2026-09-01 归档

今日共收录 1266 条安全情报，包含 424 个 CVE，451 篇安全通告，以及 107 篇研究论文。

漏洞预警2026-08-31 发布INFO

Incorrect access control in the NTPSyncWithHost function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the device clock via sending a crafted P...

CVE-2026-51725

Incorrect access control in the NTPSyncWithHost function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated att

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-31 发布INFO

The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential condi...

CVE-2026-73819

The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifyin

历史摘要 · 未重新核验 · NVD

#cve #cwe-1390

漏洞预警2026-08-31 发布INFO

Unrestricted Upload of File with Dangerous Type vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent allows Using Malicious Files. This issue affe...

CVE-2026-82970

Unrestricted Upload of File with Dangerous Type vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePriva

历史摘要 · 未重新核验 · NVD

#cve #cwe-434

漏洞预警2026-08-31 发布INFO

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Digitální a informační agentura (DIA) eObčanka-Identifikace on MacOS ...

CVE-2026-59111

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Digitální a

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose WAN-side administration via sending a craft...

CVE-2026-51681

Incorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify LED behavior via sending a crafted POST reques...

CVE-2026-51680

Incorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-31 发布INFO

Incorrect access control in the setPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the administrator account via sending a c...

CVE-2026-51679

Incorrect access control in the setPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-08-31 发布INFO

A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation resul...

CVE-2026-82695

A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telne

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-08-31 发布INFO

A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSecurityHandler of the file /goform/ate of the component Web UI. The manipulati...

CVE-2026-82694

A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSecurityHandler of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-08-31 发布INFO

A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the function TendaTelnet of the file /goform/telnet of the component Web UI. Executing a m...

CVE-2026-82693

A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the function TendaTelnet of the f

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-306

漏洞预警2026-08-31 发布INFO

A vulnerability was found in D-Link DNS-340L and DNS-345 up to 20260717. This affects an unknown part of the file /cgi-bin/iscsi_mgr.cgi. Performing a manipulation of the argume...

CVE-2026-82692

A vulnerability was found in D-Link DNS-340L and DNS-345 up to 20260717. This affects an unknown part of the file /cgi-b

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-08-31 发布INFO

A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected by this issue is some unknown functionality of the file /cgi-bin/usb_d...

CVE-2026-82691

A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected by this issue

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-08-31 发布INFO

A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ve_mgr.cgi. This manipulati...

CVE-2026-82690

A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown funct

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-08-31 发布INFO

A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomount_mgr.cgi of the comp...

CVE-2026-82689

A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown f

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-08-31 发布INFO

A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virtual_vol.cgi...

CVE-2026-82688

A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-08-31 发布INFO

Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing the monitoring module to crash and become paralyzed; simultaneously, they ca...

CVE-2026-49003

Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing the monitoring modu

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-08-31 发布INFO

ToolJet before v3.16.208 fails to validate that authenticated users belong to the organization specified in the organizationId path parameter of tooljet-db endpoints, allowing a...

CVE-2026-82874

ToolJet before v3.16.208 fails to validate that authenticated users belong to the organization specified in the organiza

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-31 发布INFO

ToolJet before v3.16.208 fails to validate that the path organizationId matches the authenticated user's workspace before performing ToolJet DB table operations. A workspace adm...

CVE-2026-82872

ToolJet before v3.16.208 fails to validate that the path organizationId matches the authenticated user's workspace befor

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-31 发布INFO

ToolJet before v3.16.208 fails to validate organizationId ownership in database write and destroy routes, allowing any builder-role user to create, alter, or drop tables in othe...

CVE-2026-82870

ToolJet before v3.16.208 fails to validate organizationId ownership in database write and destroy routes, allowing any b

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-08-31 发布INFO

@hulumi/policies versions before 1.3.2 fail to fully inspect inline and attached IAM policy evidence for the administrator-policy guardrail. Attackers can craft admin-equivalent...

CVE-2026-82860

@hulumi/policies versions before 1.3.2 fail to fully inspect inline and attached IAM policy evidence for the administrat

历史摘要 · 未重新核验 · NVD

#cve #cwe-269