【安全通告】Linux Kernel "CIFSwitch" 本地权限提升漏洞风险通告
【安全通告】Linux Kernel "CIFSwitch" 本地权限提升漏洞风险通告
2026-05-31 归档
今日共收录 804 条安全情报，包含 64 个 CVE，387 篇安全通告，以及 99 篇研究论文。
← 返回归档列表Early Stable Update for Desktop
The Stable channel has been updated to 149.0.7827.53/.54 for Windows and Mac as part of our early stable release to a sm
Chrome Beta for Desktop Update
The Beta channel has been updated to 149.0.7827.53 for Windows, Mac and Linux.A partial list of changes is available in
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
A Secure, Manifest-Based Framework for Delegated Privilege Promotion
本文提出一种基于清单（manifest）的安全框架，用于在企业级软件系统中实现受限的权限提升委派。大型企业软件通常以低权限服务账户运行以遵循最小权限原则，但仍需少数特权组件（如具有提升所有权、权限或能力的可执行文件）执行窄范围操作。这导致维
A security vulnerability has been detected in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6. Affected is the function ...
CVE-2026-10168
CVE-2026-10168 是 OUSL-GROUP-BrinaryBrains 开发的学校学生管理系统（School Student Management System）中的一个安全漏洞。该漏洞影响截至 commit 1e70e5ad1
A weakness has been identified in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6. This impacts the function sign_auth_c...
CVE-2026-10167
CVE-2026-10167 影响 OUSL-GROUP-BrinaryBrains 开发的 School Student Management System 至 commit 1e70e5ad1125b86dca4ee086eb6bb12
A vulnerability was found in Edimax BR-6478AC 1.23. Impacted is the function formUSBFolder of the file /goform/formUSBFolder of the component POST Request Handler. The manipulat...
CVE-2026-10164
Edimax BR-6478AC 路由器固件版本 1.23 中存在一个缓冲区溢出漏洞，位于 /goform/formUSBFolder 文件的 formUSBFolder 函数中，属于 POST 请求处理器组件。攻击者可通过远程方式，操纵
A vulnerability has been found in Edimax BR-6478AC 1.23. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST Request Handler....
CVE-2026-10163
Edimax BR-6478AC 无线路由器固件版本 1.23 中存在一个缓冲区溢出漏洞（CVE-2026-10163）。该漏洞存在于 /goform/formUSBAccount 文件的 formUSBAccount 函数中，通过 POS
A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This vulnerability affects the function formSetPassword of the file /goform/formSetPassword. Executing a manipulation of th...
CVE-2026-10162
该漏洞影响 TRENDnet TEW-432BRP 路由器固件版本 3.10B20。漏洞位于 /goform/formSetPassword 文件中的 formSetPassword 函数，通过操纵 'webpage' 参数可导致栈缓冲区溢
A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. This affects the function formResetStatistic of the file /goform/formResetStatistic. Performing a manipulation of th...
CVE-2026-10161
CVE-2026-10161 影响 TRENDnet TEW-432BRP 路由器固件版本 3.10B20。该漏洞位于 /goform/formResetStatistic 文件的 formResetStatistic 函数中，通过操控 s
A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Affected by this issue is the function formSetEnableWizard of the file /goform/formSetEnableWizard. Su...
CVE-2026-10160
TRENDnet TEW-432BRP 无线路由器（固件版本 3.10B20）的 /goform/formSetEnableWizard 文件中存在栈缓冲区溢出漏洞（CVE-2026-10160）。该漏洞源于 formSetEnableWi
A weakness has been identified in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formSysLog of the file /goform/formSysLog. This manipulation of the...
CVE-2026-10159
TRENDnet TEW-432BRP 路由器固件版本 3.10B20 中存在一个栈溢出漏洞。该漏洞位于 /goform/formSysLog 文件中的 formSysLog 函数，通过向 current_page 参数传递特制数据可触发缓
A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. Affected is the function formPortFw of the file /goform/formPortFw. The manipulation of the argument server_n...
CVE-2026-10158
CVE-2026-10158 影响 TRENDnet TEW-432BRP 路由器固件版本 3.10B20。该漏洞位于 /goform/formPortFw 文件中的 formPortFw 函数，通过操纵 server_name 参数可触发
A vulnerability was identified in Open5GS up to 2.7.6. This impacts an unknown function of the file src/amf/ngap-handler.c of the component NGAP PathSwitchRequest Message Handle...
CVE-2026-10157
于开源5G核心网项目Open5GS（版本2.7.6及之前）中发现一个高危认证绕过漏洞。该漏洞位于AMF（接入与移动性管理功能）组件的NGAP路径切换请求消息处理函数（src/amf/ngap-handler.c）中。由于对NGAP Path
A vulnerability was determined in Open5GS up to 2.7.7. This affects the function handle_amf_info in the library /lib/sbi/nnrf-handler.c of the component nf-instances Endpoint. E...
CVE-2026-10156
CVE-2026-10156 影响 Open5GS 2.7.7 及更早版本。漏洞位于库 /lib/sbi/nnrf-handler.c 中的 handle_amf_info 函数，属于 nf-instances Endpoint 组件。攻击
A vulnerability has been found in Dolibarr ERP CRM 23.0.0/23.0.1/23.0.2. The affected element is an unknown function of the file htdocs/user/messaging.php. Such manipulation of ...
CVE-2026-10154
Dolibarr ERP CRM 是一个开源的企业资源规划与客户关系管理系统。该漏洞存在于 23.0.0、23.0.1 和 23.0.2 版本中，位于文件 htdocs/user/messaging.php 的某个未知函数中。攻击者可以通过
A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/Abstrac...
CVE-2026-10153
该漏洞存在于 westboy 开发的 CicadasCMS 中，影响版本直至 2431154dac8d0735e04f1fd2a3c3556668fc8dab。漏洞位于 org/springframework/cache/support/A
A vulnerability was detected in TaleLin lin-cms-spring-boot up to 0.2.1. This issue affects some unknown processing of the file src/main/java/io/github/talelin/latticy/controlle...
CVE-2026-10152
TaleLin lin-cms-spring-boot 是一个基于 Java 的内容管理系统框架。在版本 0.2.1 及之前，其 Book 端点（位于 BookController.java）存在不正确的访问控制漏洞。攻击者可以远程利用该漏
A weakness has been identified in Edimax BR-6478AC 1.23. This affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Handler. Thi...
CVE-2026-10127
Edimax BR-6478AC 路由器固件版本1.23中存在一个命令注入漏洞。该漏洞位于/goform/formStaDrvSetup文件中的formStaDrvSetup函数，属于POST请求处理程序的一部分。攻击者可以通过向目标设备发