ZITADEL: Unauthorized Token Privilege Escalation in OAuth2 Token Exchange
CVE-2026-56668
### Summary A vulnerability in ZITADEL’s OAuth2 Token Exchange endpoint allows an authenticated user or client to excha
2026-09-16 归档
今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Efficient Branch-and-Bound Testing and Verification of zkVMs
零知识虚拟机（zkVM）通过把虚拟机语义翻译成执行轨迹上的代数约束，使通用程序能够被可验证地执行。这些约束的正确性至关重要：一条错误的约束可能使系统处于欠约束（under-constrained）状态，从而接受伪造的证明；也可能因过约束（o
A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.request_finished/MoRIIOConnectorWorker.get_finished/MoRIIOWrapper...
CVE-2026-92220
vLLM 0.26.0 与 0.27.0 版本中被披露一处资源消耗型漏洞（CVE-2026-92220），CVSS 3.1 基础评分为 5.3，属中等严重性。问题位于 MoRIIO 确认处理（Acknowledgement Handler）
Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized management request or configuration val...
CVE-2026-86108
CVE-2026-86108 是 VeloCloud Edge（VMware/Broadcom 的 SD-WAN 边缘设备）管理与配置工作流中的一处输入校验不足（命令注入类）漏洞。根据 NVD 描述，通过受影响的管理与配置工作流提交的输入未
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 18.7.7 and iPadOS 18.7.7
iOS 26.4 and iPadOS 26.4
iOS 26.4 and iPadOS 26.4
Background Security Improvements for iOS, iPadOS, and macOS
Background Security Improvements for iOS, iPadOS, and macOS
iOS 16.7.15 and iPadOS 16.7.15
iOS 16.7.15 and iPadOS 16.7.15
iOS 15.8.7 and iPadOS 15.8.7
iOS 15.8.7 and iPadOS 15.8.7
iOS 26.3 and iPadOS 26.3
iOS 26.3 and iPadOS 26.3
iOS 18.7.5 and iPadOS 18.7.5
iOS 18.7.5 and iPadOS 18.7.5
Android Code Search
Android Code Search
Android Devices
Android Devices
Secure an Android device
Secure an Android device
Android 16 QPR2
Android 16 QPR2