今日共收录 1483 条安全情报，包含 593 个 CVE，506 篇安全通告，以及 97 篇研究论文。
← 返回归档列表CVE-2026-82058
A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges
CVE-2026-82057
A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod
CVE-2026-82056
A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert
CVE-2026-82055
A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer d
CVE-2026-82054
A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a
CVE-2026-82053
A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authe
CVE-2026-82052
The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a Mon
CVE-2026-81531
An information disclosure vulnerability has been identified in Omada Controller. An API endpoint intended for Controlle
CVE-2026-79570
mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbCon
CVE-2026-78997
UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains a Universal Cross-Site Scripting vulner
CVE-2026-78230
AshAi exposes Ash read actions to language-model tool calls. The read tool accepts an aggregate result type (min, max, s
CVE-2026-78216
AshLua exposes Ash read actions to Lua scripts run through an eval action. A read call accepts an operation (list, min,
CVE-2026-52307
An authenticated stored cross-site scripting (XSS) vulnerability in the Column Management component of ClassCMS 1CMS v5.
CVE-2026-47625
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A
CVE-2026-20293
A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-ba
CVE-2026-16497
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A s
CVE-2026-86853
A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launch
CVE-2026-86840
The `vtoken-minting` and `slpx` pallets in Bifrost contain an improper authorization vulnerability in channel commission
CVE-2026-86738
Snipe-IT versions before 8.7.0 contain a CSS injection vulnerability in the Custom CSS field due to incomplete sanitizat
CVE-2026-86737
snipe-it versions before 8.7.0 fail to enforce asset view authorization in the GET /hardware/{asset}/barcode endpoint. A