2026-04-28 归档

今日共收录 1050 条安全情报,包含 258 个 CVE,457 篇安全通告,以及 29 篇研究论文。

← 返回归档列表
在野利用2026-04-27 发布INFO

Example Vendor Edge Appliance Remote Code Execution (CVE-2026-1001)

CVE-2026-1001

CISA added CVE-2026-1001 to the Known Exploited Vulnerabilities catalog. Exploitation is observed against internet-facin

历史摘要 · 未重新核验 · CISA KEV

安全公告2026-04-28 发布INFO

A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function...

CVE-2026-7242

A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setOpenVpnClientCfg of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability...

CVE-2026-7240

A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setVpnAc

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-27 发布INFO

Microsoft April 2026 Security Update Summary

CVE-2026-2000 · CVE-2026-2001

Microsoft released the April 2026 security update covering multiple products including Windows, Office, and Azure. Criti

历史摘要 · 未重新核验 · Microsoft Security Response Center

安全公告2026-04-28 发布INFO

Ivanti Endpoint Manager Mobile代码注入漏洞

Ivanti Endpoint Manager Mobile代码注入漏洞

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-04-28 发布INFO

No Title

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026

历史摘要 · 未重新核验 · GitHub Security Advisories

安全公告2026-04-28 发布INFO

No Title

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026

历史摘要 · 未重新核验 · GitHub Security Advisories

安全公告2026-04-28 发布INFO

No Title

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026

历史摘要 · 未重新核验 · GitHub Security Advisories

安全公告2026-04-28 发布INFO

No Title

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026

历史摘要 · 未重新核验 · GitHub Security Advisories

安全公告2026-04-28 发布INFO

No Title

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026

历史摘要 · 未重新核验 · GitHub Security Advisories

安全公告2026-04-28 发布INFO

No Title

### Impact When `n8n-mcp` runs in HTTP transport mode, authenticated MCP `tools/call` requests had their full arguments

历史摘要 · 未重新核验 · GitHub Security Advisories

安全公告2026-04-28 发布INFO

No Title

### Impact Two endpoints used to preview an MCP server before saving it — `POST /mcp-rest/test/connection` and `POST /m

历史摘要 · 未重新核验 · GitHub Security Advisories

安全公告2026-04-28 发布INFO

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in chat.send that allows...

CVE-2026-41371

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in chat.send that allows write-scoped gateway ca

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

Citrix NetScaler 内存泄漏(CVE-2025-5777)

CVE-2025-5777

Citrix NetScaler 内存泄漏(CVE-2025-5777)

历史摘要 · 未重新核验 · 知道创宇 / Seebug

威胁情报2026-04-28 发布INFO

Microsoft Confirms Active Exploitation of Windows Shell CVE-2026-32202

CVE-2026-32202

Microsoft on Monday revised its advisory for a now-patched, high-severity security flaw impacting Windows Shell to ackno

历史摘要 · 未重新核验 · The Hacker News

安全公告2026-04-28 发布INFO

No Title

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-04-28 发布INFO

No Title

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-04-28 发布INFO

PLANET VDR-300NU ADSL Router - 未授权修改DNS

PLANET VDR-300NU ADSL Router - 未授权修改DNS

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-04-28 发布INFO

No Title

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-04-28 发布INFO

No Title

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC