2026-09-16 归档

今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-15 发布INFO

netty-incubator-codec-ohttp implements Oblivious HTTP (OHTTP) gateway and client functionality using Netty. Prior to 0.0.23.Final, the OHTTP gateway decryption path in codec-oht...

CVE-2026-54251

netty-incubator-codec-ohttp implements Oblivious HTTP (OHTTP) gateway and client functionality using Netty. Prior to 0.0

历史摘要 · 未重新核验 · NVD

#cve #cwe-664

漏洞预警2026-09-15 发布INFO

OpenCost provides cost monitoring for Kubernetes workloads and cloud costs. Prior to 1.121.0, the POST /serviceKey endpoint in pkg/costmodel/router.go allows a network client to...

CVE-2026-44300

OpenCost provides cost monitoring for Kubernetes workloads and cloud costs. Prior to 1.121.0, the POST /serviceKey endpo

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-309

漏洞预警2026-09-15 发布INFO

IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mechanisms due to incomplete recursive inspection of nested p...

CVE-2026-11918

IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mech

历史摘要 · 未重新核验 · NVD

#cve #cwe-184

漏洞预警2026-09-15 发布INFO

A vulnerability has been found in TOTOLINK X5000R 9.1.0cu.2089_B20211224. The impacted element is the function exportOvpn of the file /cgi-bin/cstecgi.cgi?action=exportOvpn&type...

CVE-2026-91853

A vulnerability has been found in TOTOLINK X5000R 9.1.0cu.2089_B20211224. The impacted element is the function exportOvp

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-09-15 发布INFO

Fabric CA is a Certificate Authority for Hyperledger Fabric. Prior to 1.5.21, when fabric-ca is configured with an LDAP backend, Client.GetUser in lib/server/ldap/client.go inse...

CVE-2026-53658

Fabric CA is a Certificate Authority for Hyperledger Fabric. Prior to 1.5.21, when fabric-ca is configured with an LDAP

历史摘要 · 未重新核验 · NVD

#cve #cwe-90

漏洞预警2026-09-15 发布INFO

Vikunja before 2.6.0 fails to properly restrict access to the link-share hash field in single-share read endpoints, allowing read-only members to obtain the share's secret crede...

CVE-2026-91985

Vikunja before 2.6.0 fails to properly restrict access to the link-share hash field in single-share read endpoints, allo

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-15 发布INFO

FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function that allows remote attackers to cause denial of service. A maliciou...

CVE-2026-91960

FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function that allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-190

漏洞预警2026-09-15 发布INFO

FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rts_read_result function within the RPC gateway transport parser. Attackers can send a malicious BIND_ACK ...

CVE-2026-91959

FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rts_read_result function within the RPC gateway t

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-09-15 发布INFO

MCP Gateway allows easy and secure running and deployment of MCP servers. From 0.21.0 until 0.42.2, Docker MCP Gateway YAML-unmarshalled the attacker-controlled io.docker.server...

CVE-2026-55887

MCP Gateway allows easy and secure running and deployment of MCP servers. From 0.21.0 until 0.42.2, Docker MCP Gateway Y

历史摘要 · 未重新核验 · NVD

#cve #cwe-88

漏洞预警2026-09-15 发布INFO

ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers. Prior to 0.29.1, networking.IsPrivateIP in pkg/networking/utili...

CVE-2026-54450

ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers. Prior

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-15 发布INFO

The MotoPress Hotel Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Stripe Webhook event object 'id' in all versions up to, and including, 6.2....

CVE-2026-90650

The MotoPress Hotel Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Stripe Webhook eve

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-15 发布INFO

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. Prior to 0.22.19, tokenMiddleware in sr...

CVE-2026-49446

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-290

漏洞预警2026-09-15 发布INFO

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.4.4, manager/router/router.go registers GET /api/v1/oauth and GET /api/v1/oauth...

CVE-2026-49254

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.4.4, manager/router/ro

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-306

漏洞预警2026-09-15 发布INFO

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, is_global_address in src/pyload/core/utils/web/check.py relies on Python's global-a...

CVE-2026-48737

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, is_global_address in src/p

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-15 发布INFO

Nextflow is a DSL for data-driven computational pipelines. From 25.09.2-edge until 25.10.6 and 26.04.3, nextflow auth login writes Seqera Platform OIDC bearer tokens to ${NXF_HO...

CVE-2026-48722

Nextflow is a DSL for data-driven computational pipelines. From 25.09.2-edge until 25.10.6 and 26.04.3, nextflow auth lo

历史摘要 · 未重新核验 · NVD

#cve #cwe-276 #cwe-732

漏洞预警2026-09-15 发布INFO

Kimai is an open-source time tracking application. Prior to 2.59.0, the KIMAI_SESSION cookie issued after password verification but before TOTP completion is accepted by every /...

CVE-2026-52827

Kimai is an open-source time tracking application. Prior to 2.59.0, the KIMAI_SESSION cookie issued after password verif

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-09-15 发布INFO

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, MSISDNValidation in the MSISDN authentication module concatenates the request-supplied MSISDN ...

CVE-2026-46619

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, MSISDNValidation in the MSISDN authen

历史摘要 · 未重新核验 · NVD

#cve #cwe-90

漏洞预警2026-09-15 发布INFO

The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inclu...

CVE-2026-15758

The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Sensit

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-14 发布INFO

GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experiment endpoints. Atta...

CVE-2026-91198

GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by una

历史摘要 · 未重新核验 · NVD

#cve #cwe-201

漏洞预警2026-09-14 发布INFO

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, an HTTPRoute can use an exten...

CVE-2026-53718

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

历史摘要 · 未重新核验 · NVD

#cve #cwe-862