2026-09-16 归档

今日共收录 2620 条安全情报,包含 1789 个 CVE,446 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-14 发布INFO

A vulnerability was identified in GPAC 26.07.0. This affects the function gf_node_deactivate_ex of the file scenegraph/base_scenegraph.c of the component MP4Box. Such manipulati...

CVE-2026-90827

A vulnerability was identified in GPAC 26.07.0. This affects the function gf_node_deactivate_ex of the file scenegraph/b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gf_node_del of the file scenegraph/base_scenegraph.c of the component MP4Box. This manipul...

CVE-2026-90826

A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gf_node_del of the file scenegrap

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gf_node_unregister of the file scenegraph/base_scenegraph.c of the component MP4Box. Th...

CVE-2026-90825

A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gf_node_unregister of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

ZITADEL is an open source identity management platform. Prior to version 4.16.0, a bug in how ZITADEL updates permissions when multiple project roles are deleted at the same tim...

CVE-2026-76081

ZITADEL is an open source identity management platform. Prior to version 4.16.0, a bug in how ZITADEL updates permission

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

On affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured with dynamic authorization, a low-privileged attacker on an...

CVE-2026-73449

On affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured wi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

Concrete CMS 9.0.0 through 9.5.3 is vulnerable to stored XSS via the custom page alias name (customAliasName) because the Edit Alias dialog applied only trim() to the submitted ...

CVE-2026-18117

Concrete CMS 9.0.0 through 9.5.3 is vulnerable to stored XSS via the custom page alias name (customAliasName) because th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5....

CVE-2026-13265

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

IBM Cloud Pak for Business Automation could allow an authenticated user to cause a denial of service due to uncontrolled resource consumption.

CVE-2026-12759

IBM Cloud Pak for Business Automation could allow an authenticated user to cause a denial of service due to uncontrolled

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers.

CVE-2026-12758

IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could expl...

CVE-2026-12756

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) atta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

Missing Authentication for Critical Function (CWE-306) in the checkout session lookup handler (src/app/api/stripe/checkout_sessions/route.ts), exposed at GET /api/stripe/checkou...

CVE-2026-90896

Missing Authentication for Critical Function (CWE-306) in the checkout session lookup handler (src/app/api/stripe/checko

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A vulnerability has been found in GPAC 26.07.0. Affected is the function gf_sg_dom_event_bubble of the file src/scenegraph/dom_events.c of the component MP4Box. The manipulation...

CVE-2026-90824

A vulnerability has been found in GPAC 26.07.0. Affected is the function gf_sg_dom_event_bubble of the file src/scenegra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A security vulnerability has been detected in a2aproject a2a-java 1.2.0. The impacted element is the function AuthorizationRequestHandlerDecorator.onListTasks of the file server...

CVE-2026-90820

A security vulnerability has been detected in a2aproject a2a-java 1.2.0. The impacted element is the function Authorizat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A weakness has been identified in a2aproject a2a-java 1.2.0. The affected element is the function BasePushNotificationSender.dispatchNotification of the file server-common/src/m...

CVE-2026-90819

A weakness has been identified in a2aproject a2a-java 1.2.0. The affected element is the function BasePushNotificationSe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A security flaw has been discovered in netease-youdao LobsterAI 2026.6.15/2026.8.28/2026.9.3/2026.9.4. Impacted is the function OpenClawConfigSync.buildBrowserConfig of the file...

CVE-2026-90818

A security flaw has been discovered in netease-youdao LobsterAI 2026.6.15/2026.8.28/2026.9.3/2026.9.4. Impacted is the f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe ...

CVE-2026-86924

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain roo...

CVE-2026-86917

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure p...

CVE-2026-86911

This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app ma

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A permissions issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An application may be able to...

CVE-2026-86910

A permissions issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Gatekeeper checks.

CVE-2026-86909

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be a

历史摘要 · 未重新核验 · NVD