安全日报 - 2026-07-01 - Cyber Security Daily Radar

安全公告2026-06-30 发布INFO

Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`

CVE-2026-48805

### Description The 3.26.0 source-policy hardening changed the signature of `CoreExtension::checkArrow()` to take a boo

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-693 #severity:low

安全公告2026-06-30 发布INFO

CefSharp.Common: `FolderSchemeHandlerFactory` path boundary check can expose files outside the configured root folder

CVE-2026-48796

### Summary `FolderSchemeHandlerFactory` was intended to restrict served files to a configured `rootFolder`, but its pa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #nuget #cwe-22 #severity:medium

安全公告2026-06-30 发布INFO

Probo has an open redirect bypass via path normalization

CVE-2026-49820

### Impact Probo's `saferedirect` package validates redirect URLs used across authentication flows (OIDC, SAML, session

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-601 #severity:medium

安全公告2026-06-30 发布INFO

Fission: Environment Runtime.Container and Builder.Container SecurityContext bypass allows privileged pod creation

CVE-2026-50566

### Summary A follow-up bypass of the round-4 PodSpec hardening (GHSA-gx55-f84r-v3r7, GHSA-wmgg-3p4h-48x7, GHSA-v455-mv

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-250 #cwe-269 #severity:critical

安全公告2026-06-30 发布INFO

Fission builder pods auto-mount the fission-builder ServiceAccount token in the user-supplied builder container

CVE-2026-50565

### Summary Fission builder pods were created with `ServiceAccountName: fission-builder` and no `AutomountServiceAccoun

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-250 #cwe-269 #cwe-538 #severity:medium

安全公告2026-06-30 发布INFO

Fission Container Executor Function PodSpec Injection Leading to Node Escape

CVE-2026-50563

### Summary Fission's Container Executor path lets a tenant supply `Function.spec.podspec` directly; the executor merge

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-269 #cwe-284 #severity:critical

安全公告2026-06-30 发布INFO

Sigstore Java has a vulnerability with bundle verification of integratedTime

CVE-2026-48791

### Summary Regression: Verification of `integratedTime` from Rekor V1 Log Entry against Fuclio Certificate validity was

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-347 #severity:low

威胁情报2026-07-01 发布INFO

Firewall for AI

历史摘要 · 未重新核验 · Akamai Security Research

#botnet #akamai #ddos

安全公告2026-07-01 发布INFO

Firefox browsers

历史摘要 · 未重新核验 · Mozilla Security Advisories

#mozilla #firefox #browser

安全公告2026-07-01 发布INFO

Sign in to Cloud

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

#oracle #database #java

安全公告2026-07-01 发布INFO

Sign Up for Free Cloud Tier

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

#oracle #database #java

安全公告2026-07-01 发布INFO