CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-0300
2026年5月6日，美国网络安全与基础设施安全局（CISA）在其已知被利用漏洞（KEV）目录中新增了一个漏洞（CVE-2026-0300）。该漏洞存在于Palo Alto Networks的PAN-OS操作系统，属于越界写入类型，攻击者可能
2026-05-07 归档
今日共收录 722 条安全情报，包含 0 个 CVE，380 篇安全通告，以及 58 篇研究论文。
← 返回归档列表Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls
CVE-2026-0300
Palo Alto Networks 计划修复一个被野外利用的零日漏洞 CVE-2026-0300，该漏洞影响 PAN-OS 软件中的 Captive Portal 服务，涉及 PA 和 VM 系列防火墙。根据 SecurityWeek 报
Palo Alto Networks warns of firewall RCE zero-day exploited in attacks
2026年5月6日，Palo Alto Networks发布紧急警告，称其PAN-OS防火墙的User-ID认证门户中存在一个关键远程代码执行（RCE）零日漏洞，且已被攻击者积极利用。该漏洞影响运行PAN-OS的部分版本，具体编号尚未分配。
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile（以前称为MobileIron Core）存在代码注入漏洞。该漏洞源于对用户输入的验证不严，攻击者可通过发送特制的请求或数据包，在受影响的系统上执行任意代码。成功利用此漏洞可能导致
Huawei Secoway USG firewall weak password
华为Secoway USG系列企业级防火墙存在弱密码漏洞。该漏洞由知道创宇Seebug平台收录，编号SSVID-91373。攻击者可能利用设备默认或易猜测的管理员密码（如admin/admin、admin/123456等）直接登录Web管理
Bandit is vulnerable to CL.CL request smuggling via unrejected duplicate `Content-Length` header
CVE-2026-39805
### Summary Bandit is vulnerable to CL.CL HTTP request smuggling: it silently accepts requests with two `Content-Length
Bandit Buffers Unbounded WebSocket Continuation Frames, Allowing Unauthenticated Memory Exhaustion
CVE-2026-42786
### Summary A single unauthenticated WebSocket client can exhaust server memory in any Bandit-fronted application that a
Kubetail has a Cross-Site WebSocket Hijacking issue that allows attacker to read Kubernetes logs from authenticated users
CVE-2026-44514
### Summary Kubetail's dashboard exposes WebSocket endpoints that did not adequately validate the Origin header on conn
Netty has HTTP Header Injection via HttpProxyHandler Disabled Validation (Incomplete Fix CVE-2025-67735)
CVE-2026-42578
# Security Vulnerability Report: HTTP Header Injection via HttpProxyHandler Disabled Validation in Netty ## 1. Vulnerab
Angular SSR has Open Redirect and Request Steering via Encoded X-Forwarded-Prefix
CVE-2026-44437
### Description A vulnerability exists in the `X-Forwarded-Prefix` header processing logic within Angular SSR. The inter
ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data
CVE-2026-44423
## Summary `GET /api/sessions/:uid` returns the full session object for any authenticated caller, without scoping by the
ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace
CVE-2026-44424
## Summary `GET /api/devices/:uid` returns the full device object whenever the caller is authenticated, without verifyin
vm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escape
CVE-2026-44005
### Summary vm2's bridge exposes mutable proxies for real host-realm intrinsic prototypes and then forwards sandbox writ
FileBrowser Public Share DELETE API Path Traversal Allows Unauthenticated Arbitrary File Deletion
CVE-2026-44542
### **Summary** Attacker-controlled path input is joined with a trusted base path prior to sanitization, allowing trave
Fleet: Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering
CVE-2026-41050
### Impact Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant
Gotenberg has Unauthenticated RCE via ExifTool Metadata Key Injection
CVE-2026-42589
# Unauthenticated RCE in Gotenberg via Metadata Key Newline Injection ## Summary Gotenberg's `/forms/pdfengines/metada
Google's Android Apps Get Public Verification to Stop Supply Chain Attacks
Google has announced expanded Binary Transparency for Android as a way to safeguard the ecosystem from supply chain atta
Partitioning Ethereum without Eclipsing It.
本文提出了一种针对以太坊全节点的实用分区攻击，称为“Gethlighting”。该攻击的核心思想是：攻击者无需像传统日蚀攻击那样控制目标节点的所有对等连接，只需控制约一半（例如总共50个连接中的25个）即可实现有效的网络分区。通过实施低速率
How Great is the Great Firewall? Measuring China's DNS Censorship.
本研究首次系统性地测量和分析了中国的DNS审查（即“防火长城”中的一部分）。作者开发了一套分布式测量方法，在全球多个位置部署探测点，针对数千个已知被屏蔽的域名以及随机域名进行DNS查询，并收集响应数据。通过分析DNS劫持、伪造的响应以及超时
Security Analysis of Master-Password-Protected Password Management Protocols.
本文首次对主密码保护的密码管理协议（M3PM）进行了系统性的形式化安全分析。密码管理器（PM）帮助用户管理登录凭证，缓解记忆大量密码的负担，而M3PM协议描述了客户端与PM服务器之间的交互：客户端使用主密码进行身份验证，服务器协助跨设备检索