2026-09-12 归档

今日共收录 1637 条安全情报,包含 801 个 CVE,449 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-09-12 发布INFO

MFSA 2026-66Security Vulnerabilities fixed in Firefox for iOS 152.4

MFSA 2026-66Security Vulnerabilities fixed in Firefox for iOS 152.4

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-09-12 发布INFO

iOS 26.6 and iPadOS 26.6

iOS 26.6 and iPadOS 26.6

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-09-12 发布INFO

MFSA 2026-73Security Vulnerabilities fixed in Firefox for Android 153.0.3

MFSA 2026-73Security Vulnerabilities fixed in Firefox for Android 153.0.3

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-09-12 发布INFO

iOS 26.6.1 and iPadOS 26.6.1

iOS 26.6.1 and iPadOS 26.6.1

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-09-12 发布INFO

iOS 18.7.10 and iPadOS 18.7.10

iOS 18.7.10 and iPadOS 18.7.10

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-09-12 发布INFO

MFSA 2026-81Security Vulnerabilities fixed in Firefox for iOS 155.0

MFSA 2026-81Security Vulnerabilities fixed in Firefox for iOS 155.0

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-09-12 发布INFO

【大模型服务平台 TokenHub】&【智能体开发平台 ADP】& 【云开发 CloudBase】 关于腾讯云 GLM-5、GLM-5-Turbo、GLM-5.1 模型下线及切换升级的通知

【大模型服务平台 TokenHub】&【智能体开发平台 ADP】& 【云开发 CloudBase】 关于腾讯云 GLM-5、GLM-5-Turbo、GLM-5.1 模型下线及切换升级的通知

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-09-12 发布INFO

MFSA 2026-89Security Vulnerabilities fixed in Firefox for iOS 155.1

MFSA 2026-89Security Vulnerabilities fixed in Firefox for iOS 155.1

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-09-12 发布INFO

APSB26-136: Security update available for Adobe Photoshop Mobile

APSB26-136: Security update available for Adobe Photoshop Mobile

历史摘要 · 未重新核验 · Adobe Security Bulletins

威胁情报2026-09-12 发布INFO

Firewall for AI

Firewall for AI

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-09-11 发布INFO

The Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-Serving LLM Access, (Fri, Sep 11th)

I identified an attacker using a semi-autonomous coding agent to run an offensive operation: finding poorly secured LLM

历史摘要 · 未重新核验 · SANS ISC

威胁情报2026-09-11 发布INFO

Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks

Anthropic on Thursday said it identified and disrupted industrial-scale illicit distillation attacks against Claude from

历史摘要 · 未重新核验 · The Hacker News

安全公告2026-09-12 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.8, 19.2...

CVE-2026-87719

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.8, 19.2 before 19.2.6, and 19.3

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-12 发布INFO

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing...

CVE-2026-90467

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESM

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-12 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19...

CVE-2026-85706

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 before 19.2.6, and 1

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-12 发布INFO

A file-upload handler redirects the authenticated client's browser to a URL taken directly from...

CVE-2026-90453

A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Refe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-12 发布INFO

A web interface reflects a portion of the request URL into a script context and a hyperlink...

CVE-2026-90443

A web interface reflects a portion of the request URL into a script context and a hyperlink attribute without adequate e

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-11 发布INFO

ZITADEL: Auto-linking by email: IdP-side email verification is not checked

CVE-2026-56666

### Summary A flaw in the external identity provider handler allows unauthorized account linking to occur under specifi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-11 发布INFO

yayson: Prototype pollution in Store/LegacyStore deserialization

CVE-2026-61534

# Summary `Store`/`LegacyStore` key internal lookup tables by the `type`, `id`, and relationship names from a JSON:API d

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-11 发布INFO

@Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft

CVE-2026-59148

## Summary Mockoon's admin API ([`commons-server/src/libs/server/admin-api.ts`](https://github.com/mockoon/mockoon/blob

历史摘要 · 未重新核验 · GitHub Advisory