2026-09-17 归档

今日共收录 2425 条安全情报,包含 1381 个 CVE,651 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-15 发布INFO

A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker with low privileges to access sensitive information beyond what is aut...

CVE-2026-76681

A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker with low priv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct server-side request forgery (SSRF) attac...

CVE-2026-76680

Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct denial-of-service attacks. Successful exploitation coul...

CVE-2026-76679

Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege authenticated remote attacker to escalate privileges. Successful ex...

CVE-2026-76678

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege authentica

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve ...

CVE-2026-76677

A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could all

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrar...

CVE-2026-76676

Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions that are affected are 17.0-26.7. Difficult to exploit vul...

CVE-2026-73965

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HeaderP.parse uses a case-sensitive substring test for the Transfer-Encoding value and dec...

CVE-2026-69205

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HeaderP.parse uses a case-sensiti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Incorrect privilege assignment in the admin user-management component of Webkul Bagisto 2.4.9 allows an authenticated backend user holding only the settings.users.edit permissio...

CVE-2026-79411

Incorrect privilege assignment in the admin user-management component of Webkul Bagisto 2.4.9 allows an authenticated ba

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s chunk decoder trims the chunk-size token and accepts leading plus or minus signs instead o...

CVE-2026-69216

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s chunk decoder trims the chunk-siz

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mechanisms due to incomplete recursive inspection of nested p...

CVE-2026-11918

IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mech

历史摘要 · 未重新核验 · NVD

安全公告2026-09-16 发布INFO

samples/damon/wsse: handle damon_start() failure

CVE-2026-90005

In the Linux kernel, the following vulnerability has been resolved: samples/damon/wsse: handle damon_start() failure P

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

mm/damon/core: handle region split failure in apply_min_nr_regions()

CVE-2026-90004

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: handle region split failure in apply

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

futex: Prevent rcuwait use-after-free during requeue PI

CVE-2026-90003

In the Linux kernel, the following vulnerability has been resolved: futex: Prevent rcuwait use-after-free during requeu

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

ftrace: Take trace_array reference before accessing its ftrace_ops

CVE-2026-90002

In the Linux kernel, the following vulnerability has been resolved: ftrace: Take trace_array reference before accessing

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

HID: bpf: serialize device reference release in struct_ops destroy path

CVE-2026-90001

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: serialize device reference release in str

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

HID: rmi: fix OOB access with undersized RMI reports

CVE-2026-90000

In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI report

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

HID: wacom: validate report length in wacom_intuos_pro2_bt_irq

CVE-2026-89999

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: validate report length in wacom_intuos_

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

dm: fix race when loading and unloading a table

CVE-2026-89998

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

dm: fix resume-vs-remove race

CVE-2026-89997

In the Linux kernel, the following vulnerability has been resolved: dm: fix resume-vs-remove race If the user issues t

历史摘要 · 未重新核验 · OSV.dev