Vaultwarden: CSRF in SSO Authorization Flow
CVE-2026-47158
Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's SSO authorization flow did
2026-07-16 归档
今日共收录 1958 条安全情报，包含 992 个 CVE，550 篇安全通告，以及 113 篇研究论文。
← 返回归档列表FastGPT: Shared axios SSRF guard validates only the initial URL before following redirects
CVE-2026-61646
FastGPT is a knowledge-based AI application platform. Prior to 4.15.0-beta5, FastGPT's shared SSRF guard validates only
Cross-namespace traffic interception via incorrect route precedence ordering in AWS Load Balancer Controller
CVE-2026-15738
Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2
Symfony: Security Firewall Bypass via failure_forward Subrequest: Unauthenticated Access to access_control-Protected GET Routes
CVE-2026-48489
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.4
RIoTFuzzer: Companion App Assisted Remote Fuzzing for Detecting Vulnerabilities in IoT Devices.
该论文提出了一种名为RIoTFuzzer的新型黑盒模糊测试方法，旨在远程发现物联网设备漏洞。由于IoT系统架构和外设的多样性，黑盒模糊测试是发现漏洞的首选方案，但现有工具依赖伴侣应用生成有效测试包，却面临无法绕过云服务器端验证以及仅关注An
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
Huawei Secoway USG firewall weak password
Huawei Secoway USG firewall weak password
Yokogawa YFGW410 gateway
Yokogawa YFGW410 gateway
TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint
CVE-2026-54457
### Impact The `/internal/object_storage` endpoint accepts a caller-supplied JSON `storage_path` parameter that dynamic
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway
CVE-2026-54450
## Summary ToolHive's hand-rolled private/reserved-IP SSRF guard (`networking.IsPrivateIP` in `pkg/networking/utilities
A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event...
CVE-2026-12382
A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove t
Koel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch paths
CVE-2026-54491
### Summary The fix for **CVE-2026-47260** (v9.3.5) added an **initial** `isSafeUrl()` check to several fetchers (`sync
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
CrowdStrike与Zscaler宣布合作，将连续身份安全能力集成到零信任访问架构中。该合作旨在通过整合CrowdStrike Falcon平台的端点检测与响应（EDR）能力与Zscaler的零信任网络访问（ZTNA）解决方案，提供实时
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike 于 2026 年 7 月 16 日发布博客，宣布推出“Continuous Identity for AI Agents”解决方案。该产品旨在为 AI 代理提供持续的身份验证与访问控制能力，应对 AI 工作负载中日益
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
Bulkhead: Automated Semantic Detection and Remediation of Container Escape Vulnerabilities
容器逃逸漏洞是云原生环境中的严重安全威胁，其中路径遍历（PaTra）漏洞源于跨边界路径解析错误，尤其是在共享GPU、工作区等资源支持AI工作负载时愈发普遍。现有防御手段存在不足：内核级防护具有侵入性且未被Linux主线接受；基于静态规则或人
Agent Hacks Agent: Autoresearch for Production-Agent Red-Teaming
本文针对生产级 LLM agent（如 Claude Code 和 Codex）在操作不可信内容、文件、命令和工作区状态时存在的安全风险，提出了一种自动化红队测试方法。现有的自动化红队测试方法主要优化攻击成功率，并保存基准、payload
Better Auth OAuth Provider: Race Condition in Authorization Code Exchange Enables Multi-Use Code Redemption
CVE-2026-53518
Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the @better-auth/oau
FastGPT: workflow runtime can execute another user's private HTTP toolset
CVE-2026-61643
FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, an authenticated FastGPT user can
FastGPT: /api/core/chat/record/getCollectionQuote can disclose cross-tenant dataset text due to an unbound initialId lookup
CVE-2026-61644
FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, the POST /api/core/chat/record/ge