今日共收录 1730 条安全情报，包含 831 个 CVE，478 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-9213
A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper traffic
CVE-2026-9211
An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operati
CVE-2026-9210
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected t
CVE-2026-9076
Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an
CVE-2026-47631
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows
CVE-2026-45583
Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an unauthorized attacker t
CVE-2026-45504
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over
CVE-2026-45503
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information ov
CVE-2026-45502
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information ov
CVE-2026-45501
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows
CVE-2026-45500
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows
CVE-2026-42770
Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly check
CVE-2026-41098
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Stack Edge allows an autho
CVE-2026-3088
Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted reque
CVE-2026-34183
Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing P
CVE-2026-0419
Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows u
CVE-2026-0417
Insufficient input validation vulnerability in NETGEAR devices allows authenticated administrators connected to the loca
CVE-2026-0416
Authenticated administrators connected to the local network can modify router functionality beyond what is intended thro
CVE-2026-0415
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected t
CVE-2026-0414
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected t