In the Linux kernel, the following vulnerability has been resolved: bpf: reject short IPv4/IPv6...
CVE-2026-53074
In the Linux kernel, the following vulnerability has been resolved: bpf: reject short IPv4/IPv6 inputs in bpf_prog_test
2026-06-25 归档
今日共收录 1364 条安全情报，包含 629 个 CVE，391 篇安全通告，以及 120 篇研究论文。
← 返回归档列表OliveTin has Unvalidated `ot_`-prefixed Arguments that Bypass Input Filtering
CVE-2026-53541
### Description The `filterToDefinedArgumentsOnly` function in the executor is intended to discard any arguments not ex
OliveTin: ValidateArgumentType API Endpoint's Missing Authentication Allows Action and Argument Enumeration
CVE-2026-48709
## Summary The `ValidateArgumentType` RPC endpoint in `service/internal/api/api.go` does not perform any authentication
OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination
CVE-2026-48708
## Summary OliveTin's template engine uses a **single shared `text/template.Template` instance** (`tpl` package-level v
Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL
CVE-2026-55542
### Impact Snipe-IT S3 signature image retrieval lacks authorization before temporary URL. On S3-backed deployments, a
Snipe-IT has Improper Authorization in File Deletion (IDOR)
CVE-2026-55519
### Impact A vulnerability was identified in Snipe-IT v8.4.0 (build 21280-g91a95dbc6) that allows any authenticated user
Snipe-IT Vulnerable to Privilege Escalation via Missing admin Permission Check in User Creation
CVE-2026-55483
### Impact The `store()` method in both the web and API `UsersController` only strips the superuser permission when a no
Snipe-IT has Multi-Tenancy Bypass via Bulk Asset Update
CVE-2026-55482
### Impact The `BulkAssetsController::update()` method accepts `company_id` directly from user input without calling `Co
Snipe-IT has a 2FA reset privilege bypass
CVE-2026-50550
### Impact A user who can edit other users could reset a superadmin's 2FA. ### Patches Patched in 8.5.0
Snipe-IT Vulnerable to User Account Escalation via CSV Import
CVE-2026-49976
### Impact The CSV user import in update mode bypasses user-edit authorization. A user with only the `import` permission
Snipe-IT's TOTP is Brute-Forceable Due to Missing Rate Limiting on `POST /two-factor`
CVE-2026-49870
### Impact `POST /two-factor` had no rate limiting, lockout, or attempt counter. An attacker with valid credentials can
phpMyFAQ: Missing userHasPermission() in 4 API write endpoints (CVE-2026-24421 Incomplete Fix)
CVE-2026-49205
Missing Authorization in API CategoryController — CVE-2026-24421 fixed BackupController by adding userHasPermission(Per
Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users
CVE-2026-48507
### Impact The vulnerability allows a non-admin user holding only the granular `users.edit` permission to lock every adm
Filament: Unauthenticated temporary file upload on auth pages
CVE-2026-48500
Any schema can contain a file upload form field, so Filament applies Livewire's `WithFileUploads` trait to the Livewire
opentelemetry-ebpf-profiler: Unprivileged process can trigger a denial of service on the ebpf-profiler agent
CVE-2026-48496
### Summary An unprivileged process can easily trigger the `processPIDEvents` goroutine to be blocked indefinitely, pre
Snipe-IT Vulnerable to Privilege Escalation for self via API Permissions Assignment
CVE-2026-48493
### Impact A user with only users.edit AND api permissions can send a PATCH to /api/v1/users/{their_own_id} and grant th
Snipe-IT's selectlist visibility is too permissive
CVE-2026-48492
### Impact The GET /api/v1/{object}/selectlist API endpoint is missing an authorization check. Any user who can log into
phpMyFAQ has Weak Cryptography - SHA1 for Password Hashing
CVE-2026-48488
### Summary Attachment passwords are hashed using SHA-1, a cryptographically broken algorithm. SHA-1 has been vulnerabl
Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSS
CVE-2026-48167
The `ImageColumn` and `ImageEntry` components render raw database values without escaping HTML. Where the data passed to
Filament: Timing-based user enumeration on login page
CVE-2026-48166
The login page has an observable timing discrepancy that allows unauthenticated attackers to enumerate registered email