Lỗ hổng mới

Lỗ hổng nghiêm trọng mới công bố (CVSS ≥ ngưỡng) hoặc đang bị khai thác thực tế (CISA KEV), gom từ NVD, GitHub Advisory, CVE.org, OSV và CISA KEV.

/
RCE150 Truy cập trái phép82 Lộ dữ liệu41

82 lỗ hổng

ID Tóm tắt CVSS Sản phẩm / package Công bố Nguồn
CVE-2026-119572 Truy cập trái phép Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Provider 8.7 HIGH traefik traefik NVD, CVE.org
CVE-2026-75882 Truy cập trái phép Improper access control vulnerability in ESET Encryption products for Windows 8.5 HIGH ESET spol. s.r.o. ESET Endpoint Encryption, ESET spol. s.r.o. ESET Full Disk Encryption NVD, CVE.org
CVE-2026-119420 Truy cập trái phép Lago through 1.55.0 Authentication Bypass via acceptInvite GraphQL Mutation 8.8 HIGH getlago lago NVD, CVE.org
CVE-2026-22110 Truy cập trái phép Missing authentication check on POST/PUT requests 8.7 HIGH Delta Electronics Delta UFC500 NVD, CVE.org
CVE-2026-22105 Truy cập trái phép Use of default password based on serial number 8.7 HIGH Delta Electronics Delta UFC500 NVD, CVE.org
CVE-2026-22109 Truy cập trái phép Default WebUI passwords stored in plaintext 8.4 HIGH Delta Electronics Delta UFC500 NVD, CVE.org
CVE-2026-59387 Truy cập trái phép Broken access control restriction in Cloud Controller API 8.8 HIGH Cloud Foundry CAPI (Cloud Controller API), Cloud Foundry cf-deployment NVD, CVE.org
CVE-2026-82104 Truy cập trái phép API permission bypass via logic bug 9.4 CRITICAL Teltonika Networks RUT, Teltonika Networks RUTX +12 NVD, CVE.org
CVE-2026-104368 Truy cập trái phép Export and Import Users and Customers <= 2.7.5 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via Biographical Info Field 8.8 HIGH webtoffee Export and Import Users and Customers NVD, CVE.org
CVE-2026-92744 RCE Truy cập trái phép Delinea Privilege Manager agent unauthenticated remote code execution vulnerability 8.7 HIGH Delinea Privilege Manager NVD, CVE.org
CVE-2026-61707 RCE Truy cập trái phép SOCFortress CoPilot: Stored case-report template injection permits backend code execution 9.0 CRITICAL socfortress CoPilot NVD, CVE.org
CVE-2026-61671 Truy cập trái phép WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle Classes 8.1 HIGH LabRedesCefetRJ WeGIA NVD, CVE.org
CVE-2026-103093 RCE Truy cập trái phép Sandbox Escape via Table Rotation in ServiceNow AI Platform 9.4 CRITICAL ServiceNow ServiceNow AI Platform NVD, CVE.org
CVE-2026-119168 Truy cập trái phép Nomad allocation data migration may allow host directory permission modification via symlink following 8.8 HIGH HashiCorp Nomad, HashiCorp Nomad Enterprise NVD, CVE.org
CVE-2026-119115 Truy cập trái phép Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes 8.5 HIGH AWS aws-privateca-issuer NVD, CVE.org
GHSA-w9x9-j56r-h98r Truy cập trái phép @eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy 8.2 HIGH npm/@eeacms/volto-chatbot GitHub Advisory, OSV.dev
CVE-2026-119129 Truy cập trái phép ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 Account Takeover via Device Authorization Approval 8.1 HIGH zitadel zitadel NVD, CVE.org
CVE-2026-119127 Truy cập trái phép ZITADEL 4.0.0 before 4.19.5 Account Takeover via Login V2 Host Header Injection 8.1 HIGH zitadel zitadel NVD, CVE.org
CVE-2026-90867 Truy cập trái phép Improper Access Control of Web Admin Console in Progress WS_FTP Server 8.1 HIGH Progress Software WS_FTP Server NVD, CVE.org
CVE-2026-90863 RCE Truy cập trái phép Privilege Escalation via Missing Authorization in WS_FTP Manager 9.1 CRITICAL Progress Software WS_FTP Server NVD, CVE.org
CVE-2026-84295 Truy cập trái phép Improper Authentication in Progress WS_FTP Server 10.0 CRITICAL Progress Software WS_FTP Server NVD, CVE.org
CVE-2026-118082 Truy cập trái phép WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerability 8.8 HIGH BuddyBoss Buddyboss Platform NVD, CVE.org
CVE-2026-88077 Truy cập trái phép Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 8.8 HIGH Microsoft Microsoft Edge (Chromium-based) NVD, CVE.org
CVE-2026-85899 RCE Truy cập trái phép Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 8.1 HIGH Microsoft Microsoft Edge (Chromium-based) NVD, CVE.org
CVE-2026-96203 RCE Truy cập trái phép Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 8.8 HIGH Microsoft Microsoft Edge (Chromium-based) NVD, CVE.org
CVE-2026-93680 Truy cập trái phép Langflow OSS is affected by multiple vulnerabilities 9.8 CRITICAL IBM Langflow OSS, langflow langflow NVD, CVE.org
CVE-2026-103092 Truy cập trái phép Langflow OSS is affected by multiple vulnerabilities 8.8 HIGH IBM Langflow OSS, langflow langflow NVD, CVE.org
CVE-2026-107327 RCE Truy cập trái phép Langflow OSS is affected by multiple vulnerabilities 8.8 HIGH IBM Langflow OSS, langflow langflow NVD, CVE.org
CVE-2026-110196 RCE Truy cập trái phép Langflow OSS is affected by multiple vulnerabilities 8.8 HIGH IBM Langflow OSS, langflow langflow NVD, CVE.org
CVE-2026-49142 Truy cập trái phép Lộ dữ liệu OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[] 8.8 HIGH openemr openemr NVD, CVE.org
CVE-2026-111419 Truy cập trái phép Hardcoded API Token in Foxit Official Website 8.6 HIGH Foxit Software Inc. foxit.com NVD, CVE.org
CVE-2026-111357 KEV Truy cập trái phép Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability — Ivanti Connect Secure CISA KEV