최근 6개월의 모든 CVE를 매일 업데이트합니다.

5개 중 5개 표시

• 높음CVE-2026-76413CVSS 점수 8.22026. 9. 16.

  A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper ma

  CWE-1259
• 중간CVE-2026-58429CVSS 점수 4.92026. 8. 13.

  Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints

  CWE-284CWE-1259
• 높음CVE-2026-54593CVSS 점수 8.12026. 7. 28.

  Pterodactyl is a free, open-source game server management panel. Prior to Panel version 1.12.3 and Wings version 1.12.2, the Wings /upload/file endpoint accepted any valid panel-signed JWT that contained server_uuid, user_uuid, and unique_id claims without che

  CWE-1259CWE-1270
• 높음CVE-2026-25700CVSS 점수 7.22026. 6. 10.

  Improper Restriction of Security Token Assignment vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Previously issued administrative tokens were not invalidated after an administrator account was suspended, deleted, or deactivate

  CWE-1259apache answer
• 낮음CVE-2026-40264CVSS 점수 2.72026. 4. 21.

  OpenBao is an open source identity-based secrets management system. OpenBao's namespaces provide multi-tenant separation. Prior to version 2.5.3, a tenant who leaks token accessors can have their token revoked or renewed by a privileged administrator in anothe

  CWE-1259openbao openbao