今日共收录 1483 条安全情报，包含 593 个 CVE，506 篇安全通告，以及 97 篇研究论文。
← 返回归档列表CVE-2026-73317
XenForo before 2.3.13 contains a missing authorization vulnerability in the ACP cache-rebuild dispatcher that allows lim
CVE-2026-73316
XenForo before 2.3.13 contains a payment replay vulnerability in the PayPal REST payment provider that allows attackers
CVE-2026-73315
XenForo before 2.3.13 contains a server-side request forgery vulnerability in the PayPal REST webhook handler that allow
CVE-2026-73314
XenForo before 2.3.13 contains a signature verification logic error in the PayPal REST webhook handler that allows unaut
CVE-2026-73313
XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerability in the passkey TFA provider that allow
CVE-2026-73312
XenForo before 2.3.13 contains a refresh token replay vulnerability that allows attackers to reuse a refresh token multi
CVE-2026-73311
XenForo before 2.3.13 contains an OAuth2 authorization code reuse vulnerability that allows attackers to obtain unauthor
CVE-2026-33920
A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to mis
CVE-2026-33391
An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient vali
CVE-2026-33389
An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which estab
CVE-2026-33388
An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation o
CVE-2026-33387
A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input
CVE-2026-79603
x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued
CVE-2026-79602
A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG() in Xen.
CVE-2026-77106
Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade
CVE-2026-77105
CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgr
CVE-2026-77104
CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved main
CVE-2026-77103
CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software c
CVE-2026-77102
CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to res
CVE-2026-77101
CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to re