KATALOG PODATNOŚCI

Publikacje w kolejności czasu

Chronologiczny przegląd publikacji. Ostatnie modyfikacje są w osobnym widoku.

Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.

CVE-2026-83525

Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apache Kafka from 2.8.0 before 4.2.2, and from 4.3.0 before 4.3.2 on all platforms allows an authenticated attacker with CLUSTER_ACTION privilege to cause a denial of service (controller…

PozostałeOpis źródłowy · EN

CVSS: 6,5
EPSS: 0,19 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118619

Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in…

MonitorujOpis źródłowy · EN

CVSS: 8,8
EPSS: 0,53 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118609

Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices.…

PozostałeOpis źródłowy · EN

CVSS: 6,8
EPSS: 0,3 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118610

Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not…

MonitorujOpis źródłowy · EN

CVSS: 8,8
EPSS: 0,34 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118611

Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices.…

PozostałeOpis źródłowy · EN

CVSS: 6,8
EPSS: 0,3 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118613

Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,24 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118614

Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,2 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118615

Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,41 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118616

Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,2 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118617

Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,26 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118618

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,22 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118601

Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit…

PozostałeOpis źródłowy · EN

CVSS: 6,3
EPSS: 0,27 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118602

Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Alpine iLX-F511. An attacker must first obtain the ability to execute…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,12 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118603

Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-F511 devices. User interaction is required to exploit this…

MonitorujOpis źródłowy · EN

CVSS: 8,0
EPSS: 0,24 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118604

Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not…

PozostałeOpis źródłowy · EN

CVSS: 6,8
EPSS: 0,3 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118605

Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker…

MonitorujOpis źródłowy · EN

CVSS: 8,0
EPSS: 0,24 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118606

Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not…

MonitorujOpis źródłowy · EN

CVSS: 8,8
EPSS: 0,34 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118607

Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The…

PozostałeOpis źródłowy · EN

CVSS: 6,8
EPSS: 0,87 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118608

Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Alpine iLX-F511 devices.…

PozostałeOpis źródłowy · EN

CVSS: 3,5
EPSS: 0,15 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118510

A type-handling flaw in the relationship query building of this MongoDB integration library can cause a check for the absence of a related record to be compiled with an identifier of the wrong data type. In an application that relies on such a check to…

MonitorujOpis źródłowy · EN

CVSS: 7,7
EPSS: 0,28 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118581

A BSON encoding component of the MongoDB Java Driver does not verify that an externally supplied raw document's self-declared length agrees with the extent of the byte range it is given before that range is copied into an outgoing database command. An…

PozostałeOpis źródłowy · EN

CVSS: 6,9
EPSS: 0,19 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

Development

CVE-2026-117617

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its parent directories, not immediately before writing it, and allows symbolic links in artifacts to replace existing files or…

MonitorujOpis źródłowy · EN

CVSS: 8,1
EPSS: 0,48 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

Development

CVE-2026-117618

In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account does not check whether the setup wizard has been completed, resulting in a race condition that allows unauthenticated attackers to create an…

MonitorujOpis źródłowy · EN

CVSS: 8,1
EPSS: 0,26 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

Development

CVE-2026-117619

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with an API token, to obtain a "remember me" cookie, allowing attackers who have obtained a user's API token to retain access to…

MonitorujOpis źródłowy · EN

CVSS: 8,1
EPSS: 0,35 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

Development

CVE-2026-117620

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to trigger warnings in the "Manage Old Data" feature that can be acted on by administrators to inject attacker-controlled data, overriding existing user account…

MonitorujOpis źródłowy · EN

CVSS: 8,8
EPSS: 0,38 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

Podatności: CVE, produkt, opis, sygnały zagrożenia, CVSS, EPSS i data publikacji.
CVE / produkt	Sygnały	Oceny	Publikacja
CVE-2026-83525 Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apache Kafka from 2.8.0 before 4.2.2, and from 4.3.0 before 4.3.2 on all platforms allows an authenticated attacker…	Pozostałe	CVSS 6,5EPSS 0,19 %	28 paź 2026
CVE-2026-118619 Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of…	Monitoruj	CVSS 8,8EPSS 0,53 %	28 paź 2026
CVE-2026-118609 Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary…	Pozostałe	CVSS 6,8EPSS 0,3 %	28 paź 2026
CVE-2026-118610 Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…	Monitoruj	CVSS 8,8EPSS 0,34 %	28 paź 2026
CVE-2026-118611 Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary…	Pozostałe	CVSS 6,8EPSS 0,3 %	28 paź 2026
CVE-2026-118613 Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations…	Monitoruj	CVSS 7,8EPSS 0,24 %	28 paź 2026
CVE-2026-118614 Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of…	Monitoruj	CVSS 7,8EPSS 0,2 %	28 paź 2026
CVE-2026-118615 Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of…	Monitoruj	CVSS 7,8EPSS 0,41 %	28 paź 2026
CVE-2026-118616 Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics.…	Monitoruj	CVSS 7,8EPSS 0,2 %	28 paź 2026
CVE-2026-118617 Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected…	Monitoruj	CVSS 7,8EPSS 0,26 %	28 paź 2026
CVE-2026-118618 Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics.…	Monitoruj	CVSS 7,8EPSS 0,22 %	28 paź 2026
CVE-2026-118601 Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of…	Pozostałe	CVSS 6,3EPSS 0,27 %	28 paź 2026
CVE-2026-118602 Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of…	Monitoruj	CVSS 7,8EPSS 0,12 %	28 paź 2026
CVE-2026-118603 Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…	Monitoruj	CVSS 8,0EPSS 0,24 %	28 paź 2026
CVE-2026-118604 Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on…	Pozostałe	CVSS 6,8EPSS 0,3 %	28 paź 2026
CVE-2026-118605 Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary…	Monitoruj	CVSS 8,0EPSS 0,24 %	28 paź 2026
CVE-2026-118606 Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…	Monitoruj	CVSS 8,8EPSS 0,34 %	28 paź 2026
CVE-2026-118607 Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511…	Pozostałe	CVSS 6,8EPSS 0,87 %	28 paź 2026
CVE-2026-118608 Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose…	Pozostałe	CVSS 3,5EPSS 0,15 %	28 paź 2026
CVE-2026-118510 A type-handling flaw in the relationship query building of this MongoDB integration library can cause a check for the absence of a related record to be compiled with an identifier of the…	Monitoruj	CVSS 7,7EPSS 0,28 %	28 paź 2026
CVE-2026-118581 A BSON encoding component of the MongoDB Java Driver does not verify that an externally supplied raw document's self-declared length agrees with the extent of the byte range it is given…	Pozostałe	CVSS 6,9EPSS 0,19 %	28 paź 2026
Development CVE-2026-117617 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its parent directories, not immediately before writing…	Monitoruj	CVSS 8,1EPSS 0,48 %	28 paź 2026
Development CVE-2026-117618 In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account does not check whether the setup wizard has been completed, resulting in a race…	Monitoruj	CVSS 8,1EPSS 0,26 %	28 paź 2026
Development CVE-2026-117619 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with an API token, to obtain a "remember me" cookie, allowing…	Monitoruj	CVSS 8,1EPSS 0,35 %	28 paź 2026
Development CVE-2026-117620 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to trigger warnings in the "Manage Old Data" feature that can be acted on by administrators…	Monitoruj	CVSS 8,8EPSS 0,38 %	28 paź 2026

Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 12.11.2026, 15:02 UTC – 12.11.2026, 20:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone12.11.2026, 20:07 UTC

NVD · aktualizacjeOstatnie przetworzenie zakończone12.11.2026, 20:08 UTC

CISA KEVOstatnie przetworzenie zakończone12.11.2026, 21:00 UTC

FIRST EPSSOstatnie przetworzenie zakończone12.11.2026, 20:08 UTCData modelu znajduje się przy rekordzie.