CVE Watch409.857 no arquivo completo

Vulnerabilidades exploráveis hoje

17,688na visualização atual

Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.

No catálogo KEV1,769

Novos KEV · 24H0

Exploit Today ≥ 701,700

Distribuição · última janela

Crítica
5,527
Alta
21,042
Média
20,196
Baixa
2,086

Filtros

Janela

Severidade

Filtros

Vulnerabilidades2,161–2,200 · 17,688

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1217365.3 MÉD

22.5%

——7NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the POST /api/v2/oauth/authorize handler that allows unauthenticated attackers to create OAuth authorization codes. Attackers can send anonymous requests with client_id, redirect_uri and approved=true to insert unbounded ownerless authorization code records, limited only by rate limiting.4d CVE-2026-1217353.7 BAI

13.9%

——4blueprintUE self-hosted edition before 4.3.4 contains an insufficient session expiration vulnerability that allows attackers to confirm accounts using stale tokens because UserModel::findUserIDWithConfirmedToken ignores confirmed_sent_at. Attackers who obtain an old confirmation link from a compromised mailbox, backup, or forwarded mail can activate unconfirmed accounts and evade the unconfirmed-account cleanup job.4d CVE-2026-1217346.5 MÉD

20.1%

——6ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that allows any workspace administrator to read another workspace's pending preview environment by querying ReviewPreviewEnvDeployAPIView without project scoping. Attackers can use the project slug and environment name from public fork pull request comments to retrieve plaintext environment variables and preview basic-auth credentials.1d CVE-2026-1217335.4 MÉD

7.8%

——2Bagisto before 2.4.5 contains a stored cross-site scripting vulnerability that allows authenticated customers to upload HTML files via the RMA send-message endpoint without type or extension validation. Attackers can upload a .html attachment containing JavaScript served under /storage/rma-conversation/, executing script in the shop's origin when an administrator opens it.3d CVE-2026-1217322.7 BAI

14.6%

——4RosarioSIS before 12.9 contains an improper authorization vulnerability that allows school-scoped administrators to assign fees and payments to students of other schools via MassAssignFees.php and MassAssignPayments.php. Attackers can substitute foreign student IDs in the student[] POST array of a modfunc=save request to alter other schools' student billing balances, breaking school isolation.4d CVE-2026-1217318.8 ALT

23.2%

——7RosarioSIS before 12.9 contains a sql injection vulnerability that allows authenticated non-student users, including parents, to inject SQL via the unquoted period_id parameter in StudentSummary.php. Attackers can supply payloads without single quotes into IN() clauses to extract administrator password hashes and student records through time-based queries or modify data via stacked statements.4d CVE-2026-1217306.5 MÉD

12.7%

——4emailflare before commit cf31f33 contains a missing authorization vulnerability in POST /api/inbox/compose that allows authenticated members to send mail as any sender address. Attackers can supply an arbitrary from field, which is passed unchecked to the Cloudflare send call, to impersonate other users or the organization to external recipients.1d CVE-2026-1217298.3 ALT

16.1%

——5emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox service /api/keys routes that allows any authenticated member to list, create and revoke API keys. Attackers can mint a global live API key accepted by /v1/send to send mail from any domain, or revoke existing keys to disable integrations.3d CVE-2026-1217285.3 MÉD

17.9%

——5SourceHut meta.sr.ht 0.56.11 before 0.89.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to register accounts when public registration is disabled. Attackers can obtain a CSRF token from /login and POST credentials to /register/step2, which invokes the unchecked GraphQL RegisterAccount mutation to create accounts.4d CVE-2026-1217277.5 ALT

33.3%

——10Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handling that allows unauthenticated attackers to bypass http_body_max by sending more body bytes than declared. Attackers can send oversized first segments over many concurrent POST, PUT or DELETE connections, wrapping content_length to grow buffers unbounded and exhaust worker memory.4d CVE-2026-1215826.5 MÉD

32.3%

——10A vulnerability has been found in Umami up to 3.4.1. Impacted is an unknown function of the file src/app/api/record/route.ts of the component Record API Endpoint. Such manipulation of the argument Website leads to authorization bypass. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.4d CVE-2026-1215814.3 MÉD

13.5%

——4A vulnerability has been found in ArcReel 0.32.0/0.33.0/0.34.0. The impacted element is an unknown function of the file /api/v1/providers/{id}/test of the component Provider Test-Connection Endpoint. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.4d CVE-2026-1215657.4 ALT

5.5%

——2Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.1d CVE-2026-1215396.3 MÉD

