2026-05-06 归档

今日共收录 1285 条安全情报，包含 277 个 CVE，391 篇安全通告，以及 322 篇研究论文。

漏洞预警2026-05-05 发布INFO

The traceroute diagnostic handler in /bin/httpd_clientside for ALTICE LABS / SFR France GR140DG and GR140IG fibre CPE/Router/Gateway, inserts unsanitized user input into a syste...

CVE-2026-31196

The traceroute diagnostic handler in /bin/httpd_clientside for ALTICE LABS / SFR France GR140DG and GR140IG fibre CPE/Ro

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-05 发布INFO

The ping diagnostic handler in /bin/httpd_clientside for ALTICE LABS / SFR France GR140DG and GR140IG fibre CPE/Router/Gateway, inserts unsanitized user input into a system() ca...

CVE-2026-31195

The ping diagnostic handler in /bin/httpd_clientside for ALTICE LABS / SFR France GR140DG and GR140IG fibre CPE/Router/G

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-05 发布INFO

OpenClaw versions 2026.4.5 before 2026.4.10 contain a privilege escalation vulnerability allowing write-scoped operators to modify persistent memory dreaming settings. Attackers...

CVE-2026-43568

OpenClaw versions 2026.4.5 before 2026.4.10 contain a privilege escalation vulnerability allowing write-scoped operators

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-05 发布INFO

OpenClaw before 2026.4.9 contains an environment variable injection vulnerability allowing malicious workspace .env files to set runtime-control variables. Attackers can inject ...

CVE-2026-43531

OpenClaw before 2026.4.9 contains an environment variable injection vulnerability allowing malicious workspace .env file

历史摘要 · 未重新核验 · NVD

#cve #cwe-15

漏洞预警2026-05-05 发布INFO

OpenClaw before 2026.4.14 contains a redaction bypass vulnerability that allows authenticated gateway clients to receive unredacted secrets through sourceConfig and runtimeConfi...

CVE-2026-43528

OpenClaw before 2026.4.14 contains a redaction bypass vulnerability that allows authenticated gateway clients to receive

历史摘要 · 未重新核验 · NVD

#cve #cwe-212

漏洞预警2026-05-05 发布INFO

RouterOS provides various services that rely on correct verification of client and server certificates to secure confidentiality and integrity of communications. This includes O...

CVE-2025-42611

RouterOS provides various services that rely on correct verification of client and server certificates to secure confide

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-05-04 发布INFO

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allows unauthen...

CVE-2026-41927

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firew

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-05-04 发布INFO

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insuffic...

CVE-2026-41926

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the firewall.cg

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-05-04 发布INFO

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the internet.cgi binary that allows unauthenticated remote attackers to ...

CVE-2026-41923

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the internet.cg

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-05-04 发布INFO

Easy PayPal Events & Tickets plugin for WordPress versions 1.3 and earlier contain an information disclosure vulnerability in the QR code scanning endpoint that allows unauthent...

CVE-2026-41471

Easy PayPal Events & Tickets plugin for WordPress versions 1.3 and earlier contain an information disclosure vulnerabili

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

威胁情报2026-05-06 发布INFO

Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse

CVE-2026-20929

Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse

历史摘要 · 未重新核验 · CrowdStrike

#edr #apt #crowdstrike

威胁情报2026-05-04 发布INFO

Weaver E-cology critical bug exploited in attacks since March

CVE-2026-22679

Hackers have been exploiting a critical vulnerability (CVE-2026-22679) in the Weaver E-cology office automation since mi

历史摘要 · 未重新核验 · BleepingComputer

#cybersecurity #news #ransomware

威胁情报2026-05-05 发布INFO

ABB B&R PVI

CVE-2026-0936

View CSAF Summary ABB became aware of vulnerability in the product versions listed as affected in the advisory. An updat

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#government #apt #cisa #advisory

威胁情报2026-05-05 发布INFO

Copy Fail: What You Need to Know About the Most Severe Linux Threat in Years

CVE-2026-31431

Copy Fail (CVE-2026-31431) is a critical Linux kernel LPE that allows stealthy root access. This flaw impacts millions o

历史摘要 · 未重新核验 · Palo Alto Unit 42

#apt #paloalto #malware #unit42

安全公告2026-05-06 发布INFO

Compatibility Test Suite (CTS)

Android安全公告发布了关于兼容性测试套件（CTS）的公告。CTS是Android兼容性计划的重要组成部分，用于确保Android设备符合平台标准，保障应用兼容性和系统稳定性。该公告未披露任何具体安全漏洞或CVE编号。CTS通常不涉及安