KATALOG PODATNOŚCI

Baza CVE

Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.

Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.

CVE-2026-44415

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate…

MonitorujOpis źródłowy · EN

CVSS: 8,9
EPSS: 0,46 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-59241

A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The affected application does not sufficiently restrict the permissions assigned…

MonitorujOpis źródłowy · EN

CVSS: 8,7
EPSS: 0,5 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-102073

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions…

MonitorujOpis źródłowy · EN

CVSS: 8,8
EPSS: 0,46 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-102074

MonitorujOpis źródłowy · EN

CVSS: 8,7
EPSS: 0,57 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-102075

MonitorujOpis źródłowy · EN

CVSS: 8,7
EPSS: 0,57 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-102076

MonitorujOpis źródłowy · EN

CVSS: 8,7
EPSS: 0,57 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-13138

Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State. This issue affects Biletiva Ticketing Platform: through 2026-07-23.

MonitorujOpis źródłowy · EN

CVSS: 8,6
EPSS: 0,24 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-109687

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Blind SQL Injection.This issue affects Link Whisper Free: from n/a through 0.9.7.

MonitorujOpis źródłowy · EN

CVSS: 7,6
EPSS: 0,23 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-108179

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PluginUs.Net WOLF bulk-editor allows Blind SQL Injection.This issue affects WOLF: from n/a through 1.1.1.

MonitorujOpis źródłowy · EN

CVSS: 7,6
EPSS: 0,24 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-101020

An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can log in to the Windows system where Management Console or…

MonitorujOpis źródłowy · EN

CVSS: 8,5
EPSS: 0,1 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-102562

The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customField[] parameter of the public frontusers::subscribe endpoint in versions up to, and including, 11.1.0. This is due to insufficient input sanitization and output…

MonitorujOpis źródłowy · EN

CVSS: 7,2
EPSS: 0,25 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-103418

Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content world and bypass the page’s Content Security Policy. This vulnerability…

MonitorujOpis źródłowy · EN

CVSS: 8,8
EPSS: 0,3 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-109108

A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument Type leads to os command injection. The attack may be performed from remote. The…

MonitorujOpis źródłowy · EN

CVSS: 8,6
EPSS: 2,27 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-102007

The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field mapped to notification_content (attacker-chosen key, e.g. payload_text)' parameter in…

MonitorujOpis źródłowy · EN

CVSS: 7,2
EPSS: 0,24 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-75826

Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW…

MonitorujOpis źródłowy · EN

CVSS: 8,5
EPSS: 0,94 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-103316

The macOS version of the DigiD app is not signed with Hardened Runtime. As a result, a local process can load its own dylib into DigiD via DYLD_INSERT_LIBRARIES. An attacker with local user-level code execution can execute arbitrary code within the macOS…

MonitorujOpis źródłowy · EN

CVSS: 7,1
EPSS: 0,1 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-108971

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of…

MonitorujOpis źródłowy · EN

CVSS: 8,6
EPSS: 0,22 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

Development

CVE-2026-92883

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary JavaScript in the context…

MonitorujOpis źródłowy · EN

CVSS: 8,7
EPSS: 0,27 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

Development

CVE-2026-96893

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent…

MonitorujOpis źródłowy · EN

CVSS: 7,3
EPSS: 0,53 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-35001

OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser. An attacker can supply a crafted S-102 HDF5 file with malicious grid dimension metadata that causes memory corruption when a user opens it. In…

MonitorujOpis źródłowy · EN

CVSS: 7,1
EPSS: 0,13 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

Development

CVE-2026-81839

GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary CI/CD pipelines in a…

MonitorujOpis źródłowy · EN

CVSS: 7,7
EPSS: 0,28 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

Development

CVE-2026-14814

GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw repository files, causing targeted…

MonitorujOpis źródłowy · EN

CVSS: 8,2
EPSS: 0,25 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

Development

CVE-2026-16301

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines…

MonitorujOpis źródłowy · EN

CVSS: 8,5
EPSS: 0,22 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-89113

SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query. An authenticated user could send specially crafted requests to affected functionality to inject arbitrary SQL commands. Successful…

MonitorujOpis źródłowy · EN

CVSS: 8,8
EPSS: 0,35 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-89120

A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP. A low-privileged attacker could exploit this to bypass…

MonitorujOpis źródłowy · EN

CVSS: 7,1
EPSS: 0,24 %
Publikacja: 13 paź 2026
Poprawka: Status poprawki nieustalony

