China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access
CVE-2026-74233 · CVE-2026-74232
VulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong
2026-08-29 归档
今日共收录 1687 条安全情报，包含 687 个 CVE，604 篇安全通告，以及 114 篇研究论文。
← 返回归档列表Static Detection of Post-Quantum Cryptographic Algorithms in Stripped Binaries for Digital Forensic Examination and Migration Assurance
该论文提出了一种名为 Kestrel 的静态分析方法，用于在剥离符号、静态链接和优化后的二进制文件中识别标准化的基于格的抗量子密码算法 ML-KEM 和 ML-DSA。当前缺乏从编译后的二进制代码验证量子脆弱算法是否已被批准的量子安全算法替
A Hybrid Post-Quantum Encryption Architecture with Self-Hosted Key Management for SME Cloud Data Protection
该论文提出了一种面向中小企业（SME）云端数据保护的混合后量子加密架构 Quantum Cloud Guard (QCG)。研究背景是“先收割后解密”（harvest-now-decrypt-later）威胁：攻击者现在可以收集并存储云端的
Masked Differential-linear Distinguishers and Quantum Approaches
该论文提出了一种用于对称密钥原语密码分析的新原语——掩码自相关（masked auto-correlation, MAC），并构建了基于它的量子攻击管线。对于置换 f、输出掩码 α、β 和输入差分 w，MAC 度量掩码输出 α·f(x) 与
Improving the Robustness of the XRP Ledger Network via Edge Augmentation Strategies
本文研究 XRP Ledger 分布式账本网络的鲁棒性提升问题。XRP Ledger 的共识机制依赖于网络参与者各自维护的信任节点列表（Unique Node List, UNL），节点仅与列表中可信节点通信，以对下一账本状态达成共识。共识
From Security Events to Conflict States: A Three-layer Cyber Defense Scenario Model for Enhanced Cyber Situational Awareness
本文面向任务关键型环境中的网络防御，提出了一种面向任务的网络态势感知（CSA）与决策支持框架。核心问题是如何在观测不完整、噪声较大的条件下，统一表示攻击方的推进过程、防御方的不确定性、任务影响以及防御决策支持。为此，作者设计了一个三层集成概
When Relationships Break: Interpreting Network Traffic Anomalies via Dependency Violations
该论文提出了一种名为 XION 的网络流量异常检测与可解释性方法，针对当前基于机器学习的监控系统在可解释性方面的不足。现有方法要么依赖忽略特征间依赖关系的特征归因技术，要么需要大量领域知识或计算资源的因果建模，难以在实际场景中落地。XION
AI Slop and Hallucinations in Vulnerability Assessment: A Survey on Reasoning Failures and Trustworthy Mitigation
本文是一篇关于大语言模型（LLM）在漏洞评估中产生“AI垃圾”（AI Slop）与幻觉问题的系统性综述，旨在解决由LLM驱动的自动化漏洞评估流程中的可信度危机。随着LLM被引入网络安全领域，漏洞评估效率提升的同时，也出现了大量不可信产物：幻
Separating Disclosure from Authorization: Field-Tier Minimization for Agent Action Mediation
本文针对代理（agent）行动中介中的敏感数据暴露问题，提出了一种将数据披露与授权决策相分离的架构。传统系统中，授权系统必须查看足够的行动参数以做出决策，同时审计系统必须记录足够的信息以便验证，这导致收件人、付款备注、记录标识符等原始参数被
Defending Network Intrusion Detection Systems Based on Graph Neural Networks Against Structural Adversarial Attacks
本文针对基于图神经网络（GNN）的网络入侵检测系统（NIDS）在面临结构性对抗攻击时的鲁棒性问题展开研究。GNN 能够同时利用网络流特征和拓扑模式，因此被视为一种有前景的 ML-NIDS 解决方案。尽管 GNN 分类器相比其他机器学习检测器
A Drop-in KEM Replacement for Client Signatures in Post-Quantum SSH
该论文针对后量子密码迁移背景下 SSH 协议的用户认证环节提出了一种基于 KEM（密钥封装机制）的替代方案。当前 SSH 的后量子迁移主要聚焦于密钥交换（已在 OpenSSH 中部署并进入标准化流程），而用户认证仍主要依赖后量子签名，这带来
wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records
CVE-2026-81341
wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer
wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
CVE-2026-81020
wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increme
wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
CVE-2026-81019
wolfProvider before 1.2.2 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never incre
Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun
CVE-2026-58107
CodeChecker's massStoreRun processing path performs one-shot decompression of attacker-controlled, Base64-encoded zlib d
Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation
CVE-2026-58106
CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r was fixed by replacing unchecked strcpy() with a bound
WP Rocket <= 3.21.0.1 - Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocket_beacon Endpoint
CVE-2026-5934
The WP Rocket plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.21.0
iswalle getnote-mcp upload_image index.ts fs.readFileSync path traversal
CVE-2026-82111
A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of
SvelteKit 2.49.0 before 2.53.3 Denial of Service via form
CVE-2026-82259
SvelteKit versions from 2.49.0 through 2.53.2 (fixed in 2.53.3) contain a deserialization expansion issue in the experim
SvelteKit 2.38.0 before 2.60.1 Cross-User Data Disclosure via query.batch
CVE-2026-82258
SvelteKit versions from 2.38.0 before 2.60.1 contain a race condition in query.batch that allows concurrent requests fro