2026-05-14 归档

今日共收录 1527 条安全情报,包含 720 个 CVE,444 篇安全通告,以及 62 篇研究论文。

← 返回归档列表
安全公告2026-05-13 发布MEDIUM

CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM)

CVE-2026-0250

GlobalProtect App 是 Palo Alto Networks 提供的远程接入 VPN 客户端,用于连接企业的 Portal 或 Gateway。该漏洞(CVE-2026-0250)被标记为缓冲区溢出,在连接过程中触发。由于公

历史摘要 · 未重新核验 · Palo Alto Security Advisories

安全公告2026-05-13 发布INFO

Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server

## Summary If you have the MCP Server ID, you can connect to the MCP server even if you don't have permissions to the s

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Ivanti Endpoint Manager Mobile代码注入漏洞

Ivanti Endpoint Manager Mobile(EPMM)存在代码注入漏洞。该漏洞允许攻击者通过特制请求向受影响的移动设备管理平台注入恶意代码,可能导致远程代码执行或系统控制。由于缺乏具体技术细节,受影响版本范围和攻击向量尚未

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-05-13 发布INFO

TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)

根据知道创宇/Seebug漏洞库公开的信息,天融信防火墙存在一个远程利用漏洞,代号ELIGIBLEBACHELOR。该漏洞可能允许未经授权的远程攻击者向目标防火墙发送特制请求,从而触发任意代码执行或未授权操作。由于缺乏具体技术细节和官方确认

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-05-14 发布INFO

【云防火墙】腾讯云 VPC 边界防火墙(集群模式)超量管控生效通知

【云防火墙】腾讯云 VPC 边界防火墙(集群模式)超量管控生效通知

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-05-13 发布INFO

A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto...

CVE-2026-0258

A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software al

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables...

CVE-2026-0256

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables...

CVE-2026-0250

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle att

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access...

CVE-2026-0246

A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a locally a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto...

CVE-2026-0257

Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

An improper certificate validation vulnerability in the Prisma Access Agent® for Android and...

CVE-2026-0248

An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attack

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly...

CVE-2026-0236

A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its A

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app...

CVE-2026-0251

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to e

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™...

CVE-2026-0249

Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacke

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally...

CVE-2026-0235

A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to b

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500...

CVE-2026-0259

An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables u

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an...

CVE-2026-0262

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an...

CVE-2026-0261

Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software...

CVE-2026-0263

A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an...

CVE-2026-0265

An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with n

历史摘要 · 未重新核验 · GitHub Advisory