今日共收录 1364 条安全情报，包含 629 个 CVE，391 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-12486
Multiple OS command injection vulnerabilities exist in the libNetSetObj.so functionality of GeoVision GV-I/O Box 4E 2.09
CVE-2026-55450
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
CVE-2026-7539
A potential security vulnerability has been identified in the HP Accessory WMI Provider installer for some HP Docking St
CVE-2026-11998
A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs and
CVE-2026-13037
Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attacker to execute arbitr
CVE-2026-13208
A flaw was found in KubeVirt's virt-handler domain notify server. The gRPC handlers for HandleDomainEvent and HandleK8SE
CVE-2026-13030
Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to obtain potenti
CVE-2026-53124
In the Linux kernel, the following vulnerability has been resolved: ublk: reset per-IO canceled flag on each fetch If
CVE-2026-53122
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between reflink and transaction
CVE-2026-53104
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix memory leak destroying device All
CVE-2026-53111
In the Linux kernel, the following vulnerability has been resolved: bpf: test_run: Fix the null pointer dereference iss
CVE-2026-53105
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: prevent NULL vif dereference in
CVE-2026-45052
## Summary **Description** An Improper Authorization (CWE-285) issue in OpenAM's Liberty Web Services SOAP receiver al
CVE-2026-45051
## Summary **Description** A deserialization of untrusted data vulnerability (CWE-502) exists in OpenAM's WebAuthn aut
CVE-2026-54329
### Impact A cross-tenant data injection vulnerability was identified in the Snipe-IT Accessories API when Full Multiple
CVE-2026-48157
### Impact If an application uses `HttpException::setTitle()` and/or `setDescription()` to include untrusted/request-de
A Russian-speaking initial access broker (IAB) driven by financial gain is assessed to be behind a large-scale credentia
Firefox browsers