ЗаражениеИдея пересекает среды: подтверждённый мем-мост или широкая география на фоне роста.РастётОбъём упоминаний уверенно растёт от часа к часу.региональноеЗначимость (1–5): 1 — локальная рутина, 2 — регионально заметное, 3 — национально значимое, 4 — резонанс в нескольких странах, 5 — глобальное событие.ТехнологииИсправить тему — ваша правка попадёт в обучающие данные21scoreScore 0–100 — композитная оценка виральности: рост объёма упоминаний (35%), ускорение (15%), число независимых источников (20%), географический разброс (15%) и новизна темы (15%). Подробнее — ADR-0004.выше, чем у 70% активных трендов
CVE-2026-84480 (CRITICAL): WWBN AVideo не проверяет истечение срока действия токена восстановления пароля в userRecoverPassSave.json.php, позволяя злоумышленникам использовать истекшие токены для сброса пароля учетной записи
Идея пересекает среды: подтверждённый мем-мост или широкая география на фоне роста.
Пункт tech-выпуска:
- Документов:
- 3644
- Источника:
- 3
- Впервые замечен:
- 16 июл., 14:16 UTC
- Последняя активность:
- 20 сент., 16:16 UTC
✦ Сгенерировано ИИпо документам кластера
Для этого тренда объяснение ещё не сгенерировано.
Нажмите «Обновить объяснение», чтобы запросить его у модели.
Документы-источники
50подтверждено источником- 1nvd.nist.gov44 минуты назад20 сент., 16:16 UTC
CVE-2026-94036 (HIGH): A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus ↗
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwd_set results in improper access controls. The attack must originate from the local network. The exploit has been released to the public and may be used for attacks.
- 2nvd.nist.gov4 часа назад20 сент., 13:17 UTC
CVE-2026-94015 (HIGH): A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file /drug_recommender/Admin/edit_user. ↗
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file /drug_recommender/Admin/edit_user.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
- 3nvd.nist.gov5 часов назад20 сент., 12:17 UTC
CVE-2026-94109 (HIGH): openEQUELLA versions before 2026.1.0 contain a remote code execution vulnerability in FreeMarker template compilation due to an unsandboxed TemplateClassResolve ↗
openEQUELLA versions before 2026.1.0 contain a remote code execution vulnerability in FreeMarker template compilation due to an unsandboxed TemplateClassResolver configuration. Authenticated attackers can inject malicious template expressions through collection summaries, dashboard portlets, or MIME templates to instantiate dangerous classes like freemarker.template.utility.Execute and invoke Runtime.exec for arbitrary command execution.
- 4nvd.nist.gov5 часов назад20 сент., 12:17 UTC
CVE-2026-94107 (HIGH): NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.php endpoint that generates recovery codes using substr(md5(mt ↗
NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.php endpoint that generates recovery codes using substr(md5(mt_rand()), 0, 10). Attackers who know an administrator's email address can request a password reset and predict the token to gain administrative account access without rate limiting or expiration.
- 5nvd.nist.gov5 часов назад20 сент., 12:17 UTC
CVE-2026-94106 (HIGH): getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames in command strings. Attackers can craft ↗
getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames in command strings. Attackers can craft malicious filenames containing shell metacharacters to inject arbitrary commands executed with the privileges of the process embedding getID3.
- 6nvd.nist.gov5 часов назад20 сент., 12:17 UTC
CVE-2026-94104 (HIGH): NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails to validate file extensions for new filen ↗
NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails to validate file extensions for new filenames or when chunks parameter is 2 or higher. Attackers with view-only back-office access can upload PHP files to the web-accessible image/data/ directory and execute them for remote code execution.
- 7nvd.nist.gov5 часов назад20 сент., 12:17 UTC
CVE-2026-94004 (HIGH): A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytag_js.php. The manipulation of the argument ↗
A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytag_js.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used.
- 8nvd.nist.gov5 часов назад20 сент., 12:17 UTC
CVE-2026-94003 (CRITICAL): A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri of the file /cgi-bin/mbox-config of the component Web ↗
A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri of the file /cgi-bin/mbox-config of the component Web Management Interface. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
- 9nvd.nist.gov5 часов назад20 сент., 12:17 UTC
CVE-2026-93997 (HIGH): A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected by this issue is some unknown functionality of the file /Admin/edit_sy ↗
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected by this issue is some unknown functionality of the file /Admin/edit_symptom.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
- 10nvd.nist.gov6 часов назад20 сент., 11:16 UTC
CVE-2026-93980 (HIGH): A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php of the co ↗
A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php of the component Admin Login Form. Executing a manipulation of the argument Password can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
- 11nvd.nist.gov6 часов назад20 сент., 11:16 UTC
CVE-2026-93979 (HIGH): A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/login.php. Performing ↗
A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/login.php. Performing a manipulation of the argument Password results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
- 12nvd.nist.gov6 часов назад20 сент., 11:16 UTC
CVE-2026-93978 (HIGH): A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. S ↗
A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
- 13nvd.nist.gov8 часов назад20 сент., 09:16 UTC
CVE-2026-93974 (HIGH): A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer_0/admins/assessments/datab ↗
A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer_0/admins/assessments/databank/btn_functions.php?action=remove. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.
