Baza CVE
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Acronis Cyber Protect 17 | CVE-2026-87101 Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587. |
6,2 | 0,1 % | Brak wpisu w KEV nie wyklucza ataków | |
| Acronis Cyber Protect 17 | CVE-2026-87102 Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587. |
7,4 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| Acronis Cyber Protect 17 | CVE-2026-87103 Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587. |
7,4 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| Norton Antivirus / Avast Antivirus / AVG Internet Security | CVE-2026-6064 Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder… |
7,3 | 0,12 % | Brak wpisu w KEV nie wyklucza ataków | |
| PowerProtect Data Domain | CVE-2026-86377 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Out-of-bounds Write vulnerability. A low privileged… |
7,6 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| PowerProtect Data Domain | CVE-2026-86378 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A low… |
8,8 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| NoviGest Desktop App | CVE-2026-112197 Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods without authentication, obtain sensitive credentials, and execute arbitrary SQL queries on PostgreSQL. The… |
9,4 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| NoviGest Desktop App | CVE-2026-112198 XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with access to this functionality could provide… |
8,3 | 0,16 % | Brak wpisu w KEV nie wyklucza ataków | |
| Smart Popup by Supsystic | CVE-2026-115223 The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being stored in a popup text block and later evaluated by its template engine, because the filter meant to strip template delimiters runs before a decoding step that reconstructs them,… |
4,9 | 0,42 % | Brak wpisu w KEV nie wyklucza ataków | |
| PowerProtect Data Domain | CVE-2026-103780 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. An… |
9,8 | 0,83 % | Brak wpisu w KEV nie wyklucza ataków | |
| PowerProtect Data Domain Management Center | CVE-2026-103792 Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special… |
9,6 | 0,37 % | Brak wpisu w KEV nie wyklucza ataków | |
| PowerProtect Data Domain Management Center | CVE-2026-103799 Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A… |
9,6 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| Royal Elementor Addons | CVE-2026-106648 The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted form field values before substituting them into the recipient addresses of its form notification emails, allowing unauthenticated attackers to replace the recipient list and relay attacker-composed email from… |
5,3 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Essential Addons for Elementor | CVE-2026-110508 The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its email one-time-password flow, which could allow unauthenticated users to register and log in without being approved by an administrator when… |
5,3 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| PowerProtect Data Domain Management Center | CVE-2026-110540 Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A… |
7,1 | 0,32 % | Brak wpisu w KEV nie wyklucza ataków | |
| PowerProtect Data Domain | CVE-2026-110541 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an… |
7,2 | 1,81 % | Brak wpisu w KEV nie wyklucza ataków | |
| pretix | CVE-2026-101272 The mechanism binding files generated during a shredding process to the authentication method is not working correctly and the same session token is used for all token-based API users. This is similar to an issue fixed in 2026.7.1 but was missed while creating the fix. Since the files are referred… |
2,3 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| pretix | CVE-2026-101273 Some of our API endpoints allowed to create order payments referencing a gift card by using the auto-incremented internal ID. This ID was not checked and allowed creating payments that reference gift cards from different organizers and thereby obtaining their secret. The gift card is not charged… |
5,3 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| pretix | CVE-2026-101274 When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate the `response_type` requested in an authorization request against the configured grant type of the SSO client. This means that if an SSO client was configured to… |
6,9 | 0,37 % | Brak wpisu w KEV nie wyklucza ataków | |
| BitPay Gateway for WooCommerce | CVE-2026-103313 The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does not bind the payment provider's transaction confirmation to the order it completes, nor verify the confirmed amount, allowing an unauthenticated attacker who holds a single genuine low-value transaction to mark arbitrary… |
5,3 | 0,16 % | Brak wpisu w KEV nie wyklucza ataków | |
| Sadad QA Payment | CVE-2026-103330 The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authenticity of incoming payment notifications, as the verification is keyed on a merchant secret that is empty by default and the rest of the signed data is attacker-controlled, allowing unauthenticated attackers to… |
5,3 | 0,16 % | Brak wpisu w KEV nie wyklucza ataków | |
| PowerProtect Data Domain | CVE-2026-103779 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. A low privileged… |
8,3 | 0,47 % | Brak wpisu w KEV nie wyklucza ataków | |
| Acronis Cyber Protect Cloud Agent / Acronis Cyber Protect 17 | CVE-2025-30414 Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Protect 17 (Windows) before build 42587. |
7,1 | 0,21 % | Brak wpisu w KEV nie wyklucza ataków | |
| PowerProtect Data Domain | CVE-2026-92665 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Allocation of Resources Without Limits or Throttling… |
5,3 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| PowerProtect Data Domain | CVE-2026-86388 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted… |
5,3 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 14.11.2026, 11:02 UTC – 14.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.