Chromium: CVE-2026-17853 Inappropriate implementation in DevTools
CVE-2026-17853
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
2026-08-01 归档
今日共收录 1220 条安全情报，包含 330 个 CVE，503 篇安全通告，以及 110 篇研究论文。
← 返回归档列表Chromium: CVE-2026-17854 Insufficient policy enforcement in WebMCP
CVE-2026-17854
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-17855 Race in DevTools
CVE-2026-17855
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
RAGuard: A Layered Defense Framework for Retrieval-Augmented Generation Systems Against Data Poisoning
该论文提出了一种针对检索增强生成（RAG）系统数据投毒攻击的分层防御框架 RAGuard。RAG 系统通过检索外部语料库来增强大语言模型（LLM）的回答，但这种依赖也引入了安全风险：攻击者可以向语料库中注入精心设计的恶意文本片段，从而操纵检
Does Runtime Topology Context Improve LLM-Generated Kubernetes Security Patches?
本文旨在研究在 Kubernetes 集群安全修复中，为大型语言模型（LLM）提供运行时拓扑上下文是否能够显著提升生成补丁的正确性。研究背景是：云原生生态中 Kubernetes 成为容器化工作负载编排的核心，已有工作提出利用 LLM 自动
Missing hop-limit decrement on IPv6 forwarding path allows unbounded packet looping (DoS) in Zephyr routers
CVE-2026-10686
Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrementing the IPv6 hop limit. Both routing
Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers
CVE-2026-62845
Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore driv
Kamaji: TenantControlPlane namespace/name collision binds two tenants to the same SQL datastore schema + DB user, breaking per-tenant isolation
CVE-2026-62246
Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, Kamaji derives a TenantControlPlane dat
Cookie Crumbles: Breaking and Fixing Web Session Integrity.
本文研究了 Web 会话完整性（session integrity）的安全问题，重点分析了 Cookie 机制在机密性和完整性方面的长期漏洞。尽管浏览器和服务器应用已引入多种防护机制，如 Secure 属性、Cookie 前缀、SameSi
SpecTaint: Speculative Taint Analysis for Discovering Spectre Gadgets.
本文提出了一种名为 SpecTaint 的新型 Spectre 漏洞检测技术，旨在解决软件修补过程中难以发现潜在 Spectre 指令窗口（gadget）的问题。当前缓解 Spectre 类攻击的主要手段是在程序中插入序列化指令来禁用潜在
Contao: Server-Side Request Forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader Module
CVE-2026-57232
Contao is an Open Source CMS. From 5.3.35 through 5.3.47 and from 5.7.0-RC1 through 5.7.8, the Feed Reader front-end mod
vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API
CVE-2026-54725
vault-secrets-webhook is a Kubernetes mutating webhook that makes direct secret injection into Pods possible. Prior to 1
YAML injection via unescaped newlines in ymlr document comments
CVE-2026-65636
Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr (Elixir.Ymlr module) allows attackers to inj
Path traversal in NotebookRepo note and folder path composition
CVE-2026-44615
Path traversal vulnerability in Apache Zeppelin. When FileSystemNotebookRepo is configured, an authenticated attacker wi
ComfyUI: Stored XSS via /userdata/{file} due to Missing Content-Type Sanitization
CVE-2026-56672
ComfyUI is a node-based diffusion model GUI, API, and backend. Prior to 0.28.0, GET /userdata/{file} served user-control
Cloudreve: Unauthorized file write via WOPI view sessions whose access token secret is ignored
CVE-2026-62323
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, ViewerSessionValidation uses only the se
Cloudreve: OAuth Admin.Read scope can update OneDrive storage policy credentials
CVE-2026-55502
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, POST /api/v4/admin/policy/oauth/signin r
Cloudreve: Broken access control in file event stream leaks activity events for unshared siblings to single-file share recipients
CVE-2026-55499
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscri
Cloudreve: Server crash through image decompression/pixel bomb in thumbnail & avatar decoding (DoS)
CVE-2026-55497
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, the built-in thumbnail and avatar image
Cloudreve: Inactive/banned account emails leaked via GET /api/v4/user/search because SearchActive() omits the active-status predicate
CVE-2026-55496
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, GET /api/v4/user/search calls SearchActi