- 14nvd.nist.gov8 часов назад20 сент., 09:16 UTC
CVE-2026-93973 (HIGH): A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer_0/admins ↗
A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer_0/admins/assessments/subject/btn_functions.php?action=remove. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.
- 15nvd.nist.gov9 часов назад20 сент., 08:16 UTC
CVE-2026-93972 (HIGH): A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /rev ↗
A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessments/course/btn_functions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
- 16nvd.nist.gov9 часов назад20 сент., 08:16 UTC
CVE-2026-93970 (HIGH): A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the file backend/sxdevops/settings.py of the co ↗
A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the file backend/sxdevops/settings.py of the component Settings Handler. The manipulation results in hard-coded credentials. The attack may be performed from remote. The patch is identified as 2b4bf8585c3e731e7a8af30801ea46680bc783f9. Applying a patch is advised to resolve this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed
- 17nvd.nist.gov10 часов назад20 сент., 07:16 UTC
CVE-2026-93969 (HIGH): A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_superuser of the file rbac/services.py. The ↗
A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_superuser of the file rbac/services.py. The manipulation leads to hard-coded credentials. The attack is possible to be carried out remotely. The identifier of the patch is 2b4bf8585c3e731e7a8af30801ea46680bc783f9. It is recommended to apply a patch to fix this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the
- 18nvd.nist.gov12 часов назад20 сент., 05:16 UTC
CVE-2026-93962 (HIGH): A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shm_malloc of the file src/modules/cdp/recei ↗
A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shm_malloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Receiver. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 6.0.8 is sufficient to resolve this issue. This patch is called 38711a3e788de0130
- 19nvd.nist.gov14 часов назад20 сент., 03:16 UTC
CVE-2026-93959 (HIGH): A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer_0/admin ↗
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer_0/admins/assessments/course/btn_functions.php. This manipulation of the argument Course causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
- 20nvd.nist.gov15 часов назад20 сент., 02:16 UTC
CVE-2026-93958 (CRITICAL): A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipul ↗
A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used.
- 21nvd.nist.gov18 часов назад19 сент., 23:17 UTC
CVE-2026-93993 (HIGH): Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Atta ↗
Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user running Vibe.
- 22nvd.nist.gov18 часов назад19 сент., 23:17 UTC
CVE-2026-93992 (HIGH): Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write arbitrary files outside the extraction ↗
Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write arbitrary files outside the extraction directory. Attackers can craft malicious archives with entries containing directory traversal sequences that bypass validation, enabling file write operations when users download and extract archives with AutoExtract enabled.
- 23nvd.nist.gov18 часов назад19 сент., 23:17 UTC
CVE-2026-93991 (HIGH): Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access rev ↗
Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator. Attackers with namespace-scoped list permissions can use a negated namespace field selector to retrieve archived workflows from all other namespaces, exposing spec arguments, parameter values, and annotations.
- 24nvd.nist.gov18 часов назад19 сент., 23:17 UTC
CVE-2026-93990 (HIGH): Expat through 2.8.4 fails to validate low surrogates following high surrogates in UTF-16 input, allowing malformed UTF-16 sequences to be accepted. Attackers ca ↗
Expat through 2.8.4 fails to validate low surrogates following high surrogates in UTF-16 input, allowing malformed UTF-16 sequences to be accepted. Attackers can craft UTF-16 encoded XML with lone high surrogates that consume following code units, hiding markup characters from the parser and enabling XML injection attacks.
- 25nvd.nist.govвчера19 сент., 12:16 UTC
CVE-2026-93985 (CRITICAL): OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaScript webhook template validator that fails to block computed m ↗
OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaScript webhook template validator that fails to block computed member access to constructor chains. Attackers with project write access can create webhook templates using computed property notation to access Function constructor and execute arbitrary code in the worker process.
- 26nvd.nist.govвчера19 сент., 09:16 UTC
CVE-2026-93742 (CRITICAL): A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is the function formWsc of the file /boafrm/formWsc. This manipulat ↗
A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is the function formWsc of the file /boafrm/formWsc. This manipulation of the argument localPin causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
- 27nvd.nist.govвчера19 сент., 06:16 UTC
CVE-2026-93741 (CRITICAL): A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWd ↗
A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulation of the argument submit-url results in buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
- 28nvd.nist.govпозавчера18 сент., 22:17 UTC
CVE-2026-93740 (CRITICAL): A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation ↗
A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
- 29nvd.nist.govпозавчера18 сент., 22:17 UTC
CVE-2026-93739 (CRITICAL): A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /boafrm/formWlAc. Executing a manipulation ↗
A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /boafrm/formWlAc. Executing a manipulation of the argument submit-url can lead to buffer overflow. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
- 30nvd.nist.govпозавчера18 сент., 22:17 UTC
CVE-2026-75885 (CRITICAL): A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows a remote attacker to send ↗
A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows a remote attacker to send crafted devfile payloads. This can lead to Server-Side Request Forgery (SSRF), where the console pod makes requests to internal services and reflects partial responses to the attacker. Additionally, by sending repeated large requests without a specified content length, an attacker can cause unbounded memory growth, leading to a Denial of
- 31nvd.nist.govпозавчера18 сент., 21:18 UTC
CVE-2026-93738 (CRITICAL): A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function formSchedule of the file /boafrm/formSchedule. Performing a manipulat ↗
A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function formSchedule of the file /boafrm/formSchedule. Performing a manipulation of the argument webpage results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
- 32nvd.nist.govпозавчера18 сент., 21:18 UTC
CVE-2026-88097 (HIGH): Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally. ↗
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.
