When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are...
CVE-2026-42409
When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual s
2026-05-14 归档
今日共收录 1527 条安全情报，包含 720 个 CVE，444 篇安全通告，以及 62 篇研究论文。
← 返回归档列表An authenticated attacker with the Resource Administrator or Administrator role can create SNMP...
CVE-2026-42924
An authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects th
A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated...
CVE-2026-42406
A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This...
CVE-2026-42945
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists w
A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may...
CVE-2026-42946
A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory
In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: Configure VRR...
CVE-2026-43477
In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: Configure VRR timings after enabling
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When...
CVE-2026-42934
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When charset, source_charse
Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp...
CVE-2026-42937
Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and i
When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed TMOS Shell (tmsh)...
CVE-2026-42408
When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed TMOS Shell (tmsh) command that may allow a high
When embedded Packet Velocity Acceleration (ePVA) acceleration is configured, undisclosed local...
CVE-2026-42781
When embedded Packet Velocity Acceleration (ePVA) acceleration is configured, undisclosed local ethernet traffic can cau
A directory traversal vulnerability exists in BIG-IP SSL Orchestrator that allows an...
CVE-2026-42780
A directory traversal vulnerability exists in BIG-IP SSL Orchestrator that allows an authenticated attacker with high pr
When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may...
CVE-2026-42930
When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Applia
uniget is Vulnerable to Command Injection in tool.Check Leading to Arbitrary Code Execution
CVE-2026-45152
I discovered a command injection vulnerability in uniget that allows arbitrary command execution through the metadata lo
Anchor: Program<'info, System> is not properly validated
CVE-2026-45137
### Summary An logic error causes anchor programs to accept any program id when requiring the system program id, causing
claude-code-cache-fix vulnerable to local code execution via Python triple-quote injection in tools/quota-statusline.sh
CVE-2026-45136
## Summary `tools/quota-statusline.sh` (introduced in v3.5.0) interpolates Claude Code's hook stdin payload directly in
Nautobot: GitRepository.current_head field should not be writable through REST API
CVE-2026-44798
### Impact A user with access to add/change a GitRepository record could use the REST API to directly set the `current_
Nautobot: Object bulk rename UI actions vulnerable to denial of service by crafted regular expression (REDoS)
CVE-2026-44796
### Impact Nautobot UI object-bulk-rename endpoints (for example, `/dcim/interfaces/rename/`) were vulnerable to applic
go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion
CVE-2026-44740
### Impact Multiple components may improperly handle crafted or malformed input, resulting in panics, infinite loops, un
Grav: Twig sandbox allows editor-role users to exfiltrate all plugin secrets via Config::toArray()
CVE-2026-44738
## Summary The Twig sandbox allow-list permits any user with the `admin.pages` role to call `config.toArray()` from wit
Systeminformation vulnerable to Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name
CVE-2026-44724
## Summary On Linux, `systeminformation` is vulnerable to command injection in `networkInterfaces()` when an **active N