Nessus 的 CGI abuses 系列

ID名稱嚴重性
362649ServiceNow AI 平台多個漏洞 (2026 年 9 月 CVE 公告)
critical
362647ManageEngine Applications Manager < Build 182100 多個漏洞
high
362487Joomla 5.0.x < 5.4.9 / 6.0.x < 6.1.4 工作流程階段變更的 ACL 檢查不當
medium
362486Joomla 4.0.x < 5.4.9/6.0.x < 6.1.4 多個弱點 (joomla-6-1-4-5-4-9-security-bugfix-release)
high
362485Joomla 1.5.x < 5.4.9/6.0.x < 6.1.4 多個弱點 (joomla-6-1-4-5-4-9-security-bugfix-release)
medium
351859Kibana 8.x < 8.19.22 / 9.0.x < 9.4.7 / 9.5.x < 9.5.3 DoS (ESA-2026-181)
medium
351487Kibana 8.x < 8.19.22 / 9.4.x < 9.4.6 授權不正確 (ESA-2026-103)
medium
351486Kibana 8.x < 8.19.22 / 9.0.x < 9.4.7 / 9.5.x < 9.5.3 缺少授權 (ESA-2026-139)
medium
351485Kibana 9.4.x < 9.4.7 權限提升 (ESA-2026-85)
high
351476Atlassian Confluence 7.4.x < 9.2.24 / 9.3.x < 10.2.17 (CONFSERVER-104433)
critical
351129GitLab 15.11 <19.2.7/19.3 < 19.3.3/19.4 < 19.4.1 (CVE-2026-4523)
low
351128GitLab 17.9 <19.2.7/19.3 < 19.3.3/19.4 < 19.4.1 (CVE-2026-10518)
medium
351127GitLab 19.0 <19.2.7/19.3 < 19.3.3/19.4 < 19.4.1 (CVE-2026-8937)
medium
350881Atlassian Confluence 8.9.x < 9.2.22 / 9.5.x < 10.2.14 (CONFSERVER-104406)
high
350880Atlassian Confluence 8.9.x < 9.2.24 / 9.3.x < 10.2.17 (CONFSERVER-104443)
critical
350879Atlassian Confluence 8.9.x < 9.2.24 / 9.3.x < 10.2.17 (CONFSERVER-104434)
critical
350844NetScaler ADC 和 NetScaler Gateway 13.1 < 13.1-64.23 / 14.1 < 14.1-73.37 多個弱點
critical
350168SolarWinds 可觀測性自託管< 2026.2.3 多個漏洞
high
350093ManageEngine ADSelfService Plus < Build 7001 RCE (CVE-2026-74849)
critical
350092WordPress 4.7.x < 4.7.37 / 4.8.x < 4.8.32 / 4.9.x < 4.9.33 / 5.0.x < 5.0.29 / 5.1.x < / < 5.1.26 / 5.2.x < 5.2.28 / 5.4.x5.3.x < 5.4.235.3.25 / 5.5.x < 5.5.22 / 5.6.x < / 5.7.x < 5.7.195.6.21 / 5.8.x < 5.8.17 / 5.9.x < / 6.0.x < 5.9.18 / 6.1.x < 6.0.166.1.14 / 6.2.x < 6.2.13 / 6.3.x < 6.3.12 / 6.4.x < 6.4.12 / 6.5.x < 6.5.12 / 6.6.x < 6.6.9 / 6.7.x < 6.7.9 / 6.8.x < 6.8.10 / 6.9.x < 6.9.9 / < 7.0.x7.0.6 / 7.1.x < 7.1.2 頁面範本路徑遊走
critical
350091Mattermost 伺服器 10.11.x < 10.11.23 / 11.7.x < 11.7.8 / 11.8.x < 11.8.5 / 11.9.x < 11.9.1 授權錯誤 (MMSA-2026-00702)
medium
350090Mattermost 伺服器 11.7.x < 11.7.11 / 11.8.x < 11.8.6 / 11.9.x < 11.9.2 / 11.10.x < 11.10.2 多個漏洞 (MMSA-2026-00771, MMSA-2026-00775, MMSA-2026-00776)
medium
349788PHP 8.4.x < 8.4.26 多個弱點
medium
349787PHP 8.2.x < 8.2.34 多個弱點
medium
349675PHP 8.3.x < 8.3.35 多個弱點
medium
349674PHP 8.5.x < 8.5.11 多個弱點
medium
349556GitLab 18.3 <19.2.7/19.3 < 19.3.3/19.4 < 19.4.1 (CVE-2026-92874)
medium
349555GitLab 19.1 <19.2.7/19.3 < 19.3.3/19.4 < 19.4.1 (CVE-2026-92529)
medium
349554GitLab 19.2 <19.2.7/19.3 < 19.3.3/19.4 < 19.4.1 (CVE-2026-93577)
critical
349553GitLab 18.6 <19.2.7/19.3 < 19.3.3/19.4 < 19.4.1 (CVE-2026-92628)
low
349552GitLab 19.1 <19.2.7/19.3 < 19.3.3/19.4 < 19.4.1 (CVE-2026-92530)
medium
349551GitLab 18.7 <19.2.7/19.3 < 19.3.3/19.4 < 19.4.1 (CVE-2026-92470)
high
349550GitLab 19.2 <19.2.7/19.3 < 19.3.3/19.4 < 19.4.1 (CVE-2026-89078)
critical
348782WordPress 7.0.0 < 7.1.2
high
348779Adobe Connect <= 4.4 多個弱點 (APSB26-150)
high
348391Atlassian Confluence 8.9.0 < 9.2.24 / 9.3.1 < 10.2.17 (CONFSERVER-104362)
critical
348149NextGen Mirth Connect < 4.7.2 多個漏洞 (ICSMA-26-253-01)
high
347960IBM Cognos Analytics 12.0.4 < 12.0.4 FP3 / 12.1.x < 12.1.3 FP2 多個弱點 (7287209)
high
347959IBM Cognos Analytics 12.1.x < 12.1.3 FP2 多個弱點 (7287209)
high
346996WordPress 7.0.0 < 7.1.1
high
346899Fortra GoAnywhere Managed File Transfer (MFT) < 7.10.2 路徑遊走 (CVE-2026-15913)
high
346470Drupal 10.6.x < 10.6.17 / 11.3.x < 11.3.17 / 11.4.x < 11.4.7 Drupal 弱點 (SA-CORE-2026-013)
high
346277Jenkins plugins 多個漏洞 (2026-09-16)
high
346276GitLab 18.2.7 <19.1.8/19.2 < 19.2.6/19.3 < 19.3.2 (CVE-2026-3855)
medium
346275GitLab 19.0 <19.1.8/19.2 < 19.2.6/19.3 < 19.3.2 (CVE-2026-79708)
high
346274GitLab 17.1 <19.1.8/19.2 < 19.2.6/19.3 < 19.3.2 (CVE-2026-86341)
medium
346273GitLab 18.11 <19.1.8/19.2 < 19.2.6/19.3 < 19.3.2 (CVE-2026-16794)
medium
346272GitLab 13.0 <19.1.8/19.2 < 19.2.6/19.3 < 19.3.2 (CVE-2026-8030)
medium
346271GitLab 19.0 <19.1.8/19.2 < 19.2.6/19.3 < 19.3.2 (CVE-2026-19619)
medium
346270GitLab 13.9 <19.1.8/19.2 < 19.2.6/19.3 < 19.3.2 (CVE-2026-7514)
medium