今日共收录 1726 条安全情报，包含 665 个 CVE，657 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-18905
IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could allow a remote authenticated
CVE-2026-85671
QAnything 2.0.0 contains an authentication bypass vulnerability in the /api/local_doc_qa/get_file_base64 and /api/local_
CVE-2026-85607
Blinko 1.8.7 contains an authorization bypass (IDOR) vulnerability in multiple tRPC procedures (message.list, message.up
CVE-2026-85597
Traefik before v2.11.55 contains a TLS option conflict resolution vulnerability that allows unauthenticated attackers to
CVE-2026-84043
The ePayco Payment Gateway for WooCommerce WordPress plugin before 8.4.7 does not properly verify the authenticity of pa
CVE-2026-76169
fastify versions >= 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-fou
CVE-2026-67402
An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger
CVE-2026-67398
Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.8,
CVE-2026-85446
MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node ident
CVE-2026-85786
Improper handling of highly compressed data in Amazon ion-java before 1.12.1 might allow remote attackers to cause a den
CVE-2026-85781
Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4
CVE-2026-53761
Frappe CRM is an open-source customer relationship management tool. Prior to version 1.73.0, there is an authentication
CVE-2026-9317
Nango before 0.71.6 contains a missing authentication vulnerability in the runner tRPC server that allows unauthenticate
CVE-2026-61688
SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, an authenticated user can view the API reques
CVE-2026-53756
Emlog is an open source website building system. Prior to version 2.6.16, Emlog CMS Pro contains a blind SQL injection i
CVE-2026-61608
SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, `UserInvitation` entities have no expiry time
CVE-2026-61686
SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, the `DataGrid` LiveComponent deserializes a `
CVE-2026-82538
ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where t
CVE-2026-50553
Note Mark is an open-source note-taking application. Prior to version 0.19.5, Note Mark validates book and note slug val
CVE-2026-80913
In the Linux kernel, the following vulnerability has been resolved: selinux: require every boolean value to be defined