최근 6개월의 모든 CVE를 매일 업데이트합니다.

14개 중 14개 표시

• 치명CVE-2026-76460CVSS 점수 10.02026. 9. 16.

  A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vuln

  CWE-648cisco identity_services_enginecisco identity_services_engine_passive_identity_connector
• 높음CVE-2026-63727CVSS 점수 8.82026. 7. 28.

  Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper privilege escalation vulnerability in the user management API. An authenticated attacker who is able to access the Anchore Enterprise API could issue an API call capable of modifyi

  CWE-648
• 높음CVE-2026-54424CVSS 점수 8.42026. 7. 4.

  An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Privilege. This issue affects Parsec through v2026-05-04.0. The patched version is Parsec for Windows version 150-104a. A user can generate a s

  CWE-648
• 높음CVE-2026-11877CVSS 점수 7.52026. 6. 24.

  An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3.

  CWE-648microfocus access_manager
• 높음CVE-2026-9560CVSS 점수 7.82026. 5. 26.

  Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel

  CWE-78CWE-267CWE-270openvpn connect
• 치명CVE-2026-41225CVSS 점수 9.12026. 5. 13.

  A vulnerability exists in iControl REST where a highly privileged, authenticated attacker with at least the Manager role can create configuration objects that allow running arbitrary commands. Note: Software versions which have reached End of Technical Support

  CWE-648f5 big-ip_access_policy_managerf5 big-ip_advanced_firewall_managerf5 big-ip_advanced_web_application_firewall
• 치명CVE-2026-41386CVSS 점수 9.12026. 4. 28.

  OpenClaw before 2026.3.22 contains a privilege escalation vulnerability where bootstrap setup codes are not bound to intended device roles and scopes during pairing. Attackers can exploit this during first-use device pairing to escalate privileges beyond their

  CWE-648openclaw openclaw
• 치명CVE-2026-41329CVSS 점수 9.92026. 4. 21.

  OpenClaw before 2026.3.31 contains a sandbox bypass vulnerability allowing attackers to escalate privileges via heartbeat context inheritance and senderIsOwner parameter manipulation. Attackers can exploit improper context validation to bypass sandbox restrict

  CWE-648openclaw openclaw
• 높음CVE-2025-54502CVSS 점수 7.52026. 4. 16.

  Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.

  CWE-668CWE-648
• 높음CVE-2026-35669CVSS 점수 8.82026. 4. 10.

  OpenClaw before 2026.3.25 contains a privilege escalation vulnerability in gateway-authenticated plugin HTTP routes that incorrectly mint operator.admin runtime scope regardless of caller-granted scopes. Attackers can exploit this scope boundary bypass to gain

  CWE-648openclaw openclaw
• 높음CVE-2026-35663CVSS 점수 8.82026. 4. 10.

  OpenClaw before 2026.3.25 contains a privilege escalation vulnerability allowing non-admin operators to self-request broader scopes during backend reconnect. Attackers can bypass pairing requirements to reconnect as operator.admin, gaining unauthorized adminis

  CWE-648openclaw openclaw
• 높음CVE-2026-35645CVSS 점수 8.12026. 4. 9.

  OpenClaw before 2026.3.25 contains a privilege escalation vulnerability in the gateway plugin subagent fallback deleteSession function that uses a synthetic operator.admin runtime scope. Attackers can exploit this by triggering session deletion without a reque

  CWE-648CWE-863openclaw openclaw
• 높음CVE-2026-35639CVSS 점수 8.82026. 4. 9.

  OpenClaw before 2026.3.22 contains a privilege escalation vulnerability in the device.pair.approve method that allows an operator.pairing approver to approve pending device requests with broader operator scopes than the approver actually holds. Attackers can e

  CWE-648openclaw openclaw
• 높음CVE-2026-35625CVSS 점수 7.82026. 4. 9.

  OpenClaw before 2026.3.25 contains a privilege escalation vulnerability where silent local shared-auth reconnects auto-approve scope-upgrade requests, widening paired device permissions from operator.read to operator.admin. Attackers can exploit this by trigge

  CWE-648openclaw openclaw