iOS 15.8.5 and iPadOS 15.8.5

iOS 15.8.5 and iPadOS 15.8.5

历史摘要 · 未重新核验 · Apple Security Releases

iOS 18.6.2 and iPadOS 18.6.2

iOS 18.6.2 and iPadOS 18.6.2

历史摘要 · 未重新核验 · Apple Security Releases

Android Code Search

Android Code Search

历史摘要 · 未重新核验 · Android Security Bulletin

Android Devices

Android Devices

历史摘要 · 未重新核验 · Android Security Bulletin

Secure an Android device

Secure an Android device

历史摘要 · 未重新核验 · Android Security Bulletin

Android 16 QPR2

Android 16 QPR2

历史摘要 · 未重新核验 · Android Security Bulletin

Mobile network security

Mobile network security

历史摘要 · 未重新核验 · Android Security Bulletin

MFSA 2026-18Security Vulnerabilities fixed in Focus for iOS 148.2

MFSA 2026-18Security Vulnerabilities fixed in Focus for iOS 148.2

历史摘要 · 未重新核验 · Mozilla Security Advisories

MFSA 2026-12Security Vulnerabilities fixed in Firefox for iOS 147.4

MFSA 2026-12Security Vulnerabilities fixed in Firefox for iOS 147.4

历史摘要 · 未重新核验 · Mozilla Security Advisories

Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces,...

CVE-2026-32683

Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transm

历史摘要 · 未重新核验 · GitHub Advisory

Mistune Heading ID Attribute has Injection XSS

CVE-2026-44897

## Summary `HTMLRenderer.heading()` builds the opening `` tag by string-concatenating the `id` attribute value directly

历史摘要 · 未重新核验 · GitHub Advisory

@yoda.digital/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools

CVE-2026-44895

## SSE Transport Has No Authentication and Wildcard CORS, Exposing All 86 GitLab Tools Including Destructive Operations

历史摘要 · 未重新核验 · GitHub Advisory

Mistune Math Plugin has an XSS Escape Bypass

CVE-2026-44708

## Summary The mistune math plugin renders inline math (`$...$`) and block math (`$$...$$`) by concatenating the raw use

历史摘要 · 未重新核验 · GitHub Advisory

Snipe-IT has insecure permissions in file uploads

CVE-2026-37709

Insecure Permissions vulnerability in grokability snipe-it versions through 8.4.0, fixed after 2026-03-10 commit 676a995

历史摘要 · 未重新核验 · GitHub Advisory

free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers

CVE-2026-44329

### Summary free5GC's SMF mounts the `UPI` management route group without OAuth2/bearer-token authorization middleware.

历史摘要 · 未重新核验 · GitHub Advisory

free5GC's SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating

CVE-2026-44328

### Summary free5GC's SMF mounts the `UPI` management route group without inbound OAuth2 middleware (same root cause as

历史摘要 · 未重新核验 · GitHub Advisory

free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request)

CVE-2026-44324

### Summary free5GC's UDR `nudr-dr` `DELETE /subscription-data/{ueId}/{servingPlmnId}/ee-subscriptions/{subsId}/amf-subs

历史摘要 · 未重新核验 · GitHub Advisory

free5GC's UDR nudr-dr DELETE amf-subscriptions panics on missing subsId when UE state exists (nil pointer dereference)

CVE-2026-44323

### Summary free5GC's UDR `nudr-dr` `DELETE /subscription-data/{ueId}/{servingPlmnId}/ee-subscriptions/{subsId}/amf-subs

历史摘要 · 未重新核验 · GitHub Advisory

free5GC's NEF 3gpp-pfd-management PATCH applications/{appId} panics on UDR access failure due to nil ProblemDetails dereference

CVE-2026-44322

### Summary free5GC's NEF `PATCH /3gpp-pfd-management/v1/{afId}/transactions/{transId}/applications/{appId}` handler pan

历史摘要 · 未重新核验 · GitHub Advisory

free5GC's NEF nnef-callback route group is unauthenticated; forged callback requests are accepted into the processing path

CVE-2026-44320

### Summary free5GC's NEF mounts the `nnef-callback` route group without inbound OAuth2/bearer-token authorization. A fo

历史摘要 · 未重新核验 · GitHub Advisory