A flaw was found in the MaaS API. This vulnerability allows any pod within the cluster to bypass...
CVE-2026-14450
A flaw was found in the MaaS API. This vulnerability allows any pod within the cluster to bypass the Kuadrant AuthPolicy
2026-08-11 归档
今日共收录 1506 条安全情报，包含 770 个 CVE，368 篇安全通告，以及 83 篇研究论文。
← 返回归档列表A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the...
CVE-2026-13717
A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serv
Ivanti Endpoint Manager Mobile代码注入漏洞
根据厂商安全公告标题，Ivanti Endpoint Manager Mobile（EPMM）存在代码注入漏洞。该产品是Ivanti提供的企业移动设备管理（MDM）解决方案，用于统一管理移动设备、应用与安全策略。公告暗示攻击者可能通过注入恶
Huawei Secoway USG firewall weak password
根据知道创宇/Seebug漏洞库条目（SSVID-91373），华为Secoway USG防火墙存在弱密码问题。该设备是企业级网络安全防护产品，通常部署在网络边界，用于安全策略控制、流量过滤和访问管理。弱密码漏洞意味着设备可能存在默认或过于
Yokogawa YFGW410 gateway
Yokogawa YFGW410 gateway
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
CrowdStrike与Zscaler宣布合作，将持续身份验证能力集成到零信任访问解决方案中。该合作旨在将CrowdStrike的终端检测与响应（EDR）能力与Zscaler的零信任架构相结合，通过持续验证用户身份和终端健康状况，取代传统的
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike 于 2026 年 8 月 11 日发布公告，宣布推出面向 AI 代理的 Continuous Identity（持续身份）能力。该产品旨在解决 AI 代理在访问企业资源时的身份验证与授权问题，确保 AI 代理在运行过
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
A flaw was found in the MaaS API. This vulnerability allows any pod within the cluster to bypass the Kuadrant AuthPolicy gateway by forging HTTP headers, specifically `X-MaaS-Us...
CVE-2026-14450
A flaw was found in the MaaS API. This vulnerability allows any pod within the cluster to bypass the Kuadrant AuthPolicy
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy allows an authenticated user to execute arbitrary commands on a local or SSH-connected t...
CVE-2026-72902
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy allows an authenticated user to
Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.29.2 until 0.29.13, schedule.create and schedule.update in apps/dokploy/server/api/routers/schedule.ts deri...
CVE-2026-72886
Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.29.2 until 0.29.13, schedule.create and schedule.u
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, swarm.getNodes, swarm.getNodeInfo, swarm.getNodeApps, and swarm.getAppInfos in apps/dokploy/serv...
CVE-2026-72876
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, swarm.getNodes, swarm.getNodeInfo, swar
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey, regi...
CVE-2026-72868
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destina
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the backup.listBackupFiles tRPC endpoint in apps/dokploy/server/api/routers/backup.ts passes the...
CVE-2026-72738
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the backup.listBackupFiles tRPC endpoin
Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.8 and earlier, backup.create, backup.update, and backup.restoreBackupWithLogs in apps/dokploy/server/api/r...
CVE-2026-72737
Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.8 and earlier, backup.create, backup.update, and
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
多款Huawei路由器信息泄露漏洞
多款Huawei路由器信息泄露漏洞
SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An unauthenticated attacker could send a specially crafted...
CVE-2026-66778
CVE-2026-66778 涉及 SAP Approuter 组件。该组件通常作为 SAP 应用的入口路由器，负责将请求转发至内部服务。根据 NVD 描述，Approuter 在转发流量到内部组件之前，未能充分清理某些请求头。这意味着攻击
SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. Due to the complexity of the required conditions, an attac...
CVE-2026-66777
该漏洞存在于SAP Approuter组件中，属于请求验证不足导致的对后端资源的未授权访问问题。Approuter作为应用路由器，负责将外部请求转发至内部后端服务。由于对特定传入请求的验证逻辑不够严密，且成功利用需要满足较为复杂的条件，攻击