rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass
CVE-2026-88018
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1
2026-09-11 归档
今日共收录 1356 条安全情报，包含 483 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表rclone: FTP cross-session auth-proxy backend confusion
CVE-2026-88017
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.64.
rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination
CVE-2026-88016
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1
rclone local: crafted Range request against a translated symlink panics (DoS)
CVE-2026-88015
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1
rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace
CVE-2026-88014
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.
rclone: http backend forwards custom/auth headers to a different host on redirect
CVE-2026-88013
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.
Traefik: ForwardAuth identity spoofing via dot-form header alias
CVE-2026-88879 · CVE-2026-88011
Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.56, and from 3.0.0 until 3.7.12, a client-
AppFlowy-Cloud 0.7.2 through 0.9.64 Missing Workspace Authorization on Bulk Publish Endpoint
CVE-2026-88898
AppFlowy-Cloud versions 0.7.2 through 0.9.64 fail to authorize callers against the workspace in the bulk publish endpoin
Traefik entrypoint header-name sanitization bypassed via request trailers
CVE-2026-88004
Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses ali
proma-ai Proma File Preview Service file-preview-service.ts resolveTargetPath path traversal
CVE-2026-88790
A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath o
Snipe-IT before 8.7.2 Authorization Bypass via Predefined Kit Checkout
CVE-2026-88894
Snipe-IT's predefined kit checkout path does not enforce Full Multiple Company Support (FMCS) tenant isolation on the ch
Renovate before 44.11.3 Credential Exfiltration via Link Header
CVE-2026-88881
Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP `Link` header whe
Traefik before v2.11.56 Identity Spoofing via Header Alias
CVE-2026-88011 · CVE-2026-88879
Traefik is an HTTP reverse proxy and load balancer. In Traefik v1.x, v2.x through v2.11.55, and v3.0.0 through v3.7.11,
Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets
CVE-2026-88001
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, server-si
Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader
CVE-2026-87996
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.1, SafePlayw
Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite
CVE-2026-87016
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.41 until 0.11.1, get_user
Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout
CVE-2026-87011
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, the unaut
NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover
CVE-2026-54694
SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a s
Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization
CVE-2026-88008
## Summary There is a high-severity request-smuggling vulnerability in Traefik's handling of the HTTP/1.1 `Upgrade` mec
Cross User/App Network Attacks - Hijacking TCP Connections and DNS Cache Poisoning via a Malicious User/App (Extended Version)
本论文挑战了“TCP 与 DNS（基于 UDP）的客户端-服务器连接在当今已难以被 off-path（路径外）攻击者利用”这一长期共识。传统防护依赖 TCP 初始序列号（ISN）随机化与 UDP 源端口随机化，使攻击者无法猜测连接状态。作者