今日共收录 1353 条安全情报，包含 493 个 CVE，458 篇安全通告，以及 108 篇研究论文。
← 返回归档列表CVE-2026-62941
Incus is a system container and virtual machine manager. Prior to version 7.3.0, when copying an instance across project
CVE-2026-62940
Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another c
CVE-2026-62867
Incus is a system container and virtual machine manager. Prior to version 7.3.0, improper validation of user-provided `b
CVE-2026-48769
Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the I
CVE-2026-48755
Incus is a system container and virtual machine manager. Prior to version 7.1.0, improper validation of user-provided ba
CVE-2026-48753
Incus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol upload endpoint is vuln
CVE-2026-48752
Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or instance b
CVE-2026-48751
Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the `restrict
CVE-2026-48750
Incus is a system container and virtual machine manager. Prior to version 7.2.0, the `record-output` parameter of the `/
CVE-2026-48749
Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image can be used t
CVE-2026-77806
SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August
CVE-2026-77776
Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The header is read directly at
CVE-2026-77683
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the fil
CVE-2026-77086
SiYuan before v3.7.4 fails to validate the packageName parameter in Bazaar install and uninstall endpoints, allowing aut
CVE-2026-77264
The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulne
CVE-2026-77651
The arrayref crate 0.3.10 for Rust can trigger execution of malicious code when compiling a project that uses the crate,
CVE-2026-77650
The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the
CVE-2026-77649
The internment crate 0.8.7 for Rust can trigger execution of malicious code when compiling a project that uses the crate
CVE-2026-77647
SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August
CVE-2026-72843
The customer update route in EverShop is declared with "access": "public" in packages/evershop/src/modules/customer/api/