2026-05-10 归档

今日共收录 706 条安全情报,包含 57 个 CVE,372 篇安全通告,以及 20 篇研究论文。

← 返回归档列表
安全公告2026-05-08 发布INFO

free5GC's BSF concurrent PUT /nbsf-management/v1/subscriptions/{subId} crashes the BSF process via concurrent map read/write on Subscriptions

CVE-2026-44318

### Summary free5GC's BSF `PUT /nbsf-management/v1/subscriptions/{subId}` handler has an unsynchronized write on the glo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-08 发布INFO

free5GC's PCF npcf-smpolicycontrol POST /sm-policies panics on downstream UDR/OpenAPI 404 via nil pointer dereference

CVE-2026-44316

### Summary free5GC's PCF `POST /npcf-smpolicycontrol/v1/sm-policies` handler (`HandleCreateSmPolicyRequest`) panics wit

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-08 发布INFO

Kimai has an arbitrary file read in its invoice PDF renderer (admin)

CVE-2026-44298

## Summary Users with the role `System-Admin` (`ROLE_SYSTE_ADMIN`) and the permission `upload_invoice_template` can upl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-08 发布INFO

Open WebUI has Stored XSS in Pending User Overlay via Incorrect DOMPurify Application Order

CVE-2026-44568

## Vulnerability Details **CWE-79**: Cross-site Scripting (XSS) The `AccountPending.svelte` component renders the admi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-08 发布INFO

MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability...

CVE-2026-44400

MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability in the WebAdmin mobile

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-08 发布INFO

eventsource-encoder vulnerable to SSE event injection via unsanitized `event` and `id` fields

CVE-2026-44214

### Summary `eventsource-encoder` does not sanitize the `event` or `id` fields of an `EventSourceMessage` before serial

历史摘要 · 未重新核验 · GitHub Advisory

威胁情报2026-05-10 发布INFO

Firewall for AI

Akamai 发布了名为 'Firewall for AI' 的新产品,旨在保护 AI 应用免受分布式拒绝服务(DDoS)攻击和僵尸网络(botnet)威胁。该产品利用 Akamai 的边缘网络和安全研究能力,为 AI 工作负载提供额外的安

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-05-10 发布INFO

CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms

2026年5月10日,CrowdStrike宣布被Frost & Sullivan评为2026年云原生应用保护平台(CNAPP)雷达报告的领导者。该荣誉基于对CrowdStrike Falcon平台的全面评估,包括其云安全能力、威胁情报集成

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-10 发布INFO

CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud

CrowdStrike宣布将其实时云检测和响应(CDR)能力扩展到Google Cloud平台(GCP)。通过将CrowdStrike Falcon平台与GCP集成,安全团队能够实时监控云工作负载、容器和无服务器环境,检测异常行为并自动响应

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-10 发布INFO

CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection

CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-10 发布INFO

Security & Identity

Security & Identity

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-10 发布INFO

SAP on Google Cloud

SAP on Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-10 发布INFO

Inside Google Cloud

Inside Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-10 发布INFO

Google Cloud Next & Events

Google Cloud Next & Events

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-10 发布INFO

Google Cloud Consulting

Google Cloud Consulting

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-10 发布INFO

Transform with Google Cloud

Transform with Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-10 发布INFO

Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Google Threat Intelligence Group • 16-minute read

Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Goo

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-10 发布INFO

Threat IntelligenceRansomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat LandscapeBy Google Threat Intelligence Group • 53-minute read

Threat IntelligenceRansomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat LandscapeBy Googl

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-10 发布INFO

Google Cloud Products

Google Cloud Products

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-10 发布INFO

Cloud & Application Security

Cloud & Application Security

历史摘要 · 未重新核验 · CrowdStrike