SAP Approuter does not consistently enforce integrity verification on certain session-related request headers under specific conditions. An attacker with low privileges could se...

CVE-2026-66776

CVE-2026-66776 是 SAP Approuter 组件中的一个会话完整性校验绕过漏洞。根据 NVD 元数据，该组件在特定条件下未能一致地对某些会话相关的请求头执行完整性验证。低权限攻击者可以发送特制请求，绕过完整性检查并尝试加载

历史摘要 · 未重新核验 · NVD

SAP Approuter does not enforce cross-site request forgery protection on the authentication flow by default. An unauthenticated attacker could craft a malicious link and trick a ...

CVE-2026-66775

CVE-2026-66775 涉及 SAP Approuter 的跨站请求伪造（CSRF）防护缺陷。该组件在默认情况下未对认证流程实施 CSRF 防护，导致未认证的远程攻击者能够构造恶意链接并诱导受害者点击。一旦受害者点击该链接，攻击者可能

历史摘要 · 未重新核验 · NVD

SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a non-default configuration. Successful exploitatio...

CVE-2026-66774

CVE-2026-66774 是 SAP Approuter 组件中的一个漏洞。根据 NVD 元数据，该漏洞源于 Approuter 对某些错误条件的处理逻辑不一致，导致在特定非默认配置下，低权限攻击者可能触发异常行为。然而，成功利用此漏洞

历史摘要 · 未重新核验 · NVD

SAP Approuter does not enforce sufficient flow control in certain functionality. An attacker with low privileges could send high volumes of data without consuming responses, cau...

CVE-2026-66761

SAP Approuter 在特定功能中未实施足够的流量控制。低权限攻击者无需消耗响应即可发送大量数据，导致服务器内存无限制增长，最终可能引发可用性下降。该漏洞的 CVSS 评分为 4.3（中危），攻击向量为网络，攻击复杂度低，需要低权限，

历史摘要 · 未重新核验 · NVD

SAP Approuter does not correctly validate client certificates in certain callback flows. An attacker with low privileges, holding a certificate from the same trusted authority w...

CVE-2026-66760

CVE-2026-66760 是 SAP Approuter 组件中存在的一个证书验证缺陷。该漏洞源于在特定回调流程中对客户端证书的校验不严格，导致攻击者若拥有低权限，并能够从同一受信任的证书颁发机构获取一个主体（subject）字段与合法

历史摘要 · 未重新核验 · NVD

Firewall for AI

Akamai 发布了一款名为 Firewall for AI 的安全产品，旨在为人工智能应用与模型提供防护。该产品主要面向部署了 AI 服务的企业，帮助其抵御针对 AI 基础设施的网络攻击，特别是分布式拒绝服务（DDoS）攻击和僵尸网络（b

历史摘要 · 未重新核验 · Akamai Security Research

⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors

A lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering a call. L

历史摘要 · 未重新核验 · The Hacker News

A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs)...

CVE-2026-18948

A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, whic

历史摘要 · 未重新核验 · GitHub Advisory

A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create...

CVE-2026-16456

A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create custom resources can ex

历史摘要 · 未重新核验 · GitHub Advisory

Vault Enterprise's identity entity batch-delete endpoint is vulnerable to a cross-namespace...

CVE-2026-14886

Vault Enterprise's identity entity batch-delete endpoint is vulnerable to a cross-namespace authorization bypass that ma

历史摘要 · 未重新核验 · GitHub Advisory

Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown...

CVE-2026-44401

Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that

历史摘要 · 未重新核验 · GitHub Advisory

HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to...

CVE-2026-56619

HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to insufficient validation and out

历史摘要 · 未重新核验 · GitHub Advisory

A flaw was found in multicluster-global-hub. The manager component improperly validates the...

CVE-2026-71576

A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming

历史摘要 · 未重新核验 · GitHub Advisory

Firefox browsers

Firefox browsers

历史摘要 · 未重新核验 · Mozilla Security Advisories

Sign in to Cloud

Sign in to Cloud

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

Sign Up for Free Cloud Tier

Sign Up for Free Cloud Tier

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

iOS 26.4.2 and iPadOS 26.4.2

iOS 26.4.2 and iPadOS 26.4.2

历史摘要 · 未重新核验 · Apple Security Releases

iOS 18.7.8 and iPadOS 18.7.8

iOS 18.7.8 and iPadOS 18.7.8

历史摘要 · 未重新核验 · Apple Security Releases

iOS 18.7.7 and iPadOS 18.7.7

iOS 18.7.7 and iPadOS 18.7.7

历史摘要 · 未重新核验 · Apple Security Releases

iOS 26.4 and iPadOS 26.4

iOS 26.4 and iPadOS 26.4

历史摘要 · 未重新核验 · Apple Security Releases