2026-08-29 归档

今日共收录 1687 条安全情报，包含 687 个 CVE，604 篇安全通告，以及 114 篇研究论文。

漏洞预警2026-08-28 发布INFO

This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across al...

CVE-2026-19412

This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication

历史摘要 · 未重新核验 · NVD

#cve #cwe-798

漏洞预警2026-08-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: hwmon: (occ) unregister sysfs devices outside occ lock occ_active(false) and occ_shutdown() unregister sysf...

CVE-2026-80660

In the Linux kernel, the following vulnerability has been resolved: hwmon: (occ) unregister sysfs devices outside occ l

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-08-28 发布INFO

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN proce...

CVE-2026-78011

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker t

历史摘要 · 未重新核验 · NVD

#cve #cwe-191 #cwe-787

漏洞预警2026-08-28 发布INFO

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in...

CVE-2026-78010

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated

历史摘要 · 未重新核验 · NVD

#cve #cwe-121 #cwe-787 #cwe-1284

漏洞预警2026-08-28 发布INFO

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN proc...

CVE-2026-78009

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-125

漏洞预警2026-08-28 发布INFO

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN proc...

CVE-2026-19317

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-191

漏洞预警2026-08-28 发布INFO

A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN processing b...

CVE-2026-19316

A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to creat

历史摘要 · 未重新核验 · NVD

#cve #cwe-415 #cwe-416

漏洞预警2026-08-28 发布INFO

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of Service (DoS) condition in VPN proce...

CVE-2026-19314

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker t

历史摘要 · 未重新核验 · NVD

#cve #cwe-191 #cwe-787

漏洞预警2026-08-28 发布INFO

Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain ...

CVE-2026-77977

Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-08-28 发布INFO

A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive co...

CVE-2026-73809

A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web manag

历史摘要 · 未重新核验 · NVD

#cve #cwe-319

漏洞预警2026-08-28 发布INFO

FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat (iLink) share-channel endpoints authorize reques...

CVE-2026-68929

FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, th

历史摘要 · 未重新核验 · NVD

#cve #cwe-306 #cwe-862

漏洞预警2026-08-28 发布INFO

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Ceph Object Gateway (RGW) SigV4 handle...

CVE-2026-54330

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-08-28 发布INFO

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The ip-customblock active response script contains a pat...

CVE-2026-54083

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. T

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-08-28 发布INFO

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway (RGW) protects STS sessi...

CVE-2026-39944

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2

历史摘要 · 未重新核验 · NVD

#cve #cwe-327

威胁情报2026-08-28 发布INFO

ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body

CVE-2023-49105

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting ow

历史摘要 · 未重新核验 · The Hacker News

#cybersecurity #news #thn

安全公告2026-08-29 发布INFO

Compatibility Test Suite (CTS)

本次输入为 Android Security Bulletin 中关于 Compatibility Test Suite (CTS) 的条目，发布日期为2026年8月29日。CTS 是 Android 平台官方的设备兼容性测试套件，用于验证