PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
2026-09-06 归档
今日共收录 918 条安全情报，包含 147 个 CVE，434 篇安全通告，以及 81 篇研究论文。
← 返回归档列表Acknowledgements
Acknowledgements
AVideo YPTSocket Plugin Unauthenticated Cross-Site Scripting
CVE-2026-86188
AVideo with YPTSocket plugin enabled contains a cross-site scripting vulnerability allowing unauthenticated attackers to
ugrep before 7.6.0 Heap Buffer Over-read via .Z decompression
CVE-2025-15614
ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z arc
MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawler
CVE-2026-86173
MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unaut
Rowboat through 0.9.1 Server-Side Request Forgery via Custom MCP Server
CVE-2026-86122
Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing authenticated users to configure ar
Webstudio through 0.296.0 SSRF via /cgi proxy routes
CVE-2026-86119
Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability in the /cgi/image, /cgi/
RouterOS SSH enters the connection protocol after a client-requested rekey even though user...
CVE-2026-67279
RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never att
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a...
CVE-2026-67281
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session
MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures during X.509 validation. Because...
CVE-2026-67278
MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures during X.509 validation. Because its trust store includes
RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin...
CVE-2026-86060
RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited chara
RouterOS does not compare the complete RSA public key when matching an SSH authentication request...
CVE-2026-67276
RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user
RouterOS accepts a "related" btest connection before the corresponding primary session has...
CVE-2026-67277
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An
CDT before 1.4.5 contains an out-of-bounds read vulnerability in the opposedVertexInd() function...
CVE-2025-15647
CDT before 1.4.5 contains an out-of-bounds read vulnerability in the opposedVertexInd() function when constraint edge in
vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages
CVE-2026-73555
## Summary When the vLLM API receives a malformed request (e.g., invalid JSON or missing required fields), FastAPI rais
vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds
CVE-2026-71486
## Summary The `/v1/completions/derender` and `/v1/chat/completions/derender` endpoints accept caller-supplied `Generat
SiYuan: Tag labels from password-protected documents are returned to readers who have not entered the password
CVE-2026-72792
**CVE:** This vulnerability corresponds to [CVE-2026-72792](https://nvd.nist.gov/vuln/detail/CVE-2026-72792). ### Summa
SiYuan: Embedded (transclusion) block content is returned without publish-access filtering, leaking private and password-protected document content to anonymous readers
CVE-2026-72795
**CVE:** This vulnerability corresponds to [CVE-2026-72795](https://nvd.nist.gov/vuln/detail/CVE-2026-72795). ### Summa
SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readers
CVE-2026-72797
**CVE:** This vulnerability corresponds to [CVE-2026-72797](https://nvd.nist.gov/vuln/detail/CVE-2026-72797). ### Summa
SiYuan: Missing publish-access filter on the HPath/path-resolution endpoints discloses the private document tree to anonymous readers
CVE-2026-72799
**CVE:** This vulnerability corresponds to [CVE-2026-72799](https://nvd.nist.gov/vuln/detail/CVE-2026-72799). ### Summa