今日共收录 1266 条安全情报，包含 424 个 CVE，451 篇安全通告，以及 107 篇研究论文。
← 返回归档列表CVE-2026-19953
URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in
CVE-2026-14366
The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91x_send() in drivers/wifi/siwx91x/siwx91x_wifi.c frees a n
CVE-2026-82880
YaCy Search Server through 1.941 contains an XML external entity injection vulnerability in SVG, FreeMind, and OpenSearc
CVE-2026-82879
DataEase before 2.10.26 contains multiple access control defects in the sharing link module. Tickets are not bound to th
CVE-2026-82878
DataEase versions before 2.10.26 omit object-level authorization checks on geographic information, dashboard linkage, an
CVE-2026-82877
ILIAS versions before 9.22, 10.0 through 10.9, and 11.0 through 11.2 contain an arbitrary file read vulnerability in the
CVE-2026-82679
A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unknown function of the
CVE-2026-82678
A vulnerability was identified in diem-project diem up to 5.1.3. The affected element is the function executeCommand of
CVE-2026-82677
A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/mo
CVE-2026-82669
A vulnerability was detected in klaussilveira GitList 2.0.0. Affected by this issue is the function SimpleXMLElement of
CVE-2026-82668
A security vulnerability has been detected in klaussilveira GitList 2.0.0. Affected by this vulnerability is the functio
CVE-2026-82866
@pdfme/common before 5.5.10 contains a server-side request forgery vulnerability in the getB64BasePdf function that fetc
CVE-2026-82865
pdfme schemas before 5.5.10 contains a cross-site scripting vulnerability in the multiVariableText property panel that a
CVE-2026-82862
Hulumi versions before v1.3.2 resolve the threat-model helper script from an unsafe root, allowing workspace files to sh
CVE-2026-82861
@hulumi/policies versions before 1.3.2 contain a parent spoof bypass vulnerability that allows attackers to submit spoof
CVE-2026-82860
@hulumi/policies versions before 1.3.2 fail to fully inspect inline and attached IAM policy evidence for the administrat
CVE-2026-82859
hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role p
CVE-2026-82858
@hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance validation, a
CVE-2026-82857
hulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM policy that all
CVE-2026-82856
@hulumi/policies versions before 1.3.2 fail to properly validate set-qualified AWS IAM condition operators in GitHub OID