2026-09-16 归档

今日共收录 2620 条安全情报,包含 1789 个 CVE,446 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-15 发布INFO

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5....

CVE-2026-12354

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5....

CVE-2026-12150

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied requests.

CVE-2026-12101

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied input.

CVE-2026-11934

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data.

CVE-2026-11929

IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptograph

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

IBM Verify Identity Access is vulnerable to a buffer overflow attack.

CVE-2026-11928

IBM Verify Identity Access is vulnerable to a buffer overflow attack.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party services.

CVE-2026-11927

IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party service

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.

CVE-2026-11926

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

IBM Verify Identity Access containers may not apply management password change operations correctly.

CVE-2026-11921

IBM Verify Identity Access containers may not apply management password change operations correctly.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 008, and 24.0.0 through 24....

CVE-2026-11864

IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005, 24.0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5....

CVE-2026-11729

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5....

CVE-2026-11728

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service (DoS) or connection to an...

CVE-2025-66974

An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attacke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A security flaw has been discovered in Open5GS up to 2.7.7. Affected by this vulnerability is an unknown functionality of the file lib/pfcp/handler.c of the component PFCP Messa...

CVE-2026-91855

A security flaw has been discovered in Open5GS up to 2.7.7. Affected by this vulnerability is an unknown functionality o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc le...

CVE-2026-91854

A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

BookStack before 26.05.5 contains an authentication bypass vulnerability in its social login implementation that allows unauthenticated attackers to sign in as arbitrary users b...

CVE-2026-89022

BookStack before 26.05.5 contains an authentication bypass vulnerability in its social login implementation that allows

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In Concrete CMS below CMS 9.5.3, the save_control action in the Express entities forms dashboard controller did not validate the anti-CSRF token. By causing an authenticated adm...

CVE-2026-81897

In Concrete CMS below CMS 9.5.3, the save_control action in the Express entities forms dashboard controller did not vali

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Concrete CMS before 9.5.3 does not apply HTML entity encoding to user-defined Form block question labels when rendering them as column headers in the Dashboard Form Submissions ...

CVE-2026-81896

Concrete CMS before 9.5.3 does not apply HTML entity encoding to user-defined Form block question labels when rendering

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In Concrete CMS before 9.5.3, the Document Library block stored the file-set identifiers submitted through fsID[] without validating them as integers, and when the block was con...

CVE-2026-81895

In Concrete CMS before 9.5.3, the Document Library block stored the file-set identifiers submitted through fsID[] withou

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Concrete CMS 9.5.2 and below is vulnerable to stored DOM-based Cross-site Scripting (XSS) via the Gallery block's per-image Caption field because the bundled Magnific Popup ligh...

CVE-2026-81894

Concrete CMS 9.5.2 and below is vulnerable to stored DOM-based Cross-site Scripting (XSS) via the Gallery block's per-im

历史摘要 · 未重新核验 · NVD