The Structured Totient Preimage Problem: Reconstruction, Collisions, and Cryptographic Implications
该论文定义并研究了一个新的数论难题：结构化 totient 原像问题（Structured Totient Preimage, STP）。问题设定为：给定 k 个相同比特长度 λ 的不同素数 p_1,...,p_k，仅公开它们的乘积 x =
2026-08-21 归档
今日共收录 1701 条安全情报，包含 827 个 CVE，444 篇安全通告，以及 120 篇研究论文。
← 返回归档列表SiNMULI: Novel Signed Network Approach for Malicious URL Identification
该论文提出了一种基于符号网络（signed network）的恶意URL识别方法 SiNMULI。针对传统机器学习、深度学习和伪造网站检测方法主要依赖静态数据分析、难以应对恶意网站动态演化的问题，作者将恶意URL识别建模为符号网络上的二分类
Autonomous Cyber Defense in Connected Vehicles: A Multi-Agent Approach to V2X Security
本文针对联网车辆V2X通信中的安全-安全耦合问题提出了一种三层多智能体防御架构。背景是：联网车辆必须在约100毫秒内决定收到的Basic Safety Message（BSM）是否真实，若伪造的紧急制动警报被及时处理，车辆会错误制动，造成安
Finality Before Disclosure for Ledger Authenticators in the Quantum Random Oracle Model
本文提出了一种新的密码学原语——账本认证器（Ledger Authenticators），用于描述和验证公共账本上基于先前交易、最终状态、时间及顺序而非仅凭公钥、消息和可移植签名来授权状态转换的协议。针对这类反应式授权协议，作者定义了不可伪
Cross-Domain Joint DDoS Detection in Multi-Controller SDN via Confidence-Based Entropy Fusion
该论文针对多控制器软件定义网络（SDN）中跨域分布式拒绝服务（DDoS）攻击的检测问题展开研究。在多控制器SDN架构下，DDoS攻击呈现“分散源、集中目标”的跨域特征：攻击流量源自多个边缘控制器域，但最终汇聚到单一聚合控制器域，对受害者发起
FESC: Remodeling Long-Context Private Inference with Encrypted State-Space Models
该论文针对长文档隐私推理（private inference）中的效率与隐私平衡问题展开研究。现有隐私推理系统主要优化或分布式实现加密Transformer的注意力机制，但注意力机制中token两两交互的二次方复杂度在序列长度增长时成为瓶颈
The POST /api/provider-nodes/validate route in 9router takes a caller-supplied baseUrl and issues server-side HTTP requests to it, guarding the destination with assertPublicUrl ...
CVE-2026-72860
CVE-2026-72860 是 9router 中的一个服务端请求伪造（SSRF）漏洞，位于 POST /api/provider-nodes/validate 路由。该路由接受用户提供的 baseUrl 并发起服务端 HTTP 请求，本
AeternaLabsHQ PullMD REST API Endpoint api server-side request forgery
CVE-2026-76795
A vulnerability has been found in AeternaLabsHQ PullMD 3.2.0. This impacts an unknown function of the file /api of the c
tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails. The return value of relay_send_command_from_edge() was ignored, so a send fai...
CVE-2026-77641
tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails. The return value of re
BunkerWeb is an open-source, next-generation Web Application Firewall. Prior to 1.6.13, the blacklist, greylist, and antibot modules in src/common/core/blacklist/blacklist.lua, ...
CVE-2026-75514
BunkerWeb is an open-source, next-generation Web Application Firewall. Prior to 1.6.13, the blacklist, greylist, and ant
A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are tr...
CVE-2026-19683
A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways. During communication with a th
A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client...
CVE-2026-19586
A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as a
n8n versions before 2.34.1 contain a credential validation bypass in the MCP create_workflow_from_code tool when authentication type is set to an expression. Attackers with a va...
CVE-2026-77073
n8n versions before 2.34.1 contain a credential validation bypass in the MCP create_workflow_from_code tool when authent
n8n before 1.123.69, 2.33.4, and 2.34.1 contains an SSRF protection bypass in the OAuth2 credential authorization-code-to-access-token exchange. While OAuth2 discovery and dynam...
CVE-2026-77069
n8n before 1.123.69, 2.33.4, and 2.34.1 contains an SSRF protection bypass in the OAuth2 credential authorization-code-t
In Splunk Enterprise Security versions below 8.6.1, a user who holds the ess_analyst Splunk Enterprise Security role could change User and Entity Behavior Analytics (UEBA) searc...
CVE-2026-76388
In Splunk Enterprise Security versions below 8.6.1, a user who holds the ess_analyst Splunk Enterprise Security role cou
In Splunk SOAR versions below 8.6.0, an unauthenticated user who can observe or alter network traffic between Splunk SOAR and a configured CyberArk Representational State Transf...
CVE-2026-76362
In Splunk SOAR versions below 8.6.0, an unauthenticated user who can observe or alter network traffic between Splunk SOA
In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could retrieve the information contained in Edge Processor pipeline configurations through a Representat...
CVE-2026-76355
In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could retrieve the information contained in Edg
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could submit a crafted knowledge bundle delt...
CVE-2026-76353
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power"
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin"...
CVE-2026-76351
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9,
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin"...
CVE-2026-76347
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9,