Baza CVE
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| antiword | CVE-2026-111678 Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8ChrInfo in prop8.c because FKP run counts and grpprl offsets are not bounded. Attackers can supply a crafted .doc file with malicious FKP pages to read past the 512-byte stack buffer, crashing antiword… |
4,8 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| ekko-studio | CVE-2026-111679 Ekko Studio through 0.7.36 contains a missing authorization vulnerability that allows any authenticated non-super_admin user to list and clear server-wide login lockouts via /api/auth/locked-ips. Attackers can send DELETE requests without an ip parameter to invoke unlockAll(), disabling the login… |
5,3 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| APIPark | CVE-2026-111680 APIPark through 1.9.7-beta contains an authorization bypass vulnerability that allows authenticated team managers to access other teams' services and applications by supplying their own team id in the team query parameter. Attackers can target service or app ids exposed by /api/v1/simple/services… |
7,2 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| Zr.Admin.NET | CVE-2026-111669 ZR.Admin.NET through 3.8.2 contains an sql injection vulnerability that allows authenticated attackers to manipulate the ORDER BY clause by supplying a crafted PagerInfo.Sort query parameter to the shared ToPage paging helper. Attackers holding the system:user:list permission can inject subquery… |
7,1 | 0,42 % | Brak wpisu w KEV nie wyklucza ataków | |
| clickvisual | CVE-2026-111670 ClickVisual through 1.1.2 contains a missing authorization vulnerability in the /api/v2/reports handlers that allows authenticated low-privileged users to access ClickHouse instances they were not granted. Attackers can iterate the instance-id parameter in ReportSourceDatabases,… |
5,3 | 0,32 % | Brak wpisu w KEV nie wyklucza ataków | |
| cube-studio | CVE-2026-111671 Cube-studio through 2026.09.01 contains an insecure direct object reference vulnerability that allows authenticated users to stop, reset, clear or redeploy other users' notebooks and services by id. Attackers can pass sequential ids to lifecycle endpoints in view_notebook.py,… |
7,1 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków | |
| cube-studio | CVE-2026-111672 Cube-studio through 2026.09.01 contains a missing authorization vulnerability in myapp/views/view_pipeline.py that allows authenticated users to view or copy other project groups' pipelines by id. Attackers can enumerate sequential pipeline ids via the web, log, monitoring, pod, and copy_pipeline… |
5,3 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| IceCMS | CVE-2026-111673 IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify, delete, or disable any account because /User/** is excluded from the Shiro jwt filter. Attackers can send PUT requests to /User/updateUser to set a new password and role on any… |
9,3 | 0,55 % | Brak wpisu w KEV nie wyklucza ataków | |
| chaskiq | CVE-2026-111663 Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to fetch arbitrary URLs via the createUrlUpload GraphQL mutation. Attackers can submit internal URLs, including cloud instance metadata endpoints, through POST /graphql and retrieve the… |
9,2 | 0,37 % | Brak wpisu w KEV nie wyklucza ataków | |
| portmaster | CVE-2026-111664 Safing Portmaster before 2.2.5 contains a missing authorization vulnerability that allows unprivileged local processes to force updates by calling the POST /api/v1/updates/from-url endpoint registered with api.PermitAnyone. Attackers can supply an attacker-controlled index URL that bypasses… |
4,8 | 0,12 % | Brak wpisu w KEV nie wyklucza ataków | |
| Piranha CMS | CVE-2026-111665 Piranha CMS through 12.2 contains a missing authorization vulnerability in the Piranha.Manager LanguageApiController that allows any authenticated manager user to list, create, edit and delete site languages without the granular Language, LanguageAdd, LanguageEdit or LanguageDelete permissions.… |
5,3 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| steedos-platform | CVE-2026-111666 Steedos Platform through 3.0.15-beta.51 contains an authorization bypass vulnerability that allows authenticated users to read other tenants' report definitions by querying the reports object. Because objectql's callAdapter skips space filtering for enable_space_global objects on find/findOne,… |
5,3 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| rebuild | CVE-2026-111667 REBUILD through 4.5.0 contains a missing authorization vulnerability in TaskCommentController.commentList that allows authenticated low-privileged users to read task comments without project membership checks. Attackers can supply the id of a task in a private project to the /project/comments/list… |
