File Browser: Authentication Bypass via Proxy Auth Header Forgery
CVE-2026-54089
## Summary When FileBrowser is configured with proxy authentication (`auth.method=proxy`), any unauthenticated attacker
2026-07-12 归档
今日共收录 877 条安全情报，包含 71 个 CVE，468 篇安全通告，以及 78 篇研究论文。
← 返回归档列表Chromium: CVE-2026-13987 Incorrect security UI in Mobile
CVE-2026-13987
CVE-2026-13987 是 Chromium 项目中一个影响移动端安全用户界面（UI）的漏洞。该漏洞由 Chrome 团队分配编号，并已被修复。由于 Microsoft Edge（基于 Chromium）继承了 Chromium 代码
Chromium: CVE-2026-14137 Insufficient validation of untrusted input in Chrome for iOS
CVE-2026-14137
该漏洞（CVE-2026-14137）存在于Chromium核心中，影响Chrome for iOS以及基于Chromium的Microsoft Edge浏览器。问题源于对不可信输入的不充分验证，攻击者可能通过特制的输入触发浏览器异常行为或
Chromium: CVE-2026-14136 Incorrect security UI in Chrome for iOS
CVE-2026-14136
CVE-2026-14136 是影响 Chrome for iOS 的安全 UI 不正确漏洞。该漏洞源于 Chrome iOS 版本中安全用户界面的实现缺陷，攻击者可能利用此漏洞绕过安全提示或欺骗用户执行意外操作。由于 Microsoft
Chromium: CVE-2026-14128 Insufficient data validation in Chrome for iOS
CVE-2026-14128
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14123 Incorrect security UI in Chrome for iOS
CVE-2026-14123
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14099 Use after free in Chrome for iOS
CVE-2026-14099
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14075 Policy bypass in Chrome for iOS
CVE-2026-14075
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14067 Use after free in Chrome for iOS
CVE-2026-14067
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14066 Insufficient validation of untrusted input in Chrome for iOS
CVE-2026-14066
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-14028 Incorrect security UI in Chrome for iOS
CVE-2026-14028
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13991 Insufficient validation of untrusted input in Chrome for iOS
CVE-2026-13991
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-13983 Incorrect security UI in Chrome for iOS
CVE-2026-13983
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the...
CVE-2026-60090
PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowled
The Cost Calculator Builder plugin for WordPress is vulnerable to Sensitive Information Exposure...
CVE-2026-10865
The Cost Calculator Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,
The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-6939
The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'app
SiYuan: Unauthenticated SQLite Data Exfiltration via Template Injection in /api/icon/getDynamicIcon
CVE-2026-54068
### Summary The `/api/icon/getDynamicIcon` endpoint is explicitly excluded from authentication in SiYuan's kernel route
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
Huawei Secoway USG firewall weak password
Huawei Secoway USG firewall weak password
Yokogawa YFGW410 gateway
Yokogawa YFGW410 gateway