Acknowledgements
Acknowledgements
2026-09-03 归档
今日共收录 1407 条安全情报，包含 491 个 CVE，487 篇安全通告，以及 120 篇研究论文。
← 返回归档列表A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition (CRD) without proper validat...
CVE-2026-66786
A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from th
Looking Glass is a modern, stateless network-diagnostic platform — a single self-contained Go binary that fronts a fleet of routers over SSH and exposes ping / traceroute / BGP ...
CVE-2026-53611
Looking Glass is a modern, stateless network-diagnostic platform — a single self-contained Go binary that fronts a fleet
Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE
CVE-2026-62677
### Summary An authenticated, non-admin user can obtain **arbitrary host-filesystem read/write** (and host environment-
Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE
CVE-2026-62674
### Summary An authenticated user with edit access to their own session can overwrite a shared/template agent by upload
Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter (CVE-2026-44738 bypass)
CVE-2026-61842
### Summary The Twig content sandbox replaces `config` with the redacted `SandboxConfig` facade and strips `Config::get
A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The...
CVE-2026-84852
A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the f
Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential...
CVE-2026-19117
Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and
A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8....
CVE-2026-84833
A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Affected by this vulne
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR...
CVE-2026-20275
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco...
CVE-2026-20280
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineer
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR...
CVE-2026-20276
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR...
CVE-2026-20278
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR...
CVE-2026-20277
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t
A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow...
CVE-2026-20212
A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remo
Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity...
CVE-2026-84668
Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file throug
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a...
CVE-2026-84652
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a user is authenticated
A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an...
CVE-2026-63020
A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error mes
Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled ...
CVE-2026-14199
Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than z
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding
CVE-2026-75899
### Impact `fast-uri` decodes a hostname's percent escapes twice in a single `normalize()` or `resolve()` call: once du