Cyber Security Daily Radar

2026-09-16 归档

今日共收录 2620 条安全情报，包含 1789 个 CVE，446 篇安全通告，以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-15 发布INFO

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, web_url_read in src/index.ts pas...

CVE-2026-58483

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through

历史摘要 · 未重新核验 · NVD

#cve#cwe-400
漏洞预警2026-09-15 发布INFO

MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.5, PathFilter in src/pathfilter.ts uses root-anchored deny-l...

CVE-2026-57442

MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.5,

历史摘要 · 未重新核验 · NVD

#cve#cwe-22#cwe-538
漏洞预警2026-09-15 发布INFO

MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.4, PathFilter in src/pathfilter.ts compiles restricted-direc...

CVE-2026-57441

MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.4,

历史摘要 · 未重新核验 · NVD

#cve#cwe-41#cwe-178
漏洞预警2026-09-15 发布INFO

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts negative fixed_amount discount values, persists them in sh_d...

CVE-2026-56831

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts neg

历史摘要 · 未重新核验 · NVD

#cve#cwe-20
漏洞预警2026-09-15 发布INFO

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, an earlier product sub-form hardening change left store() in packages/admin/src/Livewire/Components/Products/Form/M...

CVE-2026-56830

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, an earlier product sub-form hardening change left store()

历史摘要 · 未重新核验 · NVD

#cve#cwe-862
漏洞预警2026-09-15 发布INFO

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages/admin/src/Livewire/Components/Products/VariantStock.php exposes stockAction() without edit_product_variant...

CVE-2026-56829

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages/admin/src/Livewire/Components/Products/VariantSto

历史摘要 · 未重新核验 · NVD

#cve#cwe-862
漏洞预警2026-09-15 发布INFO

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, groupedBulkActions in packages/admin/src/Livewire/Pages/Attribute/Browse.php, packages/admin/src/Livewire/Pages/Tag...

CVE-2026-56827

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, groupedBulkActions in packages/admin/src/Livewire/Pages/At

历史摘要 · 未重新核验 · NVD

#cve#cwe-862
漏洞预警2026-09-15 发布INFO

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages/admin/src/Livewire/Components/Collection/CollectionProducts.php exposes Action::make('delete') and DeleteB...

CVE-2026-56825

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages/admin/src/Livewire/Components/Collection/Collecti

历史摘要 · 未重新核验 · NVD

#cve#cwe-862
漏洞预警2026-09-15 发布INFO

canto-saas-api is a PHP library for interacting with the Canto SaaS API. Prior to version 3.0.0, OAuth2Request::getQueryParams() places app_id, app_secret, refresh_token, and co...

CVE-2026-55375

canto-saas-api is a PHP library for interacting with the Canto SaaS API. Prior to version 3.0.0, OAuth2Request::getQuery

历史摘要 · 未重新核验 · NVD

#cve#cwe-209#cwe-598
漏洞预警2026-09-15 发布INFO

canto-saas-api is a PHP library for interacting with the Canto SaaS API. Prior to version 3.0.0, Request::buildRequestUrl() joins values returned by Request::getPathVariables() ...

CVE-2026-55374

canto-saas-api is a PHP library for interacting with the Canto SaaS API. Prior to version 3.0.0, Request::buildRequestUr

历史摘要 · 未重新核验 · NVD

#cve#cwe-74#cwe-918
漏洞预警2026-09-15 发布INFO

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, deploying only the Topic Ope...

CVE-2026-55226

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. I

历史摘要 · 未重新核验 · NVD

#cve#cwe-269#cwe-272
漏洞预警2026-09-15 发布INFO

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, an attacker who can create a...

CVE-2026-55225

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. I

历史摘要 · 未重新核验 · NVD

#cve#cwe-269#cwe-441
漏洞预警2026-09-15 发布INFO

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.2.0, the web_url_read URL policy in s...

CVE-2026-54689

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through

历史摘要 · 未重新核验 · NVD

#cve#cwe-200#cwe-918
漏洞预警2026-09-15 发布INFO

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.2.0, web_url_read passes a caller-sup...

CVE-2026-54688

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through

历史摘要 · 未重新核验 · NVD

#cve#cwe-918
漏洞预警2026-09-15 发布INFO

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, the upload_ad_image tool in meta_ads_mcp/core/ads.py passes...

CVE-2026-54549

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, th

历史摘要 · 未重新核验 · NVD

#cve#cwe-918
漏洞预警2026-09-15 发布INFO

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, AuthInjectionMiddleware in meta_ads_mcp/core/http_auth_inte...

CVE-2026-54547

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, Au

历史摘要 · 未重新核验 · NVD

#cve#cwe-287
漏洞预警2026-09-15 发布INFO

Sakai is a Collaboration and Learning Environment (CLE). From 23.0 until 23.5 and 25.3, the DELETE /api/users/{userId}/profile/image endpoint allows an authenticated user to del...

CVE-2026-54050

Sakai is a Collaboration and Learning Environment (CLE). From 23.0 until 23.5 and 25.3, the DELETE /api/users/{userId}/p

历史摘要 · 未重新核验 · NVD

#cve#cwe-639
漏洞预警2026-09-15 发布INFO

Bugsink is a self-hosted error tracking tool. Prior to version 2.2.2, Bugsink stores every set of custom tags supplied with an incoming event, allowing a caller with a valid pro...

CVE-2026-53954

Bugsink is a self-hosted error tracking tool. Prior to version 2.2.2, Bugsink stores every set of custom tags supplied w

历史摘要 · 未重新核验 · NVD

#cve#cwe-400
漏洞预警2026-09-15 发布INFO

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.27.0 until 0.53.1, the uprob...

CVE-2026-53941

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Li

历史摘要 · 未重新核验 · NVD

#cve#cwe-770
漏洞预警2026-09-15 发布INFO

Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Starting in version 0.1.6 and prior to version 0.2.4.4, a fail-open in the authenticatio...

CVE-2026-53459

Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Starting in version 0.1.6 and p

历史摘要 · 未重新核验 · NVD

#cve#cwe-636#cwe-755