Poster: Combining Fuzzing with Concolic Execution for IoT Firmware Testing.

随着物联网（IoT）设备在无人驾驶、建筑、机器人等对精细化要求较高的行业中广泛部署，其安全性却因设备类型多样、固件执行环境复杂而严重滞后于产业发展。现有固件安全测试方法主要分为直接连接真实设备和部分模拟（partial emulation）

历史摘要 · 未重新核验 · ACM CCS

Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned...

CVE-2026-41012

Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vC

历史摘要 · 未重新核验 · GitHub Advisory

IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of...

CVE-2026-3686

IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service due to improper limi

历史摘要 · 未重新核验 · GitHub Advisory

Incorrect access control in the getCloudSrvCheckStatus function of TOTOLINK T6 4.1.5cu...

CVE-2026-51662

Incorrect access control in the getCloudSrvCheckStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthentica

历史摘要 · 未重新核验 · GitHub Advisory

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due...

CVE-2026-19286

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improper enforcemen

历史摘要 · 未重新核验 · GitHub Advisory

IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send...

CVE-2026-3627

IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL state

历史摘要 · 未重新核验 · GitHub Advisory

IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i could...

CVE-2026-18527

IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i could allow a remote attacker t

历史摘要 · 未重新核验 · GitHub Advisory

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated...

CVE-2026-16821

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format s

历史摘要 · 未重新核验 · GitHub Advisory

org.mariadb:r2dbc-mariadb vulnerable to cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport)

CVE-2026-55860

### Summary The connector does not gate clear-text password authentication plugins on transport encryption. A hostile o

历史摘要 · 未重新核验 · GitHub Advisory

org.mariadb.jdbc:mariadb-java-client has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

CVE-2026-55857

### Summary When PAM (dialog) authentication is used, the connector can be coerced into sending the account password in

历史摘要 · 未重新核验 · GitHub Advisory

free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

CVE-2026-55785

### Summary The AUSF component of free5GC compares authentication response values with normal Go equality helpers inste

历史摘要 · 未重新核验 · GitHub Advisory

free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI

CVE-2026-55784

### Summary The AUSF component of free5GC stores per-subscriber authentication state in a global `sync.Map` keyed only

历史摘要 · 未重新核验 · GitHub Advisory

Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens

CVE-2026-55867

### Impact Graylog contains an insecure direct object reference (IDOR) vulnerability in the token revocation endpoint.

历史摘要 · 未重新核验 · GitHub Advisory

Fortigate syslog message parser can be exploited to modify or delete fields from the original message

CVE-2026-55841

### Impact A security issue has been identified in Graylog affecting the parsing of syslog messages that use a key-valu

历史摘要 · 未重新核验 · GitHub Advisory

MariaDB has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

CVE-2026-55854

### Summary When PAM (dialog) authentication is used, the connector can be coerced into sending the account password in

历史摘要 · 未重新核验 · GitHub Advisory

JFrog Artifactory contains an authentication weakness that, under default configuration, may...

CVE-2026-82329

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated at

历史摘要 · 未重新核验 · GitHub Advisory

bisheng through 2.6.0-fix2 contains a server-side request forgery vulnerability in the POST /api...

CVE-2026-82285

bisheng through 2.6.0-fix2 contains a server-side request forgery vulnerability in the POST /api/v1/workflow/report/call

历史摘要 · 未重新核验 · GitHub Advisory

PrivateBin has reflected JSON injection in backend responses via unescaped REQUEST_URI

CVE-2026-55891

## Vulnerability Details A reflected JSON injection allows an attacker to return arbitrary data in the JSON endpoints (

历史摘要 · 未重新核验 · GitHub Advisory

Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name

CVE-2026-55634

## Overview A DataObject **class-definition field name** is concatenated, without an identifier allowlist, into the PHP

历史摘要 · 未重新核验 · GitHub Advisory

Firefox browsers

Firefox browsers

历史摘要 · 未重新核验 · Mozilla Security Advisories