今日共收录 1407 条安全情报，包含 491 个 CVE，487 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-72641
Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized modification of data via Accessing Functionality No
CVE-2026-72628
Improper Handling of Highly Compressed Data (CWE-409) in Kibana can lead to a denial of service via Excessive Allocation
CVE-2026-63138
Improper Neutralization of Special Elements in Data Query Logic (CWE-943) in Kibana can lead to information disclosure v
CVE-2026-63137
Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Exploiting Incorrectly Configured Acces
CVE-2026-45221
Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute a
CVE-2026-33465
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive A
CVE-2026-8712
Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with ne
CVE-2026-84303
gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/
CVE-2026-52132
llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of s
CVE-2026-52131
llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.
CVE-2026-52022
An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registr
CVE-2026-51974
An eval() injection vulnerability in the get_list function in modules/meta_parser.py in lllyasviel Fooocus 2.1.854 throu
CVE-2026-19592
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repos
CVE-2026-19591
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell
CVE-2026-51956
A Broken Object Level Authorization vulnerability exists in Grashjs Atlas CMMS prior to v1.6.0. An authenticated user fr
该文章是“第四届阿里CTF安全挑战赛”决赛直播的通知或宣传页面，源自“先知社区”。文章标题显示为决赛直播，但正文摘要为空，未提供任何漏洞CVE编号、威胁行为者、恶意软件家族、受影响行业或地区以及ATT&CK技术信息。从标签“xianzhi”
本文是阿里云在先知社区发布的公开招聘启事，面向2027届实习生，邀请候选人“抢先加入AI时代顶尖安全团队”。文章内容为招聘宣传信息，没有提及任何网络安全事件、漏洞、攻击战术、恶意代码样本、威胁行为者属性或泄露指标（IOC）。文章正文未包含可
Control CenterManage your security and delivery services
See all Cybersecurity
Our Infrastructure