CVE-2026-0261 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM)
CVE-2026-0261
CVE-2026-0261 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM)
2026-05-22 归档
今日共收录 1105 条安全情报，包含 281 个 CVE，422 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-0256 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: MEDIUM)
CVE-2026-0256
CVE-2026-0256 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: MEDIUM)
CVE-2026-0264 PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution (Severity: HIGH)
CVE-2026-0264
CVE-2026-0264 PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Executio
CVE-2026-0257 PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities (Severity: MEDIUM)
CVE-2026-0257
CVE-2026-0257 PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities (Severity: MEDIUM)
【安全通告】Linux Kernel 越权任意文件读取漏洞风险通告（CVE-2026-46333）
CVE-2026-46333
【安全通告】Linux Kernel 越权任意文件读取漏洞风险通告（CVE-2026-46333）
Microsoft Global Secure Access (GSA) Information Disclosure Vulnerability
CVE-2026-23663
Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.
Microsoft Entra ID Elevation of Privilege Vulnerability
CVE-2026-42901
Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
Microsoft Planetary Computer Pro Information Disclosure Vulnerability
CVE-2026-41104
Deserialization of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacker to disclose inform
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2026-45659
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
CVE-2026-33843
Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized
Azure Stack HCI Information Disclosure Vulnerability
CVE-2026-26147
Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.
Microsoft Copilot Tampering Vulnerability
CVE-2026-41090
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unaut
M365 Copilot Information Disclosure Vulnerability
CVE-2026-42827
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthoriz
Azure Resource Manager Elevation of Privilege Vulnerability
CVE-2026-47280
Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a net
Microsoft Power Pages Remote Code Execution Vulnerability
CVE-2026-23652
Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an u
Azure Orbital Spatio Remote Code Execution Vulnerability
CVE-2026-40412
Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code
@hulumi/policies: Stack-wide evidence bypassed Cloudflare and deployment-governance guardrails
Impact: @hulumi/policies versions before 1.3.2 used stack-wide evidence shortcuts in several Cloudflare and deployment-g
@hulumi/baseline: CloudTrail selector tampering events were not fully detected
Impact: @hulumi/baseline versions before 1.3.2 could miss some CloudTrail event-selector tampering evidence, reducing co
ASHES '23: Workshop on Attacks and Solutions in Hardware Security.
该论文是 ASHES '23 研讨会（Workshop on Attacks and Solutions in Hardware Security）的会议介绍。研讨会聚焦于硬件安全领域的攻击方法与防护解决方案，涵盖从芯片设计到系统层面的安全
Auditing Apple's DifferentialPrivacy.framework: Implementation Bugs, Misconfigurations, and Practical Risks
本文对苹果公司自2016年起部署的DifferentialPrivacy.framework进行了客户端审计，覆盖macOS Sonoma 14.2和Sequoia 15.6系统。研究团队通过逆向工程恢复Objective-C接口，构建运行