OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes
CVE-2026-55982
OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes
2026-08-15 归档
今日共收录 1312 条安全情报，包含 424 个 CVE，492 篇安全通告，以及 116 篇研究论文。
← 返回归档列表rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing
CVE-2026-70463
rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses co
Probo has an open redirect bypass via path normalization
CVE-2026-49820
Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams. Probo
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible vi...
CVE-2026-19188
A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vul
OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.2 and 1.1.2, internal/cluster-gateway/server.go served caller-facing management APIs on the...
CVE-2026-73843
OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.2 and 1.1.2, internal/cluster-gate
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rt...
CVE-2026-14525
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnera
Precise Detection of Kernel Data Races with Probabilistic Lockset Analysis.
该论文针对内核数据竞争（data race）检测的难题提出了一种新的静态/动态结合分析方法——概率锁集分析（Probabilistic Lockset Analysis, PLA）。内核数据竞争是导致安全漏洞（如 use-after-fre
You Have Been LaTeXpOsEd: A Large-Scale Systematic Analysis of Information Leakage in Preprint Archives Using Large Language Models.
该论文提出并实施了一项大规模系统性研究，旨在利用大语言模型（LLM）检测和分析学术预印本档案中的信息泄露问题。研究背景在于，科研人员在提交预印本（如arXiv、bioRxiv等）时，往往会在匿名化处理后的手稿中残留可识别身份的信息（例如姓名
LIMA: Defining, Benchmarking and Detecting Cross-Layer Vulnerabilities in LLM Inference Frameworks.
本文提出 LIMA，一个面向 LLM 推理框架的跨层漏洞定义、基准测试与检测系统。研究背景在于，现代 LLM 推理框架通常由多层组件构成（如模型加载、运行时调度、内存管理、GPU 内核执行、API 网关等），而现有安全研究往往只关注单层漏洞
FuzzBT: Holistic-State-Guided Fuzzing for Bluetooth Host Stack in Kernels.
本文提出 FuzzBT，一个面向内核中蓝牙主机栈的 holistic-state-guided 模糊测试框架。蓝牙协议栈作为操作系统内核的一部分，其安全性直接关系到设备通信的机密性与完整性，然而现有模糊测试方法往往仅关注单个协议层或离散状态
OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field
CVE-2026-63650
该漏洞影响 OpenVPN 2.7_alpha1 至 2.7.5 版本，且仅在使用 mbedTLS 加密库时触发。根本原因是 OpenVPN 在基于 X.509 证书进行用户身份识别时，忽略了管理员配置的“用户名身份查找字段”（即指定从证书
The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration directory const...
CVE-2026-63649
CVE-2026-63649 影响 OpenVPN 的 Windows 交互服务，涉及版本 2.4.0 至 2.6.21 以及 2.7_alpha1 至 2.7.5。该服务在处理配置文件时存在安全限制绕过漏洞。具体而言，本地认证用户能够构造
A flaw was found in Red Hat Quay's JWT (JSON Web Token) validation for federated robot accounts...
CVE-2026-74240
A flaw was found in Red Hat Quay's JWT (JSON Web Token) validation for federated robot accounts and single sign-on (SSO)
OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By...
CVE-2026-74248
OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another projec
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL...
CVE-2026-17186
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper ne
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write files to arbitrary...
CVE-2026-17181
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write files to arbitrary locations due to path t
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and...
CVE-2026-17182
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensit
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code...
CVE-2026-17184
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control o