crypto: qce - fix CCM AAD buffer underallocation
CVE-2026-80832
In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation T
2026-09-05 归档
今日共收录 1726 条安全情报，包含 665 个 CVE，657 篇安全通告，以及 120 篇研究论文。
← 返回归档列表iommu/iommufd: Fix NULL pointer deref in iommufd_ioas_change_process when racing with iopt_map_file_pages
CVE-2026-80817
In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix NULL pointer deref in iommufd_io
nilfs2: reject invalid block index in GC ioctl
CVE-2026-80807
In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject invalid block index in GC ioctl Syz
fbdev: Wrap user-invoked calls to fb_set_var() in helper
CVE-2026-80786
In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fb_set_var() in h
Nightingale 9.1.1 SSRF Guard Bypass via IPv6 Encoding
CVE-2026-85692
Nightingale (n9e), as of commit 8362cbe (main branch, confirmed 2026-08-27), contains a server-side request forgery vuln
ms-swift 4.5.2 Unauthenticated SSRF via Multimodal Media URLs
CVE-2026-85686
ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift deploy OpenAI-compatible API that fetch
LLaMA-Factory SSRF Guard Bypass via Redirect and DNS Rebinding
CVE-2026-85673
LLaMA-Factory contains a server-side request forgery vulnerability in the OpenAI-compatible API multimodal media URL han
ogx 1.3.1 Server-Side Request Forgery via MCP tool server_url
CVE-2026-85666
OGX (formerly Llama Stack, affected at commit fbe8e0f) contains an unauthenticated server-side request forgery vulnerabi
Marqo 2.26.0 Server-Side Request Forgery via Media URLs
CVE-2026-85662
Marqo 2.26.0 contains a server-side request forgery vulnerability in the add_documents endpoint that allows unauthentica
AppFlowy-Cloud through 0.9.64 Cross-Workspace Collab Read via WebSocket
CVE-2026-85622
AppFlowy-Cloud through 0.9.64 fails to validate workspace membership when establishing WebSocket connections in the esta
LobeChat 2.2.1 Webhook Signature Verification Bypass QQ Feishu
CVE-2026-85621
LobeChat (LobeHub) 2.2.1 does not properly verify inbound chat-platform webhook signatures in the QQ and Feishu adapters
AppFlowy-Cloud 0.9.64 Cross-Workspace Collab Access via HTTP API
CVE-2026-85619
AppFlowy-Cloud 0.9.64 fails to verify that requested collab objects belong to the workspace in authorization checks, all
Douyin_TikTok_Download_API 4.1.2 SSRF via url parameter
CVE-2026-85608
Douyin_TikTok_Download_API through 4.1.2 contains a server-side request forgery vulnerability in the /api/download and /
Grav 2.0.0 through 2.0.17 Stored XSS via Modular Pages
CVE-2026-85598
Grav versions 2.0.0 through 2.0.17 fail to apply save-time XSS detection to modular pages, allowing authenticated page e
phpMyFAQ before 4.1.8 Stored XSS via html_entity_decode
CVE-2026-85593
phpMyFAQ versions before 4.1.8 contain a stored cross-site scripting vulnerability in FaqHelper::convertOldInternalLinks
Cross-Site Request Forgery via Attacker-Controlled REST Detection in MISP
CVE-2026-85547
A cross-site request forgery (CSRF) vulnerability exists in MISP due to form-security and CSRF protections being disable
MISP Attribute Deletion Authorization Bypass Allows Users Without Modify Permissions to Delete Attributes
CVE-2026-85538
An incorrect authorization vulnerability in MISP allowed authenticated users to delete attributes from events despite la
MISP Sharing Group Authorization Bypass via Omitted Distribution Parameter
CVE-2026-85533
An authorization flaw in MISP allowed an authenticated user to submit a sharing_group_id without verifying that the user
vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages
CVE-2026-73555
## Summary When the vLLM API receives a malformed request (e.g., invalid JSON or missing required fields), FastAPI rais
vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds
CVE-2026-71486
## Summary The `/v1/completions/derender` and `/v1/chat/completions/derender` endpoints accept caller-supplied `Generat