2026-09-12 归档

今日共收录 1637 条安全情报，包含 801 个 CVE，449 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-11 发布INFO

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments are not properly ...

CVE-2026-87985

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using A

历史摘要 · 未重新核验 · NVD

#cve #cwe-184

漏洞预警2026-09-11 发布INFO

An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user app...

CVE-2026-87984

An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or over

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-11 发布INFO

An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using quoted absolute paths in allowlisted...

CVE-2026-87983

An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspac

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-11 发布INFO

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG.

CVE-2026-87020

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DI

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-09-11 发布INFO

Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the java_keystore_passwd parameter. An authenticated user with Puppet adminis...

CVE-2026-85979

Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the java_keystore_pa

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-78 #cwe-269

漏洞预警2026-09-11 发布INFO

The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication. An attacker with physical access to the device may leverage this weakness to gain pri...

CVE-2026-85083

The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication. An attacker with physical ac

历史摘要 · 未重新核验 · NVD

#cve #cwe-798

漏洞预警2026-09-11 发布INFO

NextGen Connect (Mirth Connect) versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through a Database Connector API, which could result in disclosur...

CVE-2026-82583

NextGen Connect (Mirth Connect) versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-09-11 发布INFO

When XML batch processing is turned on and the XPath option is selected, the raw batch input goes through a default XPath/JAXP setup with no entity restrictions, so XXE injectio...

CVE-2026-82578

When XML batch processing is turned on and the XPath option is selected, the raw batch input goes through a default XPat

历史摘要 · 未重新核验 · NVD

#cve #cwe-611

漏洞预警2026-09-11 发布INFO

The XSLT Transformer Step builds a bare TransformerFactory without the proper security options set, so XXE injection can allow data exfiltration and denial-of-service attacks.

CVE-2026-78224

The XSLT Transformer Step builds a bare TransformerFactory without the proper security options set, so XXE injection can

历史摘要 · 未重新核验 · NVD

#cve #cwe-611

漏洞预警2026-09-11 发布INFO

The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt password hashes for th...

CVE-2026-38058

The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURIT

历史摘要 · 未重新核验 · NVD

#cve #cwe-497

漏洞预警2026-09-11 发布INFO

A local privilege escalation vulnerability exists in the iDirect iQ200 VSAT terminal running firmware 23.0.1.0. The iQ200 is a rackmount satellite modem deployed across oil and ...

CVE-2026-38056

A local privilege escalation vulnerability exists in the iDirect iQ200 VSAT terminal running firmware 23.0.1.0. The iQ20

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-11 发布INFO

A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user with the view-clien...

CVE-2026-89298

A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management s

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-11 发布INFO

A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Aka...

CVE-2026-89212

A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restri

历史摘要 · 未重新核验 · NVD

#cve #cwe-611

漏洞预警2026-09-11 发布INFO

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via thenteraction betw...

CVE-2026-71641

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an att

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-11 发布INFO

Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket server does not validate the `Origin` header of incoming...

CVE-2026-71416

Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-1385

漏洞预警2026-09-11 发布INFO

NetBSD contains an information disclosure vulnerability in mm_open() within sys/dev/mm.c that allows unprivileged local users to obtain real kernel virtual addresses by opening ...

CVE-2026-57843

NetBSD contains an information disclosure vulnerability in mm_open() within sys/dev/mm.c that allows unprivileged local

历史摘要 · 未重新核验 · NVD

#cve #cwe-732

漏洞预警2026-09-11 发布INFO

NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32 compatibility layer due to a missing return statement before the c...

CVE-2026-57842

NetBSD contains a use-after-free and double-free vulnerability in msg_recv_copyin() within the COMPAT_NETBSD32 compatibi

历史摘要 · 未重新核验 · NVD

#cve #cwe-415 #cwe-416

漏洞预警2026-09-11 发布INFO

An information leakage vulnerability exists in the Endpoint DLP component (epdlpdrv.sys) of Netskope Client for Windows prior to version R141. An internal communication channel ...

CVE-2026-15710

An information leakage vulnerability exists in the Endpoint DLP component (epdlpdrv.sys) of Netskope Client for Windows

历史摘要 · 未重新核验 · NVD

#cve #cwe-908

漏洞预警2026-09-11 发布INFO

Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Arg...

CVE-2026-11765

Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Softw

历史摘要 · 未重新核验 · NVD

#cve #cwe-88

漏洞预警2026-09-11 发布INFO

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path co...

CVE-2026-89258

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not

历史摘要 · 未重新核验 · NVD

#cve #cwe-59