今日共收录 1188 条安全情报，包含 407 个 CVE，402 篇安全通告，以及 101 篇研究论文。
← 返回归档列表CVE-2026-45282
Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, a
CVE-2026-45279
Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.14,
CVE-2026-45278
Nextcloud is an open source content collaboration platform. From version 6.1.0 to before version 8.2.2, an attacker can
CVE-2026-45277
Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arb
CVE-2026-45275
Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, a privilege escalation vulnerability
CVE-2026-43958
A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a
CVE-2026-43625
CodexBar prior to 0.32.0 contains a session cookie leakage vulnerability that allows network attackers to intercept impo
CVE-2026-43624
F5-TTS through version 1.1.20 contains a path traversal vulnerability in the finetune Gradio handlers that allows unauth
CVE-2026-43623
microtar through 0.1.0 contains a stack-based buffer overflow vulnerability in the raw_to_header() function in src/micro
CVE-2026-41013
Input validation bypass in SMB volume mount handling in CloudFoundry Foundation diego-release allows low-privileged CF s
CVE-2026-40990
OOM error is possible while attempting to add infinite amount of functions to Function Registry. Affected Spring Produc
CVE-2026-40989
Under infinite recursion in the routing layer, request-handling can cause OOM error. Affected Spring Products and Versi
CVE-2026-37235
FlexRIC v2.0.0 trusts the xapp_id field from E42 message payloads without binding it to the sender's SCTP association. T
CVE-2026-37233
FlexRIC v2.0.0 contains an authorization bypass in the iApp's xApp isolation mechanism. The equality function eq_xapp_ri
CVE-2026-37232
An issue was discovered in OpenAirInterface5G 2.4.0 (nr-softmodem) in the E2SM-KPM RAN Function's PRB utilization metric
CVE-2026-37231
FlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t message fields. After 65,
CVE-2026-37230
FlexRIC v2.0.0 crashes when the near-RT RIC receives a RIC_INDICATION message with a ran_func_id that does not exist in
CVE-2026-37229
FlexRIC v2.0.0 contains a reachable assertion in e2ap_create_pdu() triggered when ASN.1 PER decoding fails. A remote una
CVE-2026-37228
FlexRIC v2.0.0 contains a reachable assertion in e2ap_recv_sctp_msg() (src/lib/ep/e2ap_ep.c). The function allocates a f
CVE-2026-37226
FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST referencing a non-existent E2 Node. The lo