今日共收录 1910 条安全情报，包含 1065 个 CVE，437 篇安全通告，以及 97 篇研究论文。
← 返回归档列表CVE-2026-72534
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-s
CVE-2026-72533
An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypas
CVE-2026-50237
A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace t
CVE-2026-50236
An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are
CVE-2026-13739
A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability relate
CVE-2026-13738
CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Soft
CVE-2026-13737
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upg
CVE-2026-73162
Affected versions of MISP cti-transmute expose several state-changing account operations as GET requests: * /acco
CVE-2026-33922
A path traversal vulnerability was discovered in the Offline archives functionality of the local web interface due to in
CVE-2026-33921
The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver
CVE-2026-73161
Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feat
CVE-2026-73160
Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch_misp_event and /misp_search_events endpoi
CVE-2026-73159
Affected versions of cti-transmute allow a tag's icon value to be stored and later interpolated into HTML through Vue's
CVE-2026-73158
Affected versions of cti-transmute insufficiently validate saved graph configuration data. Graph configurations can cont
CVE-2026-73157
Affected versions of cti-transmute render data obtained from a remote MISP instance into the event-browser interface usi
CVE-2026-72694
A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low
CVE-2026-72693
`openvt -u` is intended to identify the owner of the current VT and then execute `login` as that user from a privileged
CVE-2026-71218
A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the `JSON_read()` function,
CVE-2026-71217
A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON wit
CVE-2026-15567
A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token dec