2026-09-03 归档

今日共收录 1407 条安全情报，包含 491 个 CVE，487 篇安全通告，以及 120 篇研究论文。

← 返回归档列表

漏洞预警2026-09-02 发布INFO

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attac...

CVE-2026-20354

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco

历史摘要 · 未重新核验 · NVD

#cve #cwe-354

漏洞预警2026-09-02 发布INFO

Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of NGINX ...

CVE-2026-66362

Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists

历史摘要 · 未重新核验 · NVD

#cve #cwe-76

漏洞预警2026-09-02 发布INFO

In the current development version of Eclipse aeriOS, which has not yet had an official release, the KrakenD instance included in the API Gateway component had the disable_jwk_s...

CVE-2026-82955

In the current development version of Eclipse aeriOS, which has not yet had an official release, the KrakenD instance in

历史摘要 · 未重新核验 · NVD

#cve #cwe-295 #cwe-347

漏洞预警2026-09-01 发布INFO

A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause the Manage API to send crafted ou...

CVE-2026-18730

A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenti

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-01 发布INFO

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the file gateway/platforms/api_server.py of the component Sess...

CVE-2026-84287

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the f

历史摘要 · 未重新核验 · NVD

#cve #cwe-404

漏洞预警2026-09-01 发布INFO

Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs ...

CVE-2026-78606

Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized disclosure, modification, and deletion of data via

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

威胁情报2026-09-01 发布INFO

Counterfeit installers to system compromise: Tracking a deceptive software download campaign

An active campaign is impersonating legitimate software vendors to deliver malware through look-alike download pages and

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #microsoft #ti #malware

威胁情报2026-09-01 发布INFO

Critical Langflow flaw exploited to steal OpenAI and AWS keys

CVE-2026-0768

Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open

历史摘要 · 未重新核验 · BleepingComputer

#cybersecurity #news #ransomware

威胁情报2026-09-02 发布INFO

Hackers exploit Sangoma Switchvox flaw to deploy reverse shells

CVE-2026-9586

Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox

历史摘要 · 未重新核验 · BleepingComputer

#cybersecurity #news #ransomware

威胁情报2026-09-02 发布INFO

Hackers exploit critical JFrog Artifactory flaw to forge admin tokens

CVE-2026-82329

A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to cr

历史摘要 · 未重新核验 · BleepingComputer

#cybersecurity #news #ransomware

安全公告2026-09-03 发布INFO

Compatibility Test Suite (CTS)

本公告来自 Android Security Bulletin 源，标题为《Compatibility Test Suite (CTS)》，发布日期为 2026-09-03。公告内容指向 Android 兼容性测试套件的官方文档页面，而非具