Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle
CVE-2026-87013
## Summary Any authenticated user can move one of their own folders under itself, leaving a loop in their folder tree. T
2026-09-11 归档
今日共收录 1356 条安全情报，包含 483 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表@jhb.software/payload-alt-text-plugin: Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission
CVE-2026-59965
## Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission ### Summary `@jhb.software/p
@argos-ci/core: CI Branch Name OS Command Injection
CVE-2026-59960
## CI Branch Name OS Command Injection in @argos-ci/core ### Summary `@argos-ci/core@6.2.0` passes attacker-controlled
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a security bypass due to improper...
CVE-2026-9176
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a security bypass due to improper authentication controls
Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication
CVE-2026-87015
## Summary When more than one external tool server is reachable in the same request, a tool call to a server configured
n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution
CVE-2026-86073
## Impact The OAuth token endpoint bound an authorization code's first access token to the consented resource, but not
n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content
CVE-2026-86074
## Impact Instance AI credential setup accepted a credential test/verification URL without checking it matched the work
n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read
CVE-2026-86995
## Impact The Git node validated the repository that a fetch or pull targeted, but `setUpstream` wrote a `branch..remot
n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints
CVE-2026-86085
## Impact The endpoints `/rest/roles/:slug/assignments` and `/rest/roles/:slug/assignments/:projectId/members` checked
n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check
CVE-2026-86993
## Impact A log streaming event destination may reference a generic HTTP credential, and the destination resolved and d
In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.
CVE-2026-89161
PCRE2 是应用极广的开源正则表达式库，被 PHP、R、Git、Apache httpd、Suricata 等大量软件以动态或静态方式链接，其 JIT 路径 pcre2_jit_match 用于高性能正则匹配。根据 NVD 元数据，在 1
PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.
CVE-2026-89160
该漏洞影响 PCRE2 10.48 之前的版本。PCRE2 是广泛使用的正则表达式库，大量编程语言运行时、Web 服务器、日志处理与内容过滤组件（如 PHP、Nginx、grep 类工具、邮件与反垃圾网关、各类语言绑定）都直接或间接依赖它。
PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.
CVE-2026-89158
PCRE2（Perl Compatible Regular Expressions）是一个广泛使用的正则表达式库，被众多编程语言和软件（如PHP、Nginx、Apache等）用于模式匹配。CVE-2026-89158 影响 PCRE2 10
The Simple Ajax Chat – Add a Fast, Secure Chat Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Chat Message in all versions up to, and including, <= 20...
CVE-2026-81825
WordPress 插件 Simple Ajax Chat – Add a Fast, Secure Chat Box 存在存储型跨站脚本 (Stored XSS) 漏洞，影响所有版本直至并包含 20260811。根因是插件在处理聊天消息时
The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `supertitle` and `subtitle` attributes of the `bold_timeline_item` shortcode in ...
CVE-2026-7438
CVE-2026-7438 是 WordPress 插件 Bold Timeline Lite 中的一个存储型跨站脚本（Stored XSS）漏洞，影响范围包括 1.2.8 及之前的所有版本。漏洞根源在于 bold_timeline_ite
The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.70 via the upload_file_remove() AJAX handler. The plugin stores t...
CVE-2026-19991
CVE-2026-19991 是 WordPress 第三方插件 UsersWP（用户资料/账户管理类插件）中的一个任意文件删除漏洞，影响 1.2.70 及之前的所有版本。漏洞根源在于插件对“账户文件字段”的信任链与校验顺序存在逻辑缺陷：当
The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty plugin for WordPress is vulnerable to Reflected Cross-Site S...
CVE-2026-18964
WordPress 平台的 Chaty 插件（完整名称 The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email,
The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTP_X_FORWARDED_FOR' parameter in all versions up to, and including, 9.2.08.0...
CVE-2026-18579
WordPress 插件 WP Photo Album Plus（用于相册与照片展示）被披露存在存储型跨站脚本（Stored XSS）漏洞，影响截至 9.2.08.003（公告标题中记为 9.2.08.0）的所有版本，CVE 编号为 CVE
京公网安备 11000002002063号
本条情报条目的标题为“京公网安备 11000002002063号”，来源链接指向 beian.gov.cn 的网站备案信息查询页面（recordcode=11000002002063），该内容实质是中国公安机关互联网站安全服务平台的备案登记
京网文〔2020〕6051-1195号
本条记录来自 360 安全报告栏目，标题为“京网文〔2020〕6051-1195号”，来源链接指向 360 官方网站的资质/许可证明页面（licence1.html），发布日期标注为 2026-09-11。从标题与 URL 性质判断，该页面