Lỗ hổng mới
Lỗ hổng nghiêm trọng mới công bố (CVSS ≥ ngưỡng) hoặc đang bị khai thác thực tế (CISA KEV), gom từ NVD, GitHub Advisory, CVE.org, OSV và CISA KEV.
| ID | Tóm tắt | CVSS | Sản phẩm / package | Công bố | Nguồn |
|---|---|---|---|---|---|
| CVE-2026-96196 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | 8.8 HIGH | Microsoft Microsoft Edge (Chromium-based) | NVD, CVE.org | |
| CVE-2026-85899 RCE Truy cập trái phép | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 8.1 HIGH | Microsoft Microsoft Edge (Chromium-based) | NVD, CVE.org | |
| CVE-2026-96203 RCE Truy cập trái phép | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 8.8 HIGH | Microsoft Microsoft Edge (Chromium-based) | NVD, CVE.org | |
| CVE-2026-96192 RCE | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 8.8 HIGH | Microsoft Microsoft Edge (Chromium-based), microsoft edge | NVD, CVE.org | |
| CVE-2026-18894 RCE | Langflow OSS is affected by multiple vulnerabilities | 9.8 CRITICAL | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-93680 Truy cập trái phép | Langflow OSS is affected by multiple vulnerabilities | 9.8 CRITICAL | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-103092 Truy cập trái phép | Langflow OSS is affected by multiple vulnerabilities | 8.8 HIGH | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-101288 RCE | Langflow OSS is affected by multiple vulnerabilities | 8.8 HIGH | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-104317 RCE | Langflow OSS is affected by multiple vulnerabilities | 9.8 CRITICAL | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-104324 RCE | Langflow OSS is affected by multiple vulnerabilities | 8.8 HIGH | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-104328 RCE | Langflow OSS is affected by multiple vulnerabilities | 8.8 HIGH | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-104339 RCE | Langflow OSS is affected by multiple vulnerabilities | 9.8 CRITICAL | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-107326 RCE | Langflow OSS is affected by multiple vulnerabilities | 8.8 HIGH | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-107327 RCE Truy cập trái phép | Langflow OSS is affected by multiple vulnerabilities | 8.8 HIGH | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-107328 RCE | Langflow OSS is affected by multiple vulnerabilities | 8.8 HIGH | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-107329 RCE | Langflow OSS is affected by multiple vulnerabilities | 8.8 HIGH | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-110186 RCE | Langflow OSS is affected by multiple vulnerabilities | 9.8 CRITICAL | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-110193 RCE | Langflow OSS is affected by multiple vulnerabilities | 8.8 HIGH | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-110196 RCE Truy cập trái phép | Langflow OSS is affected by multiple vulnerabilities | 8.8 HIGH | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-110309 RCE | Langflow OSS is affected by multiple vulnerabilities | 8.8 HIGH | IBM Langflow OSS, langflow langflow | NVD, CVE.org | |
| CVE-2026-96198 RCE | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 8.8 HIGH | Microsoft Microsoft Edge (Chromium-based) | NVD, CVE.org | |
| CVE-2026-96199 RCE | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 8.8 HIGH | Microsoft Microsoft Edge (Chromium-based) | NVD, CVE.org | |
| CVE-2026-85897 RCE | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 8.8 HIGH | Microsoft Microsoft Edge (Chromium-based) | NVD, CVE.org | |
| CVE-2026-85890 RCE | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 8.8 HIGH | Microsoft Microsoft Edge (Chromium-based) | NVD, CVE.org | |
| CVE-2026-93570 Lộ dữ liệu | XML External Entity injection in Szafir and Szafir Weryfikująca | 8.2 HIGH | Krajowa Izba Rozliczeniowa Szafir, Krajowa Izba Rozliczeniowa Szafir Weryfikująca | NVD, CVE.org | |
| CVE-2026-115709 Lộ dữ liệu | Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss | 8.2 HIGH | Elastic Elastic Cloud Enterprise | NVD, CVE.org | |
| CVE-2026-39736 Lộ dữ liệu | WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability | 8.5 HIGH | Crocoblock JetEngine | NVD, CVE.org | |
| CVE-2026-116399 | WordPress InstaWP Connect plugin <= 0.1.4.2 - Cross Site Request Forgery (CSRF) vulnerability | 8.8 HIGH | InstaWP InstaWP Connect | NVD, CVE.org | |
| CVE-2026-119050 RCE | Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection | 8.1 HIGH | agno-agi agno | NVD, CVE.org | |
| CVE-2026-49142 Truy cập trái phép Lộ dữ liệu | OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[] | 8.8 HIGH | openemr openemr | NVD, CVE.org | |
| RUSTSEC-2026-0427 Lộ dữ liệu | sn-releases: extract_release_archive writes archive entries without a path-traversal check (zip-slip) | 8.8 HIGH | rust/sn-releases | OSV.dev | |
| CVE-2026-119028 RCE | oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non-String Enum Values | 8.8 HIGH | oapi-codegen oapi-codegen | NVD, CVE.org | |
| CVE-2026-97854 RCE | Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the ... | 9.8 CRITICAL | Yamaha Corporation NWR100 | NVD, CVE.org | |
| CVE-2026-103665 RCE | The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs). When the installer is launched in a directory containing a special... | 8.4 HIGH | Yamaha Corporation Yamaha LAN Monitor for Windows | NVD, CVE.org | |
| CVE-2026-97860 RCE | YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary cod... | 8.4 HIGH | Yamaha Corporation YMS-VPN8, Yamaha Corporation YMS-VPN8-CP | NVD, CVE.org | |
| CVE-2026-76418 KEV | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability | 8.6 HIGH | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software, Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software +3 | CISA KEV, NVD, CVE.org | |
| CVE-2026-111357 KEV Truy cập trái phép | Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability | — | Ivanti Connect Secure | CISA KEV | |
| CVE-2026-118527 KEV | Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability | — | Ivanti Connect Secure | CISA KEV | |
| CVE-2026-97229 KEV RCE | GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability | — | GitLab Community Edition and Enterprise Edition | CISA KEV |