Podatności: CVE, produkt, opis, sygnały zagrożenia, CVSS, EPSS i data publikacji.
CVE / produkt	Sygnały	Oceny	Publikacja
CVE-2026-44415 Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal…	Monitoruj	CVSS 8,9EPSS 0,46 %	13 paź 2026
CVE-2026-59241 A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The…	Monitoruj	CVSS 8,7EPSS 0,5 %	13 paź 2026
CVE-2026-102073 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC)…	Monitoruj	CVSS 8,8EPSS 0,46 %	13 paź 2026
CVE-2026-102074 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC)…	Monitoruj	CVSS 8,7EPSS 0,57 %	13 paź 2026
CVE-2026-102075 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC)…	Monitoruj	CVSS 8,7EPSS 0,57 %	13 paź 2026
CVE-2026-102076 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC)…	Monitoruj	CVSS 8,7EPSS 0,57 %	13 paź 2026
CVE-2026-13138 Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State. This issue affects Biletiva…	Monitoruj	CVSS 8,6EPSS 0,24 %	13 paź 2026
CVE-2026-109687 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Blind SQL Injection.This issue…	Monitoruj	CVSS 7,6EPSS 0,23 %	13 paź 2026
CVE-2026-108179 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PluginUs.Net WOLF bulk-editor allows Blind SQL Injection.This issue affects WOLF: from…	Monitoruj	CVSS 7,6EPSS 0,24 %	13 paź 2026
CVE-2026-101020 An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated…	Monitoruj	CVSS 8,5EPSS 0,1 %	13 paź 2026
CVE-2026-102562 The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customField[] parameter of the public frontusers::subscribe endpoint in versions up to, and…	Monitoruj	CVSS 7,2EPSS 0,25 %	13 paź 2026
CVE-2026-103418 Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content…	Monitoruj	CVSS 8,8EPSS 0,3 %	13 paź 2026
CVE-2026-109108 A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument Type leads…	Monitoruj	CVSS 8,6EPSS 2,27 %	13 paź 2026
CVE-2026-102007 The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field mapped to…	Monitoruj	CVSS 7,2EPSS 0,24 %	13 paź 2026
CVE-2026-75826 Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices),…	Monitoruj	CVSS 8,5EPSS 0,94 %	13 paź 2026
CVE-2026-103316 The macOS version of the DigiD app is not signed with Hardened Runtime. As a result, a local process can load its own dylib into DigiD via DYLD_INSERT_LIBRARIES. An attacker with local…	Monitoruj	CVSS 7,1EPSS 0,1 %	13 paź 2026
CVE-2026-108971 A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component Emergency HTTP Recovery Server. Executing a…	Monitoruj	CVSS 8,6EPSS 0,22 %	13 paź 2026
Development CVE-2026-92883 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have…	Monitoruj	CVSS 8,7EPSS 0,27 %	13 paź 2026
Development CVE-2026-96893 GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an…	Monitoruj	CVSS 7,3EPSS 0,53 %	13 paź 2026
CVE-2026-35001 OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser. An attacker can supply a crafted S-102 HDF5 file with malicious grid…	Monitoruj	CVSS 7,1EPSS 0,13 %	13 paź 2026
Development CVE-2026-81839 GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an…	Monitoruj	CVSS 7,7EPSS 0,28 %	13 paź 2026
Development CVE-2026-14814 GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to…	Monitoruj	CVSS 8,2EPSS 0,25 %	13 paź 2026
Development CVE-2026-16301 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed…	Monitoruj	CVSS 8,5EPSS 0,22 %	13 paź 2026
CVE-2026-89113 SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query. An authenticated user could send specially crafted requests…	Monitoruj	CVSS 8,8EPSS 0,35 %	13 paź 2026
CVE-2026-89120 A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including…	Monitoruj	CVSS 7,1EPSS 0,24 %	13 paź 2026

Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 4.11.2026, 23:02 UTC – 5.11.2026, 04:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone5.11.2026, 04:07 UTC

NVD · aktualizacjeOstatnie przetworzenie zakończone5.11.2026, 04:08 UTC

CISA KEVOstatnie przetworzenie zakończone5.11.2026, 05:15 UTC

FIRST EPSSOstatnie przetworzenie zakończone5.11.2026, 04:08 UTCData modelu znajduje się przy rekordzie.