- 33nvd.nist.govпозавчера18 сент., 20:17 UTC
CVE-2026-93839 (CRITICAL): LightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSocket endpoint that allows unauthenticated attackers to register ↗
LightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSocket endpoint that allows unauthenticated attackers to register arbitrary nodes by supplying crafted JSON without peer address validation. Attackers can disclose full user prompts routed to their socket, trigger denial of service by replacing legitimate nodes, or make the PD Master issue requests to internal network addresses.
- 34nvd.nist.govпозавчера18 сент., 20:17 UTC
CVE-2026-84241 (HIGH): IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization. ↗
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization.
- 35nvd.nist.govпозавчера18 сент., 20:17 UTC
CVE-2026-84239 (HIGH): IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements ↗
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command.
- 36nvd.nist.govпозавчера18 сент., 20:17 UTC
CVE-2026-84108 (HIGH): IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation. ↗
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation.
- 37nvd.nist.govпозавчера18 сент., 20:17 UTC
CVE-2026-84106 (HIGH): IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page ↗
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
- 38nvd.nist.govпозавчера18 сент., 20:17 UTC
CVE-2026-84105 (HIGH): IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements ↗
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command.
- 39nvd.nist.govпозавчера18 сент., 20:17 UTC
CVE-2026-84089 (HIGH): IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management. ↗
IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management.
- 40nvd.nist.govпозавчера18 сент., 20:17 UTC
CVE-2026-84086 (HIGH): IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted ↗
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory.
- 41nvd.nist.govпозавчера18 сент., 20:17 UTC
CVE-2026-84085 (HIGH): IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an O ↗
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command.
- 42nvd.nist.govпозавчера18 сент., 20:17 UTC
CVE-2026-84084 (HIGH): IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery (CSRF) vulnerability. ↗
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery (CSRF) vulnerability.
- 43nvd.nist.govпозавчера18 сент., 20:17 UTC
CVE-2026-84083 (HIGH): IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. A local attacker ↗
IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. A local attacker with low-privileged access to the Collector can exploit insufficient argument validation in the SUID binary to execute arbitrary commands as root, resulting in full compromise of the Collector appliance.
- 44nvd.nist.govпозавчера18 сент., 20:17 UTC
CVE-2026-84082 (CRITICAL): IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an ↗
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
- 45nvd.nist.govпозавчера18 сент., 20:17 UTC
CVE-2026-84081 (HIGH): IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation. ↗
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation.
- 46nvd.nist.govпозавчера18 сент., 20:17 UTC
CVE-2026-84078 (CRITICAL): IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privile ↗
IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in unauthorized actions and impact to the integrity and availability of the affected system.
- 47nvd.nist.govпозавчера18 сент., 20:17 UTC
CVE-2026-84077 (HIGH): IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability. ↗
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability.
- 48nvd.nist.govпозавчера18 сент., 20:17 UTC
CVE-2026-84076 (HIGH): IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization. ↗
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization.
- 49nvd.nist.govпозавчера18 сент., 20:17 UTC
CVE-2026-84075 (CRITICAL): IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet. ↗
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet.
- 50nvd.nist.govпозавчера18 сент., 20:17 UTC
CVE-2026-84074 (HIGH): IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page ↗
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
Объём упоминаний по часамUTC
Уже стало мемоминтернет отреагировал картинками — связь найдена автоматически
⌖ Deep Researchпроверено по веб-источникам
Глубокое исследование строится на поиске по вебу: модель находит внешние публикации и сверяет с ними факты. Базовое объяснение выше опирается только на документы кластера.
Глубокое исследование для этого тренда ещё не проводилось.
Нажмите «Объяснить подробнее» — модель поищет контекст в веб-источниках. Обычно это занимает 1–2 минуты.
Кто освещаетраспределение источников — наблюдение, не оценкаразнообразие 17/100
Языкиen100%
Доменыnvd.nist.gov100%
Считается по документам этого тренда. Страна источника — не позиция источника; агрегаторы могут размывать происхождение. Методология: нормированная энтропия по доменам, странам и языкам.
Ключевые сущностикто и что упоминается — клик покажет все тренды с этой сущностью
- 🏛️HIGH37Организация · 37 упом. · показать все тренды
- 🏷️IBM Guardium Data Protection17Прочее · 17 упом. · показать все тренды
- 🏛️CRITICAL11Организация · 11 упом. · показать все тренды
- 👤Attackers5Персона · 5 упом. · показать все тренды
- 🏛️Totolink A3002MU5Организация · 5 упом. · показать все тренды
- ID