【安全通告】Gitea act_runner 容器逃逸漏洞风险通告（CVE-2026-58053）
CVE-2026-58053
【安全通告】Gitea act_runner 容器逃逸漏洞风险通告（CVE-2026-58053）
2026-07-09 归档
今日共收录 1410 条安全情报，包含 455 个 CVE，561 篇安全通告，以及 105 篇研究论文。
← 返回归档列表【安全通告】Linux Kernel "GhostLock" 本地权限提升漏洞风险通告（CVE-2026-43499）
CVE-2026-43499
【安全通告】Linux Kernel "GhostLock" 本地权限提升漏洞风险通告（CVE-2026-43499）
Stable Channel Update for Desktop
CVE-2026-15121 · CVE-2026-15128 · CVE-2026-15114 · CVE-2026-15123 · CVE-2026-15132 · CVE-2026-15122 · CVE-2026-15111 · CVE-2026-15112 · CVE-2026-15126 · CVE-2026-15109 · CVE-2026-15110 · CVE-2026-15124 · CVE-2026-15125 · CVE-2026-15115 · CVE-2026-15119 · CVE-2026-15129 · CVE-2026-15133 · CVE-2026-15118 · CVE-2026-15107 · CVE-2026-15127 · CVE-2026-15117 · CVE-2026-15108 · CVE-2026-15130 · CVE-2026-15120 · CVE-2026-15113 · CVE-2026-15116 · CVE-2026-15131
The Stable channel has been updated to 150.0.7871.114/.115 for Windows and Mac and 150.0.7871.114 for Linux, which will
CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities (Severity: LOW)
CVE-2026-0279
CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities (Severity: LOW)
CVE-2026-0282 PAN-OS: File Deletion Vulnerability in Management Web Interface (Severity: LOW)
CVE-2026-0282
CVE-2026-0282 PAN-OS: File Deletion Vulnerability in Management Web Interface (Severity: LOW)
CVE-2026-0281 PAN-OS: Information Disclosure Vulnerability in Management Web Interface (Severity: LOW)
CVE-2026-0281
CVE-2026-0281 PAN-OS: Information Disclosure Vulnerability in Management Web Interface (Severity: LOW)
CVE-2026-0278 Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows (Severity: MEDIUM)
CVE-2026-0278
CVE-2026-0278 Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows (Severity: MEDIUM)
CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent (Severity: HIGH)
CVE-2026-0288
CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent (Severity: HIGH)
CVE-2026-0285 PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface (Severity: MEDIUM)
CVE-2026-0285
CVE-2026-0285 PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface (Severity: MEDIUM)
CVE-2026-0286 PAN-OS: Authenticated Command Injection in CLI (Severity: MEDIUM)
CVE-2026-0286
CVE-2026-0286 PAN-OS: Authenticated Command Injection in CLI (Severity: MEDIUM)
CVE-2026-0276 Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability (Severity: LOW)
CVE-2026-0276
CVE-2026-0276 Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability (Severity: LOW)
CVE-2026-0287 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing (Severity: MEDIUM)
CVE-2026-0287
CVE-2026-0287 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing (Severity: MEDIUM)
zk-ScalHard: Scalable and Hardware-Rooted Privacy-Preserving Authentication for Secure OTA Updates in Zonal SDVs
本文提出了一种名为zk-ScalHard的硬件根植隐私保护认证协议，旨在解决下一代面向区域的软件定义汽车（SDV）中OTA更新的安全与可扩展性问题。随着汽车电子控制单元（ECU）数量激增，传统的基于公钥基础设施（PKI）的认证方案（如Upt
Unlearning to Protect: A Distilled Reinforcement Learning Framework with Privacy-Preserving Feature Unlearning and XAI for IoT Security
该论文提出了一种名为DiRLU的轻量级强化学习框架，用于物联网（IoT）设备上的僵尸网络检测，同时通过选择性遗忘敏感或过时特征来保护隐私。现有基于人工智能的解决方案存在两个主要局限：一是模型过于沉重，难以部署在资源受限的IoT设备上；二是缺
Embedded Blockchain Infrastructure Management (eBIM): A RISC-V-Empowered Hardware--Software Co-Design Framework Towards Trustworthy Blockchain
该论文提出了一种名为嵌入式区块链基础设施管理（eBIM）的概念，旨在解决传统区块链即服务（BaaS）模型中因第三方服务商托管基础设施而导致的信任丧失、灵活性降低和数据主权丧失问题。作者借鉴eSIM（嵌入式SIM卡）的发展思路，利用RISC-
Where to Intervene? Benchmarking Fairness-Aware Learning on Differentially Private Synthetic Tabular Data
本文首次系统评估了在差分隐私（DP）合成表格数据上应用公平性干预的效果。机器学习模型在高风险场景（如信贷、招聘）中广泛部署，对隐私和公平性提出了双重需求。DP已成为隐私保护的事实标准，但现有研究表明DP可能放大不同人口群体间的差距，而公平性
Crossroads: A Smart Contract Layer for Chain-Abstracted Assets
本文提出了Crossroads，一个针对链抽象资产（chain-abstracted assets）的智能合约层。Crossroads的核心思想是将来自几乎任何区块链的资产在单一后端区块链上表示为ERC-20代币，从而使得这些资产能够在一个
Beyond Refusal: A Same-Lineage Study of Aligned and Abliterated LLMs for Vulnerability Analysis
本研究聚焦于大型语言模型（LLM）在辅助软件安全分析中的安全状态影响。LLM辅助的软件安全分析处于一个微妙的边界：用于合法代码审查、分类和修复的漏洞分析术语可能与滥用场景下的术语高度相似。现有安全评估常比较不同模型家族，混淆了安全行为与架构
Real-Time VPN Traffic over ETSI GS QKD 014 Key Delivery with a LuxQuanta NOVA QKD Platform
该论文报告了一个基于量子密钥分发（QKD）的VPN原型系统，它通过ETSI GS QKD 014标准化API获取QKD生成的密钥，并使用AES-256-GCM算法对IP流量进行实时加密。系统设计上，VPN在数据包中内联携带密钥标识符，本地密
aiAuthZ: Off-Host, Identity-Bound Authorization for AI Agents
本文针对AI Agent在工具调用过程中因依赖不可信文本而面临的安全性问题展开研究。AI Agent通常基于LLM的输出发起工具调用，但攻击者可通过控制上下文（如提示注入）伪装成合法用户执行非授权操作。作者首先评估了15个当代语言模型在8种