Xinference 3.3.0 Unauthenticated Arbitrary-Path File Read via /v1/models/llm/auto-register
CVE-2026-85668
Xinference (affected commit 4a94832, v3.x) contains an unauthenticated arbitrary-path file read vulnerability in the POS
2026-09-05 归档
今日共收录 1726 条安全情报，包含 665 个 CVE，657 篇安全通告，以及 120 篇研究论文。
← 返回归档列表xiaobei through 5.5.2 Unauthenticated Webhook Message Injection
CVE-2026-85667
xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthent
Bruno 3.4.2 Arbitrary File Read via Unconfined Body File Path
CVE-2026-85665
Bruno versions through 3.4.2 fail to validate file paths in request body declarations, allowing attackers to read arbitr
Chroma 1.5.9 Unbounded HNSW Index Parameters Memory Exhaustion
CVE-2026-85664
Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters max_neighbors, ef_construction, and ef_search in
Aim 3.29.1 Remote Code Execution via Unauthenticated Method Dispatch
CVE-2026-85663
Aim 3.29.1 remote tracking server fails to authenticate requests and dispatches arbitrary methods through getattr withou
excel-mcp-server 0.1.8 Arbitrary File Read/Write via stdio mode
CVE-2026-85661
excel-mcp-server 0.1.8 fails to enforce path confinement in stdio mode when EXCEL_FILES_PATH is unset, allowing attacker
Trigger.dev before 4.5.2 Unauthorized Environment Access via Run Replay
CVE-2026-85651
Trigger.dev versions before 4.5.2 fail to validate environment membership during run replay operations, allowing authent
Trigger.dev before 4.5.2 Server-Side Request Forgery via webhook alert-channel
CVE-2026-85650
Trigger.dev before 4.5.2 contains a server-side request forgery vulnerability in webhook alert channel delivery URLs tha
git-mcp-server 2.15.1 Argument Injection via Git Ref Parameters
CVE-2026-85626
git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff
sift 17.1.3 Prototype Pollution Remote Code Execution via $where
CVE-2026-85625
sift (sift.js) 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any ma
Blinko 1.8.7 Cross-User Private Note Disclosure via noteReferenceList
CVE-2026-85624
Blinko 1.8.7 contains a cross-user private note disclosure vulnerability in the noteReferenceList procedure that perform
Postgres MCP Pro 0.3.0 Restricted-Mode Bypass via FROM-Clause Function
CVE-2026-85620
Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to
ConvertX 0.17.0 Arbitrary File Read via LaTeX Input Directives
CVE-2026-85618
ConvertX 0.17.0 contains an arbitrary file read vulnerability in the xelatex converter that allows authenticated users t
Slink before 1.12.3 Missing Authorization on Image Comment Endpoints
CVE-2026-85605
Slink before 1.12.3 fails to properly authorize access to image comment endpoints, allowing unauthenticated attackers to
valkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds
CVE-2026-85522
A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function creat
CVE-2026-85649
CVE-2026-85649
(Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the A
StackStorm st2 API Key auth.py privileges management
CVE-2026-85514
A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st
StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management
CVE-2026-85513
A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assert_user_is_admin_if_us
Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation loop that does not bound the names it ...
CVE-2026-82309
Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a fo
snipe-it before 8.6.3 Authorization Bypass via Bulk Delete
CVE-2026-85617
snipe-it versions before 8.6.3 contain an authorization bypass vulnerability in the bulk delete functionality that allow