2026-08-25 归档

今日共收录 1135 条安全情报，包含 329 个 CVE，404 篇安全通告，以及 111 篇研究论文。

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setTime function. The vulnerability is caused by insufficient filtering of the username and ...

CVE-2026-71930

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setTime function. The vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevProto function. The vulnerability is caused by insufficient filtering of the username ...

CVE-2026-71929

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevProto function. The vulnerabi

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the fdftDevice function. The vulnerability is caused by insufficient filtering of the username a...

CVE-2026-71928

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the fdftDevice function. The vulnerabil

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the rebDevice function. The vulnerability is caused by insufficient filtering of the username an...

CVE-2026-71927

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the rebDevice function. The vulnerabili

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevice function. The vulnerability is caused by insufficient sanitization of the username...

CVE-2026-71926

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevice function. The vulnerabili

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getDetail function. The vulnerability is caused by insufficient filtering of the username an...

CVE-2026-71925

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getDetail function. The vulnerabili

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getVid function. The vulnerability is caused by insufficient filtering of the username and p...

CVE-2026-71924

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getVid function. The vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the auth_set function. The vulnerability is caused by insufficient filtering of the username and...

CVE-2026-71923

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the auth_set function. The vulnerabilit

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. The vulnerability is caused by missing valid...

CVE-2026-71922

Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cg

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorSwitch models contain a null pointer dereference vulnerability in the formlogout function. The vulnerability is caused by missing checks for an empty or ab...

CVE-2026-71920

Multiple DrayTek VigorSwitch models contain a null pointer dereference vulnerability in the formlogout function. The vul

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the sysreboot function. The vulnerability is caused by insufficient filtering of the config, act...

CVE-2026-71919

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the sysreboot function. The vulnerabili

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the webBackupAction function. The vulnerability is caused by insufficient filtering of the optio...

CVE-2026-71918

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the webBackupAction function. The vulne

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the pingtrace function. The vulnerability is caused by insufficient validation of the host field...

CVE-2026-71917

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the pingtrace function. The vulnerabili

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the commandTable function. The vulnerability is caused by incomplete filtering of dangerous char...

CVE-2026-71916

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the commandTable function. The vulnerab

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the jsonstatus function. The vulnerability is caused by insufficient filtering of the usescript,...

CVE-2026-71915

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the jsonstatus function. The vulnerabil

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload_settings.cgi interface. The vulnerability is caused by insufficient filtering before the ...

CVE-2026-71913

Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload_settings.cgi interface. The vuln

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy opera...

CVE-2026-71912

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during memory copy operation...

CVE-2026-71911

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is cau

历史摘要 · 未重新核验 · NVD

#cve #cwe-120

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorAP models contain a command injection vulnerability in the apautotest function. The vulnerability is caused by insufficient validation of the CMD0, CMD3, a...

CVE-2026-71910

Multiple DrayTek VigorAP models contain a command injection vulnerability in the apautotest function. The vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-24 发布INFO

Multiple DrayTek VigorAP models contain a command injection vulnerability in the InquierTime function. The vulnerability is caused by insufficient filtering of the time field be...

CVE-2026-71909

Multiple DrayTek VigorAP models contain a command injection vulnerability in the InquierTime function. The vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-78