2026-08-12 归档

今日共收录 1910 条安全情报，包含 1065 个 CVE，437 篇安全通告，以及 97 篇研究论文。

漏洞预警2026-08-11 发布INFO

SAP Approuter does not correctly validate client certificates in certain callback flows. An attacker with low privileges, holding a certificate from the same trusted authority w...

CVE-2026-66760

SAP Approuter does not correctly validate client certificates in certain callback flows. An attacker with low privileges

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-08-11 发布INFO

SAP Approuter does not sufficiently validate tenant context in inbound requests. An unauthenticated attacker could send specially crafted requests to spoof the tenant context un...

CVE-2026-58239

SAP Approuter does not sufficiently validate tenant context in inbound requests. An unauthenticated attacker could send

历史摘要 · 未重新核验 · NVD

#cve #cwe-807

漏洞预警2026-08-11 发布INFO

SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially crafted input that causes the component t...

CVE-2026-58238

SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-08-11 发布INFO

WebSocket of SAP Approuter does not perform sufficient authorization checks in certain functionality. An attacker with low privileges could exploit this to access restricted fun...

CVE-2026-58237

WebSocket of SAP Approuter does not perform sufficient authorization checks in certain functionality. An attacker with l

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-08-11 发布INFO

SAP Approuter does not sufficiently validate certain token content under specific configurations. An unauthenticated attacker could send a specially crafted token to cause sensi...

CVE-2026-58230

SAP Approuter does not sufficiently validate certain token content under specific configurations. An unauthenticated att

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-08-10 发布INFO

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.112.0 and 16.23.0, the ReceivablePayableReport prepare_conditions path in erpnext/accounts/repor...

CVE-2026-72909

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.112.0 and 16.23.0, the ReceivablePayabl

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-10 发布INFO

A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to...

CVE-2026-13717

A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serv

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-10 发布INFO

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, settings.readTraefikFile in apps/dokploy/server/api/routers/settings.ts passes a path accepted b...

CVE-2026-72875

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, settings.readTraefikFile in apps/dokplo

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-10 发布INFO

Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.28.7 until 0.29.13, the server.remove tRPC mutation in apps/dokploy/server/api/routers/server.ts accepts a ...

CVE-2026-72734

Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.28.7 until 0.29.13, the server.remove tRPC mutatio

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

安全公告2026-08-12 发布INFO

Compatibility Test Suite (CTS)

本公告来自 Android Security Bulletin，主题为 Compatibility Test Suite (CTS)。CTS 是 Android 官方提供的兼容性测试套件，用于验证设备硬件与软件实现是否符合 Android