Unknown LogixFast Auth | NVD, CVE.org | |
| CVE-2026-96228 Truy cập trái phép | SSL Wireless SMS Notification <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover | 8.1 HIGH | sslplugins SSL Wireless SMS Notification | NVD, CVE.org | |
| CVE-2026-109516 Truy cập trái phép | Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token | 9.8 CRITICAL | guruteam Bot for Telegram on WooCommerce | NVD, CVE.org | |
| CVE-2026-113387 Truy cập trái phép | The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public HTML. An unauthenticated threat actor could overwrite the... | 8.6 HIGH | canva ortto | NVD, CVE.org | |
| CVE-2026-107015 Truy cập trái phép | Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database. | 9.1 CRITICAL | NVD, CVE.org | ||
| CVE-2026-107017 Truy cập trái phép | Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers to arbitrarily trigger another user's configured automated actions. | 9.1 CRITICAL | NVD, CVE.org | ||
| CVE-2026-107028 Truy cập trái phép | Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leading to manipulation of the shopping-list data. | 9.1 CRITICAL | NVD, CVE.org | ||
| CVE-2026-107034 Truy cập trái phép | Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note data. | 9.1 CRITICAL | NVD, CVE.org | ||
| CVE-2026-107058 Truy cập trái phép | An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another user's binder service API and preference state. | 9.8 CRITICAL | NVD, CVE.org | ||
| CVE-2026-51905 Truy cập trái phép | TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in superagi/controllers/agent_execution_config.py. A remote authenticated attacker... | 8.8 HIGH | NVD, CVE.org | ||
| CVE-2026-85749 Truy cập trái phép | MailWatch: IDOR lets any authenticated user release or delete another tenant's quarantined mail | 8.1 HIGH | mailwatch MailWatch | NVD, CVE.org | |
| CVE-2026-118690 Truy cập trái phép | Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogs | 9.8 CRITICAL | SignalK signalk-server | NVD, CVE.org | |
| CVE-2026-118669 Truy cập trái phép | OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client | 8.4 HIGH | pip/oauthlib, oauthlib oauthlib | GitHub Advisory, NVD, CVE.org, OSV.dev | |
| CVE-2026-118668 Truy cập trái phép | LangGraph JavaScript custom authentication may permit cross-user Store access | 8.6 HIGH | pip/langgraph-api, langchain-ai langgraph-api | GitHub Advisory, NVD, CVE.org, OSV.dev | |
| CVE-2026-117574 Truy cập trái phép | Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization | 9.1 CRITICAL | Red Hat Red Hat OpenShift AI (RHOAI) | NVD, CVE.org | |
| CVE-2026-58273 Truy cập trái phép | rucio has an Authorization Bypass on REST API endpoint for signing URLs | 8.8 HIGH | pip/rucio | GitHub Advisory, OSV.dev | |
| CVE-2026-61542 Truy cập trái phép | Gearboy advisory / Gearsystem body: Unauthenticated network exposure of MCP HTTP tools | 8.6 HIGH | drhelius Gearboy | NVD, CVE.org | |
| CVE-2026-63190 Truy cập trái phép Lộ dữ liệu | FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS | 9.4 CRITICAL | fearlessgeekmedia FearlessCMS | NVD, CVE.org | |
| CVE-2026-116794 Truy cập trái phép | russh: Agent server never calls Agent::confirm, so keys added with the confirm constraint (ssh-add -c) sign without confirmation | 8.3 HIGH | rust/russh, Eugeny russh | GitHub Advisory, NVD, CVE.org, OSV.dev | |
| CVE-2026-103506 Truy cập trái phép | SSO settings authorization bypass | 8.9 HIGH | Grafana Grafana Enterprise, Grafana Grafana OSS | NVD, CVE.org | |
| CVE-2026-106079 RCE Truy cập trái phép | Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration | 8.8 HIGH | Juniper Networks Session Smart Router, Juniper Networks Session Smart Conductor | NVD, CVE.org | |
| CVE-2026-103409 Truy cập trái phép | Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed | 9.8 CRITICAL | Juniper Networks Session Smart Router | NVD, CVE.org | |
| CVE-2026-103402 RCE Truy cập trái phép | Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation | 8.8 HIGH | Juniper Networks Session Smart Router, Juniper Networks Session Smart Conductor | NVD, CVE.org | |
| CVE-2026-116778 RCE Truy cập trái phép | FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution | 8.8 HIGH | FOGProject fogproject | NVD, CVE.org | |
| CVE-2026-56828 Truy cập trái phép | Shopper: read-only team permissions allow administrator creation and permission escalation | 8.8 HIGH | shopperlabs shopper | NVD, CVE.org | |
| CVE-2026-59979 Truy cập trái phép | YosemiteCrew: Missing organization authorization on service and PMS library/template routes | 8.3 HIGH | YosemiteCrew Yosemite-Crew | NVD, CVE.org | |
| CVE-2026-59185 Truy cập trái phép | identrail: Cross-tenant GitHub installation binding without ownership verification | 8.5 HIGH | identrail identrail | NVD, CVE.org | |
| CVE-2026-67073 RCE Truy cập trái phép Lộ dữ liệu | HCL BigFix AEX is affected by multiple security vulnerabilities. | 8.6 HIGH | HCL Software BigFix AEX | NVD, CVE.org |