11.2%

——3A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the function CheckPassword of the file app/src/server.js of the component Socket IO Handler. Performing a manipulation of the argument peer_id results in improper access controls. It is possible to initiate the attack remotely. Upgrading to version 2.1.39 can resolve this issue. The patch is named 4e40471abc48bfc32b4b174b8844716dfc5c1471. You should upgrade the affected component.1d CVE-2026-1215353.7 BAI

44.5%

——13A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87. This vulnerability affects the function checkPassword of the file app/src/server.js of the component Room Action Handler. The manipulation results in improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. Attacks of this nature are highly complex. It is stated that the exploitability is difficult. The exploit has been made public and could be used. Upgrading to version 2.1.38 is able to resolve this issue. The patch is identified as 55bec1d05f931d2e43633d6d0b7274f79ec719dd. Upgrading the affected component is advised.3d CVE-2026-121520—

3.3%

——1In BuildKit versions prior to v0.34.1, a malicious client with access to the BuildKit control APIs can submit a build request that sets an extended attribute on a file outside the BuildKit state directory. Extended attributes in the trusted. or security. namespaces may also be set, potentially giving a program on the host elevated privileges. This issue affects build services that accept build requests from untrusted users. The issue is fixed in v0.34.1.1d CVE-2026-1207757.2 ALT

28.5%

——9Tanium addressed a heap-based buffer overflow vulnerability in Deploy.1d CVE-2026-118237—

19.0%

——6An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). When proving possession of a host key, babeld's SSH implementation sized the session identifier by the current digest length rather than its own. An attacker with an account and SSH access could re-key to an algorithm with a longer hash, causing adjacent process memory to be signed and returned to the client, where a limited amount of it may be recoverable. This vulnerability affected all releases prior to 3.23 and was fixed in versions 3.22.3, 3.21.8, 3.20.10, and 3.19.14. This vulnerability was reported via the GitHub Bug Bounty program.1d CVE-2026-1166696.5 MÉD

16.2%

——5Tanium addressed an improper access controls vulnerability in Discover.1d CVE-2026-1166684.3 MÉD

19.0%

——6Tanium addressed an uncontrolled resource consumption vulnerability in Discover.1d CVE-2026-1166674.2 MÉD

3.8%

——1Tanium addressed an improper access controls vulnerability in Discover.1d CVE-2026-1166664.3 MÉD

12.5%

——4Tanium addressed an information disclosure vulnerability in Discover.1d CVE-2026-1166654.3 MÉD

12.5%

——4Tanium addressed an information disclosure vulnerability in Discover.1d CVE-2026-1166643.1 BAI

6.5%

——2Tanium addressed an improper access controls vulnerability in Discover.1d CVE-2026-1166636.5 MÉD

16.2%

——5Tanium addressed an improper access controls vulnerability in Enforce.1d CVE-2026-1166616.5 MÉD

11.6%

——3Tanium addressed an improper access controls vulnerability in Enforce.1d CVE-2026-1166546.5 MÉD

19.3%

——6Tanium addressed an improper input validation vulnerability in Threat Response.1d CVE-2026-1166534.3 MÉD

10.2%

——3Tanium addressed an improper input validation vulnerability in Threat Response.1d CVE-2026-1166524.3 MÉD

10.2%

——3Tanium addressed a business logic error in Threat Response.1d CVE-2026-1166517.5 ALT

27.9%

——8Tanium addressed an unauthorized code execution vulnerability in Threat Response.1d CVE-2026-1166507.5 ALT

27.9%

——8Tanium addressed an unauthorized code execution vulnerability in Threat Response.1d CVE-2026-1166484.1 MÉD

11.0%

——3Tanium addressed an improper output sanitization vulnerability in Discover.1d CVE-2026-1166464.3 MÉD

18.0%

——5Tanium addressed an uncontrolled resource consumption vulnerability in Threat Response.1d CVE-2026-111085—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.10h CVE-2026-110288—

8.3%

——3A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete stored Slack and Microsoft Teams ChatOps configuration and provider credentials by inducing an authenticated Management Console operator's browser to send a cross-site GET request to the integration removal endpoint without a CSRF token. Exploitation required configured ChatOps integrations and an operator visiting attacker-controlled content while signed in to the Management Console; deletion could disrupt ChatOps notifications and commands when configuration was applied or services reloaded. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.23 and was fixed in versions 3.19.14, 3.20.10, 3.21.8, and 3.22.3. This vulnerability was reported via the GitHub Bug Bounty program.1d CVE-2026-1098366.7 MÉD

2.0%

——1The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be read or written.1d CVE-2026-108516—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.10h CVE-2026-1083275.0 MÉD

18.0%

——5Tanium addressed a path traversal vulnerability in Tanium Data Service.1d CVE-2026-1083246.5 MÉD

7.4%

——2Tanium addressed a denial of service vulnerability in Tanium Client.1d CVE-2026-107916—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.10h