In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role...
CVE-2026-76365
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Str
2026-08-20 归档
今日共收录 1886 条安全情报，包含 1062 个 CVE，406 篇安全通告，以及 120 篇研究论文。
← 返回归档列表In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run...
CVE-2026-76363
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbitrary Structured Quer
In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role...
CVE-2026-76367
In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role could store JavaScript i
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role...
CVE-2026-76364
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Str
In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use...
CVE-2026-76366
In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use Representational State Transfer (
Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)
CVE-2026-59992
## Summary The production media handler shipped by `next-tinacms-s3` (`createMediaHandler` in `packages/next-tinacms-s3
Snipe-IT: Stored DOM XSS via table selected-count IDs
CVE-2026-61807
### Impact The table component derives data-selected-count-id from the component $name value. On manufacturer and suppli
Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET
CVE-2026-55703
### Impact Any activated account in a company can read every maintenance record for that company (asset tag, supplier, p
SearXNG MCP Server: Additional hardened-mode SSRF bypasses
CVE-2026-54689
## Summary `mcp-searxng` has a hardened-mode URL-reading feature intended to prevent `web_url_read` from reaching priva
SearXNG MCP Server is Vulnerable to SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)
CVE-2026-54688
Ref: https://github.com/ihor-sokoliuk/mcp-searxng/issues/87#issuecomment-4645453694 ### Summary The web_url_read tool
langgraph-api: Incomplete assistant authorization in LangGraph Server run creation
CVE-2026-55236
## Summary In affected versions of `langgraph-api` (the LangGraph Server runtime), the run-creation path authorized the
langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication
CVE-2026-55235
## Summary In affected versions of `langgraph-api` (the LangGraph Server runtime), a run or cron could be created with
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 18.7.7 and iPadOS 18.7.7
iOS 26.4 and iPadOS 26.4
iOS 26.4 and iPadOS 26.4
Background Security Improvements for iOS, iPadOS, and macOS
Background Security Improvements for iOS, iPadOS, and macOS