CVEs, die 32.0 betreffen
| CVE | Titel | CVSS | Ausgenutzt | EPSS | Veröffentlicht |
|---|---|---|---|---|---|
| CVE-2026-77167 | Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database... | 7.5 | — | 2026-10-28 | |
| CVE-2026-77165 | File owners were unable to unlock TYPE_TOKEN locks placed by other users, leaving files permanently locked wit... | 6.5 | — | 2026-09-22 | |
| CVE-2026-77164 | Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the re... | 6.2 | — | 2026-09-18 | |
| CVE-2026-77172 | App passwords were allowed to bypass password confirmation on sensitive endpoints. | 5.3 | — | 2026-10-28 | |
| CVE-2026-82984 | When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the... | 4.3 | — | 2026-10-28 | |
| CVE-2026-68493 | After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of me... | 3.1 | — | 2026-09-18 |
Verfolgen Sie diese Versionen auf Ihren eigenen Servern
InfraGuard erfasst die installierten Softwareversionen auf jedem Server und markiert diejenigen mit bekannten Schwachstellen. Self-Hosted – nichts verlässt Ihr Netzwerk.
Daten: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (siehe EPSS unter https://www.first.org/epss), endoflife.date. Softwareliste: awesome-selfhosted (CC BY-SA 3.0).