5,3 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków | |
| AIHelms | CVE-2026-111668 AIHelms through 0.1.25 contains a missing authorization vulnerability in apps/api/v1/efficiency.py that allows authenticated low-privileged users to bypass efficiency:read and efficiency:write permission checks. Attackers can query routes like /cost/detail, /top-users and /budget to read… |
5,3 | 0,29 % | Brak wpisu w KEV nie wyklucza ataków | |
| beikeshop | CVE-2026-111657 BeikeShop through 2.0.0.31 contains an insecure direct object reference vulnerability in the markAsShipped handler of RmaController that allows authenticated customers to modify other customers' returns. Attackers can submit sequential RMA ids to the account/rmas/{id}/mark_as_shipped endpoint to… |
5,3 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| SSCMS | CVE-2026-111658 SiteServer SSCMS through 7.4.0 contains an authorization bypass vulnerability in ChannelsController that allows site-scoped administrators to access other sites' channels by supplying foreign channel IDs. Attackers with Channels permission on one site can read and overwrite another site's channel… |
5,1 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| waynboot-mall | CVE-2026-111659 Waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to forge orders by calling the internal /callback/order/submit message-queue callback. Attackers can supply arbitrary userId, addressId and cart ids in the order JSON to create orders… |
6,9 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| waynboot-mall | CVE-2026-111660 waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to cancel any member's pending order via the /callback/order/unpaid endpoint. Attackers can submit predictable orderSn values, built from epoch seconds and a sequential counter, to… |
6,9 | 0,51 % | Brak wpisu w KEV nie wyklucza ataków | |
| waynboot-mall | CVE-2026-111661 waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to send arbitrary email by calling the anonymously mapped /callback/email endpoint. Attackers can POST caller-supplied subject, content, and recipient to EmailController.sendEmail,… |
6,9 | 0,35 % | Brak wpisu w KEV nie wyklucza ataków | |
| chaskiq | CVE-2026-111662 Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the url parameter of the /oembed endpoint. Attackers can target loopback, private, or cloud-metadata addresses through FetchLinkCardService,… |
6,9 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| chronoframe | CVE-2026-111650 ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/ handlers that allows unauthenticated attackers to reconfigure already configured instances. Attackers can POST to /api/wizard/storage to activate an attacker-controlled S3 or OpenList provider,… |
8,8 | 0,42 % | Brak wpisu w KEV nie wyklucza ataków | |
| Digital-Infrastructure | CVE-2026-111651 Risesoft Digital-Infrastructure through 9.6.11 contains a missing authorization vulnerability in the log module DownloadController that allows authenticated users to export any tenant's personnel directory. Attackers can supply another tenant's tenantId to exportLoginXLS or exportNotLoginXLS to… |
7,1 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| engineercms | CVE-2026-111652 Engineercms through 2.0.5 contains a missing authorization vulnerability in AttachController.Attachment that allows unauthenticated attackers to download project image and video attachments. Attackers can request known or derived /attachment/* paths for .jpg, .png, .bmp, or .mp4 files, which are… |
6,9 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| 53AIHub | CVE-2026-111653 53AIHub through 0.5.3 contains a missing authentication vulnerability that allows unauthenticated attackers to overwrite any enterprise's profile by sending PUT requests to /api/enterprises/:id. Because UpdateEnterprise only enforces checks when IS_SAAS is true, attackers can enumerate sequential… |
6,9 | 0,45 % | Brak wpisu w KEV nie wyklucza ataków | |
| FastBee | CVE-2026-111654 FastBee through 2.1.0 contains an insecure direct object reference vulnerability that allows authenticated low-privilege users to access other users' device groups because GroupController queries lack owner checks. Attackers, including self-registered users, can supply sequential group IDs to… |
5,3 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 14.11.2026, 23:02 UTC – 15.11.2026, 04:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.