2026-06-10 归档

今日共收录 1730 条安全情报，包含 831 个 CVE，478 篇安全通告，以及 120 篇研究论文。

← 返回归档列表

漏洞预警2026-06-09 发布INFO

Insufficient input validation of buffers vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modif...

CVE-2026-0413

Insufficient input validation of buffers vulnerability in the listed NETGEAR models allows authenticated administrators

历史摘要 · 未重新核验 · NVD

#cve #cwe-121

漏洞预警2026-06-09 发布INFO

Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows administrators connected to the local networ...

CVE-2026-0412

Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-09 发布INFO

An information disclosure vulnerability in the NETGEAR Orbi satellites could allow a user connected to your network to gain administrator access to the Orbi router. The listed N...

CVE-2026-0411

An information disclosure vulnerability in the NETGEAR Orbi satellites could allow a user connected to your network to g

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-09 发布INFO

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

CVE-2026-0410

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorize

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-06-09 发布INFO

A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on your device when t...

CVE-2026-0409

A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the rout

历史摘要 · 未重新核验 · NVD

#cve #cwe-119

漏洞预警2026-06-09 发布INFO

A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, FortiPortal 7.0 all versions may allow attacker to improper...

CVE-2026-49938

A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, Fo

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-06-09 发布INFO

An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root

CVE-2026-10727

An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote aut

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-09 发布INFO

An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, Fort...

CVE-2025-67862

An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet Forti

历史摘要 · 未重新核验 · NVD

#cve #cwe-1244

漏洞预警2026-06-09 发布INFO

A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a local attacker to leverage a race condition and symlink mani...

CVE-2026-2638

A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a loc

历史摘要 · 未重新核验 · NVD

#cve #cwe-367

漏洞预警2026-06-09 发布INFO

Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions: Spring Framework 5.3.0 through 5.3.48.

CVE-2026-41847

Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions:

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-06-08 发布INFO

fabric-chaincode-java is a Java based implementation of Hyperledger Fabric chaincode shim APIs. From version 2.3.1 to before version 2.5.10, when chaincode is deployed in chainc...

CVE-2026-45581

fabric-chaincode-java is a Java based implementation of Hyperledger Fabric chaincode shim APIs. From version 2.3.1 to be

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

威胁情报2026-06-10 发布INFO

Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse

CVE-2026-20929

Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse

历史摘要 · 未重新核验 · CrowdStrike

#edr #crowdstrike #apt

威胁情报2026-06-09 发布INFO

Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257

CVE-2026-0257

We include indicators of activity and mitigations for PAN-OS vulnerability CVE-2026-0257. The post Threat Brief: Active

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #apt #unit42 #malware

威胁情报2026-06-09 发布INFO

Siemens KACO Blueplanet Inverters

CVE-2025-40946 · CVE-2026-41125

View CSAF Summary KACO blueplanet Inverters contain multiple vulnerabilities that could allow an attacker to derive the

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#advisory #government #apt #cisa

威胁情报2026-06-09 发布INFO

WinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in Ukraine

CVE-2025-8088

Two Russia-aligned cyber attack campaigns have continued to exploit a security flaw in WinRAR to target Ukrainian organi

历史摘要 · 未重新核验 · The Hacker News

#conti #cybersecurity #news #thn

安全公告2026-06-10 发布INFO

Compatibility Test Suite (CTS)

Android 兼容性测试套件（Compatibility Test Suite, CTS）是用于验证 Android 设备是否符合兼容性定义的官方测试工具。本次公告来自 Android 安全公告板块，但仅提及 CTS 的文档或版本更新，未