n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions
CVE-2026-54309
## Impact When `@n8n/mcp-browser` is run in HTTP transport mode, the MCP endpoint accepts session initialization and too
2026-06-17 归档
今日共收录 1195 条安全情报，包含 310 个 CVE，456 篇安全通告，以及 103 篇研究论文。
← 返回归档列表Rockwell Automation Logix 5370 & 5570 Controllers Vulnerable To Denial of Service Via CIP
CVE-2026-11317
Rockwell Automation 发布安全公告，其 Logix 5370 和 5570 系列可编程逻辑控制器（PLC）存在一个拒绝服务漏洞（CVE-2026-11317）。该漏洞源于产品对特制 CIP（通用工业协议）消息的处理不当，导
Rockwell Automation RSLinx
CVE-2020-13573
CISA发布关于Rockwell Automation RSLinx Classic的漏洞通告，涉及CVE-2020-13573。该漏洞是一个栈缓冲区溢出漏洞，存在于RSLinx Classic版本4.50.00及更早版本中。攻击者无需身份
Rockwell Automation FLEX I/O EtherNet/IP Adapters
CVE-2026-0646 · CVE-2026-0647
Rockwell Automation FLEX I/O EtherNet/IP 适配器（型号 1794-AENTR 和 1794-AENTRXT）存在两个严重漏洞，影响版本 V2.012。CVE-2026-0646 是内存未释放漏洞（CW
Rockwell Automation FactoryTalk Analytics PavilionX
CVE-2025-14272
View CSAF Summary Successful exploitation of this vulnerability could result in an attacker executing privileged operati
Gitea: Missing repository-unit authorization on issue-template API endpoints
CVE-2026-27783
## Summary Three Gitea API endpoints — `GET /repos/{owner}/{repo}/issue_templates`, `GET /repos/{owner}/{repo}/issue_co
OpenClaw before 2026.4.25 contains a control scope enforcement bypass vulnerability in the focus...
CVE-2026-53850
OpenClaw before 2026.4.25 contains a control scope enforcement bypass vulnerability in the focus command that allows aut
OpenClaw before 2026.5.6 contains a privilege escalation vulnerability in the Active Memory write...
CVE-2026-53847
OpenClaw before 2026.5.6 contains a privilege escalation vulnerability in the Active Memory write scope that allows Gate
Daytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles
CVE-2026-54322
### Summary Daytona's organization role update and delete endpoints authorized the caller as an owner of the organizatio
Caddy: FastCGI header normalization bypass in `forward_auth copy_headers`
CVE-2026-52845
### Summary `forward_auth copy_headers` deletes the exact client-supplied identity header before copying the trusted va
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
Rclone: Unauthenticated command execution in `rclone rcd --rc-serve` via inline remote instantiation, bypassing CVE-2026-41179 fix
CVE-2026-49980
## Summary `rclone rcd --rc-serve` accepts unauthenticated `GET` and `HEAD` requests to paths of the form: ```text /[r
n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints
CVE-2026-54305
## Impact Three EE endpoints used by the Dynamic Credentials feature accepted any authenticated n8n session without perf
Threat IntelligenceExploitation of KnowledgeDeliver via ViewState Deserialization VulnerabilityBy Mandiant • 7-minute read
Threat IntelligenceExploitation of KnowledgeDeliver via ViewState Deserialization VulnerabilityBy Mandiant • 7-minute r
AI Agent 的信任边界：从中转 API 到 Agent Tool Call 的供应链劫持
AI Agent 的信任边界：从中转 API 到 Agent Tool Call 的供应链劫持
Deep Dive into In-app Browsers: Uncovering Hidden Pitfalls in Certificate Validation.
该论文系统性地评估了应用内浏览器（WebView）的证书验证机制，重点分析其对X.509证书标准的遵循程度以及对撤销和证书透明（CT）等高级证书扩展的支持情况。作者开发了一个统一的测试框架FAITH，利用物理iOS设备和Android模拟器
ChargePrint: A Framework for Internet-Scale Discovery and Security Analysis of EV Charging Management Systems.
电动汽车充电管理系统（EVCMS）是一类允许用户远程操作充电站（EVCS）的专用软件。随着全球电动汽车保有量增长，EVCMS部署数量激增，带来了新的攻击面。本文提出了一种新颖的多阶段框架ChargePrint，用于互联网规模发现EVCMS并
Safeguarding Graph Neural Networks against Topology Inference Attacks.
图神经网络（GNN）在基于图结构的数据学习中表现出强大能力，但其广泛应用引发了严重的隐私问题。尽管已有研究主要关注边级隐私（如边是否存在），但图拓扑结构（即图的整体形状）的机密性是一个关键但未被充分探索的威胁。本文首次系统研究了GNN中的拓