今日共收录 1958 条安全情报，包含 992 个 CVE，550 篇安全通告，以及 113 篇研究论文。
← 返回归档列表CVE-2026-61736
LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.4, the server defaults to CORS_ORIGINS=*
CVE-2026-55008
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows
CVE-2026-59836
A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 thr
CVE-2026-54490
### Impact If this library is used in tandem with the `permessage-deflate` extension, a WebSocket server or client can
CVE-2026-54466
### Impact The frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitra
CVE-2026-54465
### Impact If this library is used to implement a WebSocket server on top of a TCP server (rather than an HTTP server o
CVE-2026-54464
### Impact If this library is used in tandem with the `permessage-deflate` extension, a WebSocket server or client can
CVE-2026-54463
### Impact The frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitra
CVE-2026-55398
CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55. Attackers with
CVE-2026-33444
CVE-2026-33444 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with intimate kno
CVE-2026-33445
CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with an intimate
CVE-2026-40958
CVE-2026-40958 is a input validation error in Secure Access clients prior to 14.55. Attackers with intimate knowledge of
CVE-2026-33443
CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55. Attackers with an intimate knowledg
CVE-2026-40956
CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with inti
CVE-2026-40954
CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 1
CVE-2026-40955
CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 1
CVE-2026-54447
## Insecure Permission Assignment for Garmin OAuth Token Store ### Summary `garminconnect` (≤ 0.3.4) wrote its OAuth t
本文提出了一种名为 Prezta（可验证的零信任授权远程执行）的新型架构，旨在解决关键基础设施中运营技术（OT）系统安全现代化面临的挑战。传统的应用网关虽然能执行复杂授权并支持零信任架构，但存在部署和管理负担重、需与远程边缘设备共置、频繁更
大型语言模型（LLM）在翻译、代码生成等任务中表现出巨大优势，但同时引入了社会风险，恶意用户可通过有害提示（如请求非法活动指导）利用模型。为缓解此问题，模型通常内置安全机制自动拒绝此类提示。然而，现有越狱方法常需大量人工、高计算成本或导致模
该论文系统性地研究了大型语言模型（LLM）集成应用中存在的远程代码执行（RCE）漏洞。尽管LLM在软件开发中展现出潜力，但集成框架如LangChain提供了代码执行工具和API，理论上攻击者可通过提示注入触发RCE。此前尚无研究系统性地分析