Traefik v2.8.2 through v3.6 HTTP/3 Timeout Bypass
CVE-2026-88012 · CVE-2026-88878
Traefik is an HTTP reverse proxy and load balancer. In versions >= v2.8.2 through = v3.0.0 through .transport.responding
2026-09-11 归档
今日共收录 1356 条安全情报，包含 483 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表MISP Event Template Instantiation Bypasses Sharing Group and Tagging Authorization
CVE-2026-88915
Affected versions of MISP do not consistently enforce the acting user's authorization when instantiating event templates
cookies vulnerable to Set-Cookie attribute injection via unvalidated domain and path options
CVE-2026-88038
cookies is a Node.js library for reading and writing HTTP cookies, used by Koa via ctx.cookies. In versions before 0.9.2
ESP32-audioI2S 3.4.4 through 4.0.0 Heap-based Out-of-Bounds Read via Shadowed Length Parameter in read_ID3_Header
CVE-2026-87961
ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds read vulnerability in the read_ID3_Header
CVE-2026-87803
CVE-2026-87803
An authorization bypass vulnerability exists in the Countly Server DBViewer due to flawed sub-pipeline detection in the
Velociraptor VQL injection during notebook restore from backup
CVE-2026-19584
Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor
Velociraptor Required Permissions bypass by using client monitoring queries
CVE-2026-19583
Velociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux.Sys.BashShell
DaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use after free
CVE-2026-87933
A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtils_MergePatch o
Missing channel-state validation in Zephyr Bluetooth Classic L2CAP receive path
CVE-2026-15460
The Bluetooth Classic (BR/EDR) L2CAP receive handler bt_l2cap_br_recv() in subsys/bluetooth/host/classic/l2cap_br.c disp
Open WebUI: Any authenticated user can hang the server via a cyclic chat message history
CVE-2026-88002
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.1, the messa
Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis
CVE-2026-88069
Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted ar
Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree
CVE-2026-88000
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /
Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch
CVE-2026-87999
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.1, POST /api/v1/retr
Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions
CVE-2026-87997
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /ap
Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin
CVE-2026-87995
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.11 until 0.11.1, src/lib/
Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint
CVE-2026-87994
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, the chann
Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication
CVE-2026-87015
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 until 0.11.1, backend/
Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle
CVE-2026-87013
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /ap
Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value
CVE-2026-87012
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, backend/o
Rattler vulnerable to package cache path traversal via conda package build string
CVE-2026-53956
Rattler is a library that provides common functionality used within the conda ecosystem. `rattler_cache` prior to versio