Zafiyet.live Keşfet. Değerlendir. Düzelt. Doğrula.
Menü

chartbrew güvenlik açıkları

chartbrew

chartbrew için bildirim al RSS

Toplam açık
11
Kritik
4
Aktif istismar
0
Yaması çıkan
10
Son açık
38 dk önce
Önem dağılımı
  • Kritik 4
  • Yüksek 6
  • Orta 1
  • Düşük 0

Son açıklar

11 açık

  1. 4,6Orta CVE-2026-69128 Chartbrew: AI orchestrator run_query SQL blocklist bypass enables arbitrary file read on connected PostgreSQL (quoted… chartbrewCWE-2238 dk önce
  2. 9,1Kritik CVE-2026-68935Yama var Chartbrew: SSRF to Internal Network via User-Controlled allowPrivateHost Flag on API Connections chartbrewCWE-91840 dk önce
  3. 7,5Yüksek CVE-2026-68933Yama var Chartbrew: Unauthenticated Brute Force of Password-Protected Dashboards Due to Missing Rate Limit and Plaintext Password Storage chartbrewCWE-30742 dk önce
  4. 9,3Kritik CVE-2026-86005Yama var Chartbrew: Unauthenticated BullMQ Admin Dashboard Exposure in Chartbrew chartbrewCWE-30645 dk önce
  5. 8,1Yüksek CVE-2026-85736Yama var Chartbrew: Arbitrary file deletion as root via data connection SSL/SSH paths chartbrewCWE-7346 dk önce
  6. 7,5Yüksek CVE-2026-85726Yama var Chartbrew: Blind NoSQL injection via date variable in embedded chart chartbrewCWE-94347 dk önce
  7. 8,8Yüksek CVE-2026-85712Yama var Chartbrew: Cross-tenant project takeover via body.team_id in /project routes chartbrewCWE-63948 dk önce
  8. 7,5Yüksek CVE-2026-85708Yama var Chartbrew: Private chart data disclosure via forgeable CB_SECRET share tokens chartbrewCWE-34749 dk önce
  9. 9,8Kritik CVE-2026-85295Yama var Chartbrew: Full account takeover via JWTs accepted under default CB_SECRET chartbrewCWE-139450 dk önce
  10. 9,8Kritik CVE-2026-54349Yama var Chartbrew SQL injection in dashboard filter substitution chartbrewCWE-8951 dk önce
  11. 7,0Yüksek CVE-2026-54589Yama var Chartbrew: SSRF guard bypass via IPv6 NAT64/DNS64 addresses in API Data Connection outbound policy (validateOutboundUrl) chartbrewCWE-91852 dk önce