今日共收录 1312 条安全情报，包含 424 个 CVE，492 篇安全通告，以及 116 篇研究论文。
← 返回归档列表CVE-2026-49263
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-cont
CVE-2026-19847
A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function setWiFiWpsConfig
CVE-2026-19680
A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from th
CVE-2026-19679
An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of u
CVE-2026-19639
An improper access control vulnerability exists where an authenticated non-administrative application user could potenti
CVE-2026-19636
An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effec
CVE-2026-19635
A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific config
CVE-2026-19631
A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbit
CVE-2026-19629
A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role a
CVE-2026-12366
Zephyr's dynamic kernel-object disposal path unref_check() in kernel/userspace/userspace.c frees an object's storage (k_
CVE-2026-12365
A use-after-free exists in the Zephyr second-generation work queue (kernel/work.c) in the handling of delayable work tim
CVE-2026-12364
The user-space system-call verifier z_vrfy_z_log_msg_static_create() in subsys/logging/log_msg.c was a pure pass-through
CVE-2026-12363
The LoRaWAN Fragmented Data Block Transport service (subsys/lorawan/services/frag_transport.c) does not validate the fra
CVE-2026-73846
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.t
CVE-2026-73845
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckan_get_mqa_quality and ckan_get_m
CVE-2026-73844
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, error paths reflect raw upstream respon
CVE-2026-73107
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-49989
CrateDB is a distributed SQL database. Prior to versions 6.2.8 and 6.3.2, any authenticated user can read or delete any
CVE-2026-49986
The Cortex MCP server (`neuro-cortex-memory`), a cross-platform persistent memory MCP, prior to version 3.17.1 treats th
CVE-2026-49826
Concourse is a container-based automation system written in Go. Prior to version 8.2.3, an attacker is able to craft and