Все CVE за последние шесть месяцев, обновляются ежедневно.

Показано 9 из 9

• НизкийCVE-2026-18858Оценка CVSS 3.34 сент. 2026 г.

  IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH.

  CWE-267ibm i
• НизкийCVE-2026-81161Оценка CVSS 3.32 сент. 2026 г.

  Privilege Defined With Unsafe Actions vulnerability in Drupal Content Moderation Notifications allows Privilege Escalation. This issue affects Content Moderation Notifications versions: from 0.0.0 to 3.9.0.

  CWE-267
• ВысокийCVE-2025-36255Оценка CVSS 7.519 авг. 2026 г.

  IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged user roles due to improper privileged defined with unsafe actions.

  CWE-267ibm ds8900f_firmwareibm ds8900fibm ds8a00_firmware
• КритическийCVE-2026-10090Оценка CVSS 9.05 авг. 2026 г.

  A flaw was found in the Application Subscription controller (multicluster-operators-subscription) of Red Hat Advanced Cluster Management for Kubernetes (ACM). A user with namespace-scoped "edit" privileges in an ACM hub namespace can create a Channel resource

  CWE-267
• НизкийCVE-2026-6816Оценка CVSS 3.828 мая 2026 г.

  An access bypass vulnerability in Drupal TFA Basic Plugins allows users with the administer users permission to view or generate recovery codes for other users. This issue affects TFA Basic Plugins: from 7.x-1.0 through 7.x-1.2.

  CWE-267tfa_basic_plugins_project tfa_basic_plugins
• ВысокийCVE-2026-9560Оценка CVSS 7.826 мая 2026 г.

  Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel

  CWE-78CWE-267CWE-270openvpn connect
• ВысокийCVE-2026-42406Оценка CVSS 8.713 мая 2026 г.

  A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configuration objects that allow running arbitrary commands. Note: Software versions which have reached

  CWE-267f5 big-ip_access_policy_managerf5 big-ip_advanced_firewall_managerf5 big-ip_advanced_web_application_firewall
• КритическийCVE-2026-29646Оценка CVSS 9.820 апр. 2026 г.

  In OpenXiangShan NEMU prior to 55295c4, when running with RVH (Hypervisor extension) enabled, a VS-mode guest write to the supervisor interrupt-enable CSR (sie) may be handled incorrectly and can influence machine-level interrupt enable state (mie). This break

  CWE-267
• ВысокийCVE-2026-27314Оценка CVSS 8.87 апр. 2026 г.

  Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their own certificate identity with an arbitrary role, including a superuser role, and authenticate as that

  CWE-267apache cassandra