Linux Kernel vulnerability Dirty Frag
CVE-2026-43500 · CVE-2026-43284
CVSSv3 Score: 7.9 Linux kernel is impacted by CVE-2026-43284 and CVE-2026-43500 which chained together create
2026-06-04 归档
今日共收录 1001 条安全情报，包含 200 个 CVE，398 篇安全通告，以及 115 篇研究论文。
← 返回归档列表DIST-FL: Enhancing Security for TEE-based Aggregation in Federated Learning
联邦学习（FL）中，服务器端对手可能通过操纵客户端选择或重放聚合结果来破坏系统鲁棒性和隐私。现有基于可信执行环境（TEE）的FL协议虽然旨在防范服务器端对手，但TEE本身存在状态回滚和I/O操纵等局限性，攻击者可利用这些漏洞发起攻击。本文首
SoK: Post-Quantum Cryptography (PQC) Implementation in Software Systems
本文是一篇关于后量子密码学（PQC）在软件系统中实现的系统化知识综述（SoK）。研究背景是：随着量子计算威胁日益紧迫，软件系统需要从传统公钥密码迁移到抗量子算法。尽管标准化PQC算法已发布，但开发者和组织在集成过程中仍面临重大挑战。现有研究
TITAN-FedAnil+: Trust-Based Adaptive Blockchain Federated Learning for Resource-Constrained Intelligent Enterprises
本文提出了一种名为TITAN-FedAnil+的信任感知自适应网络框架，旨在解决资源受限企业环境中区块链联邦学习面临的数据异构性和去中心化安全威胁。核心创新包括：基于亲和传播的自适应聚类聚合机制，无需预先知道攻击者数量即可动态识别并过滤恶意
Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks
该论文提出了一种针对深度神经网络参数攻击的通用防御方法 ParDef。参数攻击直接篡改模型内部参数，持久影响所有后续推理，而现有防御要么需要重训练、要么导致精度下降或仅针对特定攻击类型。ParDef 融合三种技术：1）密钥通道重参数化，通过
Proof-Carrying Agent Actions: Model-Agnostic Runtime Governance for Heterogeneous Agent Systems
该论文提出了一种称为 Proof-Carrying Agent Actions (PCAA) 的运行时不特定的治理模型，用于解决异构代理系统中运行时控制点多样且不统一导致的治理难题。当前代理系统通过本地编码工具、框架 SDK、托管代理平台、
Bayesian Membership Privacy for Graph Neural Networks
本文针对图神经网络（GNN）的节点级成员隐私问题展开研究。现有的隐私分析大多继承自非图场景，忽视了图结构中的相关性以及训练图采样的随机性。特别是，节点相关的先验知识使得仅凭第一类错误和第二类错误无法完全刻画最佳成员推断测试。为此，作者提出了
Q-FE: A Quantum-Native 6G Far-Edge Architecture Securing Industrial IoT Digital Twins via CSIDH-PQC and Asynchronous Federated Learning
第六代（6G）无线网络将支撑超密集工业物联网（IIoT）生态系统，其中资源受限的远边缘设备（自主移动机器人、工业执行器、联网车辆）必须同时满足亚毫秒级延迟、10^{-7}级可靠性和长达数十年的密码安全性。当前架构将数字孪生（DT）计算委托给
Learn from Your Mistakes: Tree-like Self-Play for Secure Code LLMs
本文提出了一种名为 Tree-like Self-Play (TSP) 的框架，旨在解决大型语言模型（LLM）在代码生成中易重现训练数据中安全漏洞的问题。现有的对齐技术如监督微调（SFT）和强化学习（RL）通常对整个序列进行粗粒度优化，无法
ZK-Flex: A Flexible and Scalable Framework for Accelerating Zero-Knowledge Proofs
零知识证明（ZKP）允许证明者在不泄露私有数据的情况下向验证者证明计算正确性，兼顾隐私与可验证性。然而，证明生成过程计算密集，主要涉及多项式（POLY）和椭圆曲线（EC）运算。这两类工作负载对硬件加速提出两个关键挑战：高效支持多种大精度模乘
Echelon: Auditable Aggregate-Only Language-Model Adaptation Across Privacy Boundaries
该论文提出了一种名为Echelon的跨组织语言模型适应训练架构，旨在解决日益严峻的治理约束问题：在许多部署场景中，设备级模型状态（参数、激活值、优化器状态、每次更新）不能导出到管理边界之外。现有的分布式和联邦学习架构通常假设跨站模型交换，然
IntraShuffler: A Privacy Preserving Framework for Heterogeneous DP Federated Learning
联邦学习（FL）中，异构差分隐私（HDP）允许客户端根据自身策略和数据敏感度选择不同的隐私预算（ε_i）。现有HDP-FL系统常采用ε感知的服务器聚合，通过根据客户端声明的隐私预算重新加权其梯度更新来提升模型效用。然而，联邦学习中的梯度更新
FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 leak the exact system version through asset cache buster parameters in HTML outp...
CVE-2026-40495
FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 leak the exact system v
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 inner_thoff desync In nft_inner_parse_l2l3(), when processing inner IPv6 pac...
CVE-2026-46244
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 inner_thoff desync
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change between requests from the same source IP. Combined with t...
CVE-2026-36609
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting its own IP ...
CVE-2026-36608
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to forward external ports to
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows unauthenticated brute-force attacks via the TDDP password change endpoint (code=10), which lacks the rate ...
CVE-2026-36607
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows unauthenticated brute-force attacks via the TDDP
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 encrypts configuration backups with a hardcoded DES key using single DES in ECB mode. An attacker who obtains a b...
CVE-2026-36606
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 encrypts configuration backups with a hardcoded DES key
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 is vulnerable to a HTTP denial of service via a low number of crafted incomplete HTTP requests, causing a persist...
CVE-2026-36605
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 is vulnerable to a HTTP denial of service via a low numb
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 does not validate the HTTP Host header, enabling DNS rebinding attacks. An external attacker can rebind a domain ...
CVE-2026-36604
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 does not validate the HTTP Host header, enabling DNS reb