كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 5 من 5

• عاليةCVE-2026-76413درجة CVSS 8.216‏/09‏/2026

  A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper ma

  CWE-1259
• متوسطةCVE-2026-58429درجة CVSS 4.913‏/08‏/2026

  Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints

  CWE-284CWE-1259
• عاليةCVE-2026-54593درجة CVSS 8.128‏/07‏/2026

  Pterodactyl is a free, open-source game server management panel. Prior to Panel version 1.12.3 and Wings version 1.12.2, the Wings /upload/file endpoint accepted any valid panel-signed JWT that contained server_uuid, user_uuid, and unique_id claims without che

  CWE-1259CWE-1270
• عاليةCVE-2026-25700درجة CVSS 7.210‏/06‏/2026

  Improper Restriction of Security Token Assignment vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Previously issued administrative tokens were not invalidated after an administrator account was suspended, deleted, or deactivate

  CWE-1259apache answer
• منخفضةCVE-2026-40264درجة CVSS 2.721‏/04‏/2026

  OpenBao is an open source identity-based secrets management system. OpenBao's namespaces provide multi-tenant separation. Prior to version 2.5.3, a tenant who leaks token accessors can have their token revoked or renewed by a privileged administrator in anothe

  CWE-1259openbao openbao