今日共收录 1362 条安全情报，包含 399 个 CVE，552 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-84989
ntopng is a web-based network traffic monitoring application. In versions 6.7.0 through 6.7.260717, two REST v2 endpoint
CVE-2026-84971
Improper handling of an unexpected value size in the decryption path of a client-side encryption library can cause a fai
CVE-2026-84970
A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor wh
CVE-2026-84969
A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes
CVE-2026-75033
A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its `field.cattle.io
CVE-2026-71404
A flaw was found in Rancher Manager. The GlobalRole controller derived the target ClusterRole name from the user-settabl
CVE-2026-71403
A flaw was found in Rancher Manager. The /v3/users update path did not enforce immutability of a User resource's `userna
CVE-2026-63694
Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements use
CVE-2026-56126
pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Status: Monitoring privilege to inject
CVE-2026-35160
Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements use
CVE-2026-85110
A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/form
CVE-2026-84815
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kriesi Enfold allo
CVE-2026-82180
In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication polic
CVE-2026-6071
A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote
CVE-2025-12737
The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This ov
CVE-2026-9854
A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their p
CVE-2026-9853
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the a
CVE-2026-9852
A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, i
CVE-2026-85175
SiYuan versions <= 3.8.1 (fixed in v3.8.2) contain an incomplete blocklist in the IsForbiddenAbsPath() function (kernel/
CVE-2026-85174
SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file when full-text search