【机器翻译】QPS调整与免费资源包下线通知
【机器翻译】QPS调整与免费资源包下线通知
2026-09-05 归档
今日共收录 1726 条安全情报，包含 665 个 CVE，657 篇安全通告，以及 120 篇研究论文。
← 返回归档列表【SSL证书】关于 DigiCert、GlobalSign、CFCA 及 TrustAsia 免费证书的根证书升级通知
【SSL证书】关于 DigiCert、GlobalSign、CFCA 及 TrustAsia 免费证书的根证书升级通知
【慧眼】人脸核身微信小程序开放电子认证类目通知
【慧眼】人脸核身微信小程序开放电子认证类目通知
Early Stable Update for Desktop
The Stable channel has been updated to 153.0.8010.27/.28 for Windows. Mac is coming shortly , as part of our early stab
【云数据库 MySQL】关于存储空间超用锁定规则及存储空间监控指标更新的公告
【云数据库 MySQL】关于存储空间超用锁定规则及存储空间监控指标更新的公告
Chrome Dev for Desktop Update
The Dev channel has been updated to 155.0.8040.2 for Windows, Mac and Linux.A partial list of changes is available in th
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing...
CVE-2026-82684
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing Authorization vulnerability. This
Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in...
CVE-2026-86095
Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4_HDF5_inq_attname() that copies HDF5
Camaleon CMS versions 2.7.5 through 2.9.1 fail to validate redirect targets when fetching remote...
CVE-2026-86100
Camaleon CMS versions 2.7.5 through 2.9.1 fail to validate redirect targets when fetching remote files in the Upload fro
ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the...
CVE-2026-86098
ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that
A flaw was found in Flatpak. A Time-of-check to time-of-use (TOCTOU) race condition exists in the...
CVE-2026-76925
A flaw was found in Flatpak. A Time-of-check to time-of-use (TOCTOU) race condition exists in the `org.freedesktop.Flatp
PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in...
CVE-2026-86097
PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in param_set_default_file() and param_set
ntopng before 6.7.260717 fails to check user privileges in the pools bulk-delete endpoint,...
CVE-2026-86091
ntopng before 6.7.260717 fails to check user privileges in the pools bulk-delete endpoint, allowing authenticated non-ad
ntopng before 6.7.260717 fails to perform authorization checks in the delete endpoints and...
CVE-2026-86090
ntopng before 6.7.260717 fails to perform authorization checks in the delete endpoints and recipients REST v2 handlers.
PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration:...
CVE-2026-86096
PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration::start() due to a race co
vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts
CVE-2026-73557
## Executive Summary The follow-up protection for CVE-2025-62164 is incomplete at vLLM revision `26587f9519e22a5c4549ea
vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2m
CVE-2026-73556
### Summary The fix for `GHSA-rwxx-mrjm-wc2m` ("ReDoS via `structured_outputs.regex` compiled without timeout") wrapped
A flaw has been found in ramon-victor freegpt-webui up to...
CVE-2026-85703
A flaw has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected by this iss