OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in shell inline-command...
CVE-2026-53866
OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in shell inline-command parsing that allows authent
2026-06-17 归档
今日共收录 1195 条安全情报，包含 310 个 CVE，456 篇安全通告，以及 103 篇研究论文。
← 返回归档列表In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input...
CVE-2026-0142
In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input validation. This could
In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to...
CVE-2026-0138
In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory corruption. This coul
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...
CVE-2026-0139
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code executio
OpenClaw before 2026.5.12 contains a bootstrap token replay vulnerability allowing callers with...
CVE-2026-53862
OpenClaw before 2026.5.12 contains a bootstrap token replay vulnerability allowing callers with pending token access to
In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory...
CVE-2026-0134
In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory reset due to a logic erro
OpenClaw before 2026.5.6 contains an allowlist bypass vulnerability in the macOS Swift exec...
CVE-2026-53861
OpenClaw before 2026.5.6 contains an allowlist bypass vulnerability in the macOS Swift exec feature that misses combined
In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead...
CVE-2026-0132
In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code executio
In RtcpByePacket::decodeByePacket, there is a possible due to a missing bounds check. This could...
CVE-2026-0129
In RtcpByePacket::decodeByePacket, there is a possible due to a missing bounds check. This could lead to remote informa
In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer...
CVE-2026-0130
In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow. This could lead to
In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow....
CVE-2026-0140
In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote
OpenClaw before 2026.4.25 contains an input validation vulnerability in tool group policy callers...
CVE-2026-53863
OpenClaw before 2026.4.25 contains an input validation vulnerability in tool group policy callers that accept unvalidate
In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow....
CVE-2026-0131
In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow. This could lead to loca
In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer...
CVE-2026-0128
In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer overflow. This could lead
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead...
CVE-2026-0135
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution
In decodeAppPacket of RtcpAppPacket.cpp, there is a possible OOB read due to a missing bounds...
CVE-2026-0141
In decodeAppPacket of RtcpAppPacket.cpp, there is a possible OOB read due to a missing bounds check. This could lead to
OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution...
CVE-2026-53865
OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution that allows workspace-der
OpenClaw before 2026.5.3 contains a policy enforcement vulnerability where Zalo contacts with...
CVE-2026-53857
OpenClaw before 2026.5.3 contains a policy enforcement vulnerability where Zalo contacts with mutable display metadata c
OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to...
CVE-2026-53859
OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to bypass blocklist comparison
OpenClaw before 2026.4.24 contains an insecure file permissions vulnerability in config recovery...
CVE-2026-53856
OpenClaw before 2026.4.24 contains an insecure file permissions vulnerability in config recovery that restores OpenClaw.