Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| NR256CN | CVE-2026-111711 Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's user_ok() function, which copies Basic-auth usernames with unbounded strcpy() calls into 64-byte stack buffers. Unauthenticated attackers can send a username longer than 63 bytes… |
9,3 | 0,49 % | Brak wpisu w KEV nie wyklucza ataków | |
| langchat | CVE-2026-111704 LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated remote attackers to access REST controllers because no Sa-Token interceptor is registered. Attackers can query /api/v1/auth/users to read plaintext passwords, retrieve LLM provider API keys,… |
9,3 | 0,65 % | Brak wpisu w KEV nie wyklucza ataków | |
| whaticket-community | CVE-2026-111708 WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup. Attackers can omit the profile field or set it to admin, gaining user management, settings, and access to all… |
9,3 | 0,58 % | Brak wpisu w KEV nie wyklucza ataków | |
| simple-admin-core | CVE-2026-111690 Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge super administrator tokens by using the hard-coded Auth.AccessSecret in api/etc/core.yaml. Attackers can sign a JWT with the public secret and roleId claim 001 to gain… |
9,3 | 0,58 % | Brak wpisu w KEV nie wyklucza ataków | |
| wimoor | CVE-2026-111691 WIMOOR through commit ec86736 contains an authentication bypass vulnerability that allows attackers to impersonate any tenant and privilege level by sending an unsigned X-USERINFO header. Attackers reaching backend service ports directly, bypassing the gateway, can forge companyid and manager or… |
9,1 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| databuff | CVE-2026-111692 DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenService. Attackers can sign a payload of admin and a future expiry with the default dev-secret to… |
9,3 | 0,61 % | Brak wpisu w KEV nie wyklucza ataków | |
| databuff | CVE-2026-111693 DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allows unauthenticated attackers to gain administrator access using the built-in admin/Databuff@123 account. Attackers can POST these credentials to /webapi/api/v1/auth/login to obtain an administrator… |
9,3 | 0,5 % | Brak wpisu w KEV nie wyklucza ataków | |
| we-mp-rss | CVE-2026-111687 WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/{feed_id} endpoint. Attackers can supply a non-built-in ext value and a {{=expression}} template whose object-subclass… |
9,3 | 1 % | Brak wpisu w KEV nie wyklucza ataków | |
| course-tencent-cloud | CVE-2026-111675 Course-tencent-cloud through 2.0.1 contains an improper restriction of authentication attempts vulnerability that allows unauthenticated attackers to brute force 6-digit SMS/email verification codes, which are never invalidated or attempt-limited. Attackers who know a victim's phone or email can… |
9,1 | 0,53 % | Brak wpisu w KEV nie wyklucza ataków | |
| IceCMS | CVE-2026-111673 IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify, delete, or disable any account because /User/** is excluded from the Shiro jwt filter. Attackers can send PUT requests to /User/updateUser to set a new password and role on any… |
9,3 | 0,55 % | Brak wpisu w KEV nie wyklucza ataków | |
| chaskiq | CVE-2026-111663 Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to fetch arbitrary URLs via the createUrlUpload GraphQL mutation. Attackers can submit internal URLs, including cloud instance metadata endpoints, through POST /graphql and retrieve the… |
9,2 | 0,37 % | Brak wpisu w KEV nie wyklucza ataków | |
| misaka_danmu_server | CVE-2026-111643 Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprotected POST /api/ui/config-history/rollback endpoint. Attackers can set the ipWhitelist key to their own /32 address, or alter… |
9,3 | 0,58 % | Brak wpisu w KEV nie wyklucza ataków | |
| StaffDeck | CVE-2026-111636 OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded default app_secret. Attackers can sign an HMAC-SHA256 token for the seeded 'admin' user in 'tenant_demo' to gain full… |
9,2 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| FastapiAdmin | CVE-2026-111641 FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain sessions for any user by abusing unprotected auto-login endpoints. Attackers can list users via /api/v1/auth/auto-login/users, mint a superuser auto-login token, and exchange it… |
9,3 | 0,43 % | Brak wpisu w KEV nie wyklucza ataków | |
| Damselfly | CVE-2026-111626 Webreaper Damselfly through 4.5.3 contains an authentication bypass vulnerability that allows unauthenticated attackers to access all /api/* routes because controller authorization attributes are commented out. Attackers can send PUT /api/users with Admin roles to create administrator accounts, or… |
9,3 | 0,45 % | Brak wpisu w KEV nie wyklucza ataków | |
| Jpom | CVE-2026-111605 Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belonging to other workspaces by supplying foreign SSH asset ids. Attackers with SSH file permissions in any workspace can call download, upload,… |
8,8 | 0,37 % | Brak wpisu w KEV nie wyklucza ataków | |
| FreeRTOS-Kernel | CVE-2026-109587 Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled builds to read and write privileged kernel memory outside the regions assigned to it, via a buffer argument passed to an MPU system… |
9,3 | 0,14 % | Brak wpisu w KEV nie wyklucza ataków | |
| FreeRTOS-Kernel | CVE-2026-109588 Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MPU port might allow, under certain conditions, an unprivileged task on MPU-enabled builds to read or write privileged kernel memory beyond… |
9,3 | 0,16 % | Brak wpisu w KEV nie wyklucza ataków | |
| FreeRTOS-Plus-TCP | CVE-2026-102551 Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router… |
9,2 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| server | CVE-2026-92262 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50# bypass prefix is affected because it allows the #mysql50# prefix to bypass normal table-name filesystem encoding. An attacker can trigger the issue… |
9,9 | 1,45 % | Brak wpisu w KEV nie wyklucza ataków | |
| server | CVE-2026-85746 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_AsText can write beyond an allocated output buffer when converting deeply nested GeometryCollections because recursive WKT serialization does not account for… |
9,9 | 0,97 % | Brak wpisu w KEV nie wyklucza ataków | |
| server | CVE-2026-85748 MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYS_REFCURSOR handling is affected because cursor-array reallocation can leave stale references in routine contexts. A low-privileged attacker can open a large number of SYS_REFCURSORs and then fetch… |
9,9 | 1,18 % | Brak wpisu w KEV nie wyklucza ataków | |
| dockhand | CVE-2026-57169 Dockhand is a Docker management application. Prior to 1.0.34, the in-browser container terminal endpoint /api/containers/<id>/exec does not enforce authentication on the WebSocket upgrade request. When an unauthenticated attacker has network reach to Dockhand, knows a target container ID, and… |
9,6 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| RIOT | CVE-2026-49868 RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.07, _parse_reply() in sys/net/application_layer/dhcpv6/client.c omits minimum-length validation before passing IA_PD and IA_NA option bodies to sub-option… |
9,8 | 0,37 % | Brak wpisu w KEV nie wyklucza ataków | |
| RIOT | CVE-2026-102693 RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's _atwinc15x0_sta_set_current_ssid function uses strcpy to copy an SSID without checking the destination size. When… |
9,6 | 0,23 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 07:02 UTC – 15.11.2026, 12:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.