WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one...
CVE-2026-63089
WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time link token generation
2026-07-17 归档
今日共收录 1302 条安全情报，包含 372 个 CVE，507 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure
CVE-2026-53713
### Impact The `to_absolute_normalized_path` function (security.lua:28-43) does not collapse redundant path separators
Squid: Memory disclosure in FTP gateway
CVE-2026-47729
Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in t
text-generation-inference 3.3.7 SSRF via fetch_image in multimodal chat completions
CVE-2026-63086
text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
Anubis: Policy bypass via client controlled X-Original-URI header
CVE-2026-62314
Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scrap
Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces
CVE-2026-56742
Cilium is a networking, observability, and security solution. Prior to 1.17.17, 1.18.11, and 1.19.5, Cilium clusters usi
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike于2026年7月17日宣布推出“Continuous Identity for AI Agents”新功能。该功能旨在为AI代理提供持续的身份验证与访问控制，防止凭证滥用和身份劫持。尽管文章标签包含“apt”和“edr
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
Huawei Secoway USG firewall weak password
Huawei Secoway USG firewall weak password
Yokogawa YFGW410 gateway
Yokogawa YFGW410 gateway
OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals...
CVE-2026-62228
OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals that allows lower-trust ca
OpenClaw 2026.2.25 before 2026.5.26 allow a lower-trust caller or configured input path to bypass...
CVE-2026-62220
OpenClaw 2026.2.25 before 2026.5.26 allow a lower-trust caller or configured input path to bypass non-browser rate limit
OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media...
CVE-2026-62210
OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media URLs can trigger slow-rea
MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal
CVE-2026-52869
### Summary In affected versions, the SSE and Streamable HTTP server transports routed incoming requests to an existing
Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode
CVE-2026-53714
### Impact When Envoy Gateway runs in GatewayNamespaceMode (`provider.kubernetes.deploy.type=GatewayNamespace`), the xDS
Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock
CVE-2026-53715
Vulnerability report without repro case. Repro case may be added later after harness is complete. **Preconditions (4):*
Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header
CVE-2026-53717
Vulnerability report without repro case. Repro case may be added later after harness is complete. **Preconditions (4):*
Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization
CVE-2026-53719
Vulnerability report without repro case. Repro case may be added later after harness is complete. **Preconditions (4):*
Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit
CVE-2026-53716
Vulnerability report without repro case. Repro case may be added later after harness is complete. **Preconditions (4):*
Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass
CVE-2026-53718
### Impact Envoy Gateway accepts extension-managed custom backendRefs from an HTTPRoute to a backend resource in another