Lỗ hổng mới
Lỗ hổng nghiêm trọng mới công bố (CVSS ≥ ngưỡng) hoặc đang bị khai thác thực tế (CISA KEV), gom từ NVD, GitHub Advisory, CVE.org, OSV và CISA KEV.
| ID | Tóm tắt | CVSS | Sản phẩm / package | Công bố | Nguồn |
|---|---|---|---|---|---|
| CVE-2026-42922 RCE | A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can ... | 9.8 CRITICAL | frangoteam Frangoteam | NVD, CVE.org | |
| CVE-2026-113387 Truy cập trái phép | The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public HTML. An unauthenticated threat actor could overwrite the... | 8.6 HIGH | canva ortto | NVD, CVE.org | |
| CVE-2026-66088 RCE | Unrestricted Command Execution via system.execute | 9.4 CRITICAL | Apereo Foundation openEQUELLA | NVD, CVE.org | |
| CVE-2026-107015 Truy cập trái phép | Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database. | 9.1 CRITICAL | NVD, CVE.org | ||
| CVE-2026-107017 Truy cập trái phép | Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers to arbitrarily trigger another user's configured automated actions. | 9.1 CRITICAL | NVD, CVE.org | ||
| CVE-2026-107028 Truy cập trái phép | Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leading to manipulation of the shopping-list data. | 9.1 CRITICAL | NVD, CVE.org | ||
| CVE-2026-107034 Truy cập trái phép | Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note data. | 9.1 CRITICAL | NVD, CVE.org | ||
| CVE-2026-107058 Truy cập trái phép | An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another user's binder service API and preference state. | 9.8 CRITICAL | NVD, CVE.org | ||
| CVE-2026-51905 Truy cập trái phép | TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in superagi/controllers/agent_execution_config.py. A remote authenticated attacker... | 8.8 HIGH | NVD, CVE.org | ||
| CVE-2026-85749 Truy cập trái phép | MailWatch: IDOR lets any authenticated user release or delete another tenant's quarantined mail | 8.1 HIGH | mailwatch MailWatch | NVD, CVE.org | |
| CVE-2026-61567 RCE | AVideo-Encoder: unauthenticated command execution through streamer login trust | 10.0 CRITICAL | WWBN AVideo-Encoder | NVD, CVE.org | |
| CVE-2026-61564 RCE | AVideo-Encoder: unauthenticated installer PHP code injection | 10.0 CRITICAL | WWBN AVideo-Encoder | NVD, CVE.org | |
| CVE-2026-118690 Truy cập trái phép | Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogs | 9.8 CRITICAL | SignalK signalk-server | NVD, CVE.org | |
| CVE-2026-118669 Truy cập trái phép | OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client | 8.4 HIGH | pip/oauthlib, oauthlib oauthlib | GitHub Advisory, NVD, CVE.org, OSV.dev | |
| CVE-2026-118668 Truy cập trái phép | LangGraph JavaScript custom authentication may permit cross-user Store access | 8.6 HIGH | pip/langgraph-api, langchain-ai langgraph-api | GitHub Advisory, NVD, CVE.org, OSV.dev | |
| CVE-2026-117574 Truy cập trái phép | Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization | 9.1 CRITICAL | Red Hat Red Hat OpenShift AI (RHOAI) | NVD, CVE.org | |
| CVE-2026-58273 Truy cập trái phép | rucio has an Authorization Bypass on REST API endpoint for signing URLs | 8.8 HIGH | pip/rucio | GitHub Advisory, OSV.dev | |
| CVE-2026-61542 Truy cập trái phép | Gearboy advisory / Gearsystem body: Unauthenticated network exposure of MCP HTTP tools | 8.6 HIGH | drhelius Gearboy | NVD, CVE.org | |
| CVE-2026-63190 Truy cập trái phép Lộ dữ liệu | FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS | 9.4 CRITICAL | fearlessgeekmedia FearlessCMS | NVD, CVE.org | |
| CVE-2026-78674 RCE | Remote Code Execution via BPMN System REST APIs in Multiple WSO2 Products Permits Arbitrary Command Execution | 8.8 HIGH | WSO2 Enterprise Integrator (BPS profile), WSO2 Business Process Server | NVD, CVE.org | |
| CVE-2026-118683 RCE | MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf | 8.8 HIGH | Project-MONAI MONAI | NVD, CVE.org | |
| CVE-2026-118633 RCE Lộ dữ liệu | A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) after winning a race condition by sustaining repeated attacks ... | 8.1 HIGH | Sophos SG UTM | NVD, CVE.org | |
| CVE-2026-116794 Truy cập trái phép | russh: Agent server never calls Agent::confirm, so keys added with the confirm constraint (ssh-add -c) sign without confirmation | 8.3 HIGH | rust/russh, Eugeny russh | GitHub Advisory, NVD, CVE.org, OSV.dev | |
