مكتبة الثغرات المُستغلّة
كل ثغرة برمجية معروف أن المهاجمين استخدموها، من الفهرس الذي تحتفظ به وكالة الأمن السيبراني وأمن البنية التحتية الأمريكية (CISA) منذ نوفمبر 2021. يُحدَّث كل ساعة.
- 1,758ثغرة مُستغلّة
- 361تستخدمها برامج الفدية
- 291مورّدًا
1,758 ثغرات
| أُضيفت | الثغرة | المنتج | الخطورة | احتمال الهجوم |
|---|---|---|---|---|
| 26/10/2026 | Stale Internal Request-State | PHP Group PHP | حرجة 9.2 | >99.9% |
| 26/10/2026 | Memory Corruption | PHP Group PHP | حرجة 9.2 | >99.9% |
| 23/10/2026 | SQL Injection | Arista VeloCloud Orchestrator | حرجة 9.4 | 1.0% |
| 23/10/2026 | Online – Built-in CODE Server OS Command Injection | Collabora Collabora Online – Built-in CODE Server | حرجة 9.2 | 12% |
| 20/10/2026 | External Control of File Name or Path | Plex Media Server | مرتفع 8.6 | 1.8% |
| 20/10/2026 | Server-Side Request Forgery (SSRF) | Plex Media Server | متوسطة 5.3 | 1.6% |
| 20/10/2026 | Improper Neutralization of Encoded URI Schemes in a Web Page | Plex Media Server | متوسطة 6.9 | 1.9% |
| 20/10/2026 | Server-Side Request Forgery (SSRF) | Plex Media Server | متوسطة 5.3 | 1.8% |
| 20/10/2026 | Uncontrolled Search Path Element | Siemens Software Center | مرتفع 8.4 | 1.0% |
| 20/10/2026 | OS Command Injection | EG Secure Solutions SiteGuard Server Edition | مرتفع 8.5 | 2.5% |
| 16/10/2026 | Authentication Bypass by Spoofing | BeyondTrust Remote Support | حرجة 9.3 | 20% |
| 16/10/2026 | Path Traversal | Fortinet Multiple Products | متوسطة 5.4 | 1.3% |
| 15/10/2026 | Files or Directories Accessible to External Parties | Atlassian Multiple Products | حرجة 9.3 | 99.5% |
| 14/10/2026 | Relative Path Traversal | Cisco Secure Email Gateway | حرجة 9.8 | 2.2% |
| 14/10/2026 | Command Injection | Ahsay AhsayCBS | حرجة 10.0 | 86% |
| 14/10/2026 | Improper Authentication | Ahsay AhsayCBS | متوسطة 6.9 | 79% |
| 14/10/2026 | Code Injection | Palo Alto Networks PAN-OS | مرتفع 8.6 | 1.7% |
| 13/10/2026 | Command Injection | Microsoft Windows | مرتفع 8.8 | 9.8% |
| 13/10/2026 | Authentication Bypass by Spoofing | Ivanti Connect Secure | مرتفع 8.6 | 87% |
| 08/10/2026 | Cleartext Storage of Sensitive Information | Strapi Strapi | مرتفع 7.2 | 4.1% |
| 08/10/2026 | Server Path Traversal | ONLYOFFICE Docs | حرجة 9.8 | 30% |
| 08/10/2026 | Command Injection | Apache Struts | مرتفع 8.1 | 97% |
| 08/10/2026 | ISC BIND Data Processing Errors | ISC BIND | مرتفع 7.5 | 99.6% |
| 08/10/2026 | Improper Access Control | ProFTPD ProFTPD | حرجة 10.0 | 99.5% |
| 04/10/2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | Citrix NetScaler | مرتفع 8.7 | 11% |
| 02/10/2026 | Improper Privilege Management | Zammad GmbH Zammad | مرتفع 8.5 | 0.9% |
| 02/10/2026 | Session Fixation | Zammad GmbH Zammad | مرتفع 8.7 | 2.0% |
| 01/10/2026 | Path Traversal | Fortinet FortiMail | حرجة 9.8 | 4.6% |
| 30/09/2026 | Hex Encoding | Cisco Catalyst SD-WAN Manager | حرجة 9.8 | 39% |
| 29/09/2026 | Out-of-Bounds Write | Apple Multiple Products | مرتفع 8.8 | 26% |
| 27/09/2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | Citrix NetScaler | حرجة 9.5 | 78% |
| 27/09/2026 | Improper Input Validation | Citrix NetScaler | حرجة 9.5 | 82% |
| 25/09/2026 | Remote File Inclusion | WordPress Core | مرتفع 8.1 | 96% |
| 25/09/2026 | Improper Enforcement of Behavioral Workflow | MikroTik RouterOS | متوسطة 6.9 | 2.3% |
| 25/09/2026 | Code Injection | Microsoft SharePoint | مرتفع 8.8 | 8.2% |
| 24/09/2026 | Commerce and Magento Incorrect Authorization Vulnerability | Adobe Commerce and Magento | حرجة 9.1 | 90% |
| 24/09/2026 | Path Traversal Vulnerability | WSO2 Multiple Products | حرجة 10.0 | 22% |
| 22/09/2026 | Heap-based Buffer Overflow | F5 BIG-IP APM | حرجة 9.3 | 25% |
| 22/09/2026 | Improper Input Validation | Arista VeloCloud Orchestrator | حرجة 9.5 | 1.4% |
| 22/09/2026 | Path Traversal | Check Point Multiple Products | حرجة 9.8 | 92% |
| 22/09/2026 | Improper Certificate Validation | Check Point Multiple Products | حرجة 9.8 | 54% |
| 21/09/2026 | Stack-Based Buffer Overflow | Zyxel GS1900 Series Switches | مرتفع 8.8 | 2.8% |
| 18/09/2026 | Out-of-Bounds Write | Linux Kernel | مرتفع 8.8 | 0.9% |
| 18/09/2026 | Race Condition | Linux Kernel | مرتفع 7.8 | 1.6% |
| 18/09/2026 | Improper Check for Unusual or Exceptional Conditions | Linux Kernel | حرجة 9.8 | 3.3% |
| 16/09/2026 | Incorrect Default Permissions | Acronis Backup | مرتفع 7.8 | 0.2% |
| 16/09/2026 | Incorrect Use of Privileged APIs | Cisco Identity Services Engine | حرجة 10.0 | 76% |
| 16/09/2026 | Improper Authorization | Google Pixel | مرتفع 8.8 | 0.6% |
| 14/09/2026 | SQL Injection | Cisco Secure Email Gateway | حرجة 9.8 | 30% |
| 11/09/2026 | Path Traversal | GitLab Community Edition and Enterprise Edition | حرجة 10.0 | 97% |
المورّدون الأكثر استهدافًا
- Microsoft 390
- Cisco 101
- Apple 95
- Adobe 82
- Google 75
- Oracle 46
- Apache 41
- Ivanti 36
- Fortinet 32
- Linux 31
- Citrix 27
- VMware 26
المصادر: Known Exploited Vulnerabilities (CISA، ملكية عامة)، وCVE records (cve.org)، وEPSS (FIRST). احتمال الهجوم هو تقدير EPSS لاحتمال أن يحاول أحد استغلال الثغرة خلال الأيام الـ30 القادمة.