Improper Authentication of FortiPAM Server
Fortinet PSIRT 发布了一则安全公告（FG-IR-26-168），通报了 FortiPAM Server 中存在的不当认证漏洞（CWE-287）。从公告描述看，该问题出现在 Fortinet Privileged Access
2026-09-09 归档
今日共收录 1483 条安全情报，包含 593 个 CVE，506 篇安全通告，以及 97 篇研究论文。
← 返回归档列表Ivanti Endpoint Manager Mobile代码注入漏洞
本次输入为知道创宇/Seebug漏洞数据库收录的关于 Ivanti Endpoint Manager Mobile（EPM Mobile）的代码注入漏洞公告，收录编号为 ssvid-99967。该产品是企业级移动设备管理（MDM）组件，通常
Huawei Secoway USG firewall weak password
该公告来自知道创宇 Seebug 漏洞库，标题指出华为 Secoway USG 防火墙存在弱口令问题。由于公告正文未提供具体技术细节，可能意味着设备管理界面使用了默认口令或可被猜测的弱口令。若该问题被利用，远程攻击者可能尝试通过弱口令登录设
Yokogawa YFGW410 gateway
根据知道创宇 Seebug 漏洞库的条目，存在一条关于 Yokogawa YFGW410 gateway 的安全公告，发布于 2026 年 9 月 8 日。该条目仅提供了标题和来源链接，未包含漏洞的类型、成因、触发条件、实际影响等任何技术细
Linux 内核提权 CVE-2026-31431(copy-fail)
CVE-2026-31431
Linux 内核提权 CVE-2026-31431(copy-fail)
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CrowdStrike Announces Continuous Identity for AI Agents
2026年9月9日，CrowdStrike 官方博客发布了题为“CrowdStrike Announces Continuous Identity for AI Agents”的公告。该公告主要介绍 CrowdStrike 推出的一项新能力
Stable Channel Update for Desktop
CVE-2026-87585 · CVE-2026-87492 · CVE-2026-87500 · CVE-2026-87628 · CVE-2026-87569 · CVE-2026-87467 · CVE-2026-87604 · CVE-2026-87633 · CVE-2026-87438 · CVE-2026-87621 · CVE-2026-87464 · CVE-2026-87654 · CVE-2026-87650 · CVE-2026-87517 · CVE-2026-87542 · CVE-2026-87440 · CVE-2026-87554 · CVE-2026-87596 · CVE-2026-87512 · CVE-2026-87524 · CVE-2026-87647 · CVE-2026-87646 · CVE-2026-87527 · CVE-2026-87514 · CVE-2026-87460 · CVE-2026-87520 · CVE-2026-87578 · CVE-2026-87488 · CVE-2026-87444 · CVE-2026-87572 · CVE-2026-87447 · CVE-2026-87525
The Chrome team is delighted to announce the promotion of Chrome 153 to the stable channel for Windows, Mac and Linux. T
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a netw...
CVE-2026-69356
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS...
CVE-2026-26084
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8,
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.
CVE-2026-12745
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticat
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.
CVE-2026-12744
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticat
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
CVE-2026-12650
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
CVE-2026-12647
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
CVE-2026-12646
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
CVE-2026-12645
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
多款Huawei路由器信息泄露漏洞
多款Huawei路由器信息泄露漏洞
Uncontrolled Resource Consumption in SNMP
CVSSv3 Score: 5.9 A Use of Uninitialized Variable [CWE-457] vulnerability in Fortinet FortiAnalyzer SNMP daem