| CVE-2026-118619 RCE Lộ dữ liệu | Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability | 8.8 HIGH | Ultralytics Ultralytics | NVD, CVE.org | |
| CVE-2026-118610 RCE | Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability | 8.8 HIGH | Alpine iLX-F511 | NVD, CVE.org | |
| CVE-2026-103506 Truy cập trái phép | SSO settings authorization bypass | 8.9 HIGH | Grafana Grafana Enterprise, Grafana Grafana OSS | NVD, CVE.org | |
| CVE-2026-118606 RCE | Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability | 8.8 HIGH | Alpine iLX-F511 | NVD, CVE.org | |
| CVE-2026-118605 RCE | Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability | 8.0 HIGH | Alpine iLX-F511 | NVD, CVE.org | |
| CVE-2026-118603 RCE | Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability | 8.0 HIGH | Alpine iLX-F511 | NVD, CVE.org | |
| CVE-2026-106079 RCE Truy cập trái phép | Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration | 8.8 HIGH | Juniper Networks Session Smart Router, Juniper Networks Session Smart Conductor | NVD, CVE.org | |
| CVE-2026-103409 Truy cập trái phép | Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed | 9.8 CRITICAL | Juniper Networks Session Smart Router | NVD, CVE.org | |
| CVE-2026-103408 RCE | Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options | 8.8 HIGH | Juniper Networks Session Smart Router | NVD, CVE.org | |
| CVE-2026-103406 RCE | Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management. | 9.8 CRITICAL | Juniper Networks Session Smart Conductor | NVD, CVE.org | |
| CVE-2026-103403 RCE | Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules | 8.8 HIGH | Juniper Networks Session Smart Router, Juniper Networks Session Smart Conductor | NVD, CVE.org | |
| CVE-2026-103402 RCE Truy cập trái phép | Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation | 8.8 HIGH | Juniper Networks Session Smart Router, Juniper Networks Session Smart Conductor | NVD, CVE.org | |
| CVE-2026-118510 RCE | Laravel MongoDB whereDoesntHave misses deny records for numeric string IDs | 8.8 HIGH | MongoDB Laravel MongoDB | NVD, CVE.org | |
| CVE-2026-116778 RCE Truy cập trái phép | FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution | 8.8 HIGH | FOGProject fogproject | NVD, CVE.org | |
| CVE-2026-56828 Truy cập trái phép | Shopper: read-only team permissions allow administrator creation and permission escalation | 8.8 HIGH | shopperlabs shopper | NVD, CVE.org | |
| CVE-2026-59979 Truy cập trái phép | YosemiteCrew: Missing organization authorization on service and PMS library/template routes | 8.3 HIGH | YosemiteCrew Yosemite-Crew | NVD, CVE.org | |
| CVE-2026-44179 RCE | XWiki Pro Macros: excerpt-include title and content injection executes code | 9.9 CRITICAL | xwikisas xwiki-pro-macros | NVD, CVE.org | |
| CVE-2026-115968 RCE | WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability | 9.8 CRITICAL | Ultimate Member Ultimate Member | NVD, CVE.org | |
| CVE-2026-116389 RCE | WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability | 8.8 HIGH | crossi72 Phoenix Media Rename | NVD, CVE.org | |
| CVE-2026-105420 RCE Lộ dữ liệu | Path Traversal in Wing WFTP Server leading to Remote Code Execution | 9.4 CRITICAL | Wing Soft Technology Wing FTP Server | NVD, CVE.org | |
| CVE-2026-59185 Truy cập trái phép | identrail: Cross-tenant GitHub installation binding without ownership verification | 8.5 HIGH | identrail identrail | NVD, CVE.org | |
| CVE-2026-116391 RCE | WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerability | 8.8 HIGH | GS Plugins GS Logo Slider | NVD, CVE.org | |
| CVE-2026-115904 RCE | Topluyo Desktop for Linux has an OS Command Injection issue | 9.6 CRITICAL | topluyo App | NVD, CVE.org | |
| CVE-2026-67073 RCE Truy cập trái phép Lộ dữ liệu | HCL BigFix AEX is affected by multiple security vulnerabilities. | 8.6 HIGH | HCL Software BigFix AEX | NVD, CVE.org | |
| CVE-2026-67074 RCE | HCL BigFix AEX is affected by multiple security vulnerabilities. | 9.1 CRITICAL | HCL Software BigFix AEX | NVD, CVE.org | |
| CVE-2026-114278 RCE | Unauthenticated Command Injection via kubeconfig Username in che-machine-exec | 9.8 CRITICAL | Eclipse Foundation Eclipse Che | NVD, CVE.org | |
| CVE-2026-118477 RCE | KaliFast Project Management Platform ei_git_repo_url OS Command Injection | 9.8 CRITICAL | EISGE Kalifast | NVD, CVE.org |