2026-08-28 归档

今日共收录 1697 条安全情报,包含 762 个 CVE,507 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-08-28 发布INFO

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multiple active response...

CVE-2026-54085

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. I

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The  ip-customblock  active response script contains a pat...

CVE-2026-54083

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. T

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway (RGW) protects STS sessi...

CVE-2026-39944

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as roo...

CVE-2026-76639

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows networ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs due to insufficient...

CVE-2026-35869

A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link R

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC2100_AZ3 V1.0.4. This flaw occurs due to insuffic...

CVE-2026-35868

A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link R

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

openssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion...

CVE-2026-81699

openssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

The OpenFaaS gateway registers GET /system/telemetry in gateway/main.go and, when basic_auth is enabled, wraps each administrative /system/* handler in auth.DecorateWithBasicAut...

CVE-2026-81664

The OpenFaaS gateway registers GET /system/telemetry in gateway/main.go and, when basic_auth is enabled, wraps each admi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

APITable through 1.13.0-beta.1 annotates both getUserHistories and closePausedUserAccount in InternalUserController with requiredLogin = false. ResourceInterceptor honours that ...

CVE-2026-80208

APITable through 1.13.0-beta.1 annotates both getUserHistories and closePausedUserAccount in InternalUserController with

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

APITable through 1.13.0-beta.1 annotates the create handler of InternalNotifyController with requiredLogin = false. ResourceInterceptor honours that annotation by returning befo...

CVE-2026-80207

APITable through 1.13.0-beta.1 annotates the create handler of InternalNotifyController with requiredLogin = false. Reso

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that ...

CVE-2026-75871

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentica...

CVE-2026-75159

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication m

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.9.0 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that...

CVE-2026-19889

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

Inefficient Algorithmic Complexity vulnerability in Apache APISIX. A single small request can pin a gateway worker at 100% CPU for an extended period in graphql-limit-count ro...

CVE-2026-75005

Inefficient Algorithmic Complexity vulnerability in Apache APISIX. A single small request can pin a gateway worker at

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto descriptor. Spring Cloud Gateway 5.0.0 - 5.0.2 Spring Cloud...

CVE-2026-47879

Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto de

历史摘要 · 未重新核验 · NVD

安全公告2026-08-28 发布INFO

Compatibility Test Suite (CTS)

本公告来自 Android Security Bulletin,内容涉及 Compatibility Test Suite (CTS),即安卓兼容性测试套件。CTS 是 Google 为 Android 生态提供的自动化测试工具集,用于验证

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-08-28 发布INFO

Compatibility Definition Document (CDD)

本次发布的是 Android 兼容性定义文档(Compatibility Definition Document, CDD),来源为 Android Security Bulletin 官方渠道。CDD 是 Android 生态系统中的核心

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-08-28 发布INFO

Tools, build, and related reference

本次输入为 Android Security Bulletin 中一个标题为 'Tools, build, and related reference' 的参考页面条目。该条目来自 Android 官方安全公告(source_name: A

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-08-28 发布INFO

Latest Compatibility Definition Document (CDD)

本公告为Android安全公告发布的《最新兼容性定义文档(CDD)》更新说明。该文档是Android生态系统的核心兼容性规范,定义了设备制造商(OEM)在构建Android系统时需要满足的硬件、软件、API、安全管理等各项要求,以确保应用能

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-08-28 发布INFO

Latest security bulletins

本输入为 Android 安全公告(Android Security Bulletin)的摘要页面,来源为 Android 官方文档网站(source.android.com),发布时间为 2026-08-28。该公告页面通常用于发布 An

历史摘要 · 未重新核验 · Android Security Bulletin