2026-09-17 归档

今日共收录 2425 条安全情报,包含 1381 个 CVE,651 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-09-15 发布INFO

@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport

CVE-2026-61568

`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTT

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-15 发布INFO

Fireshare has unauthenticated SSRF via missing login_required on webhook test endpoints

CVE-2026-54544

Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbou

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-15 发布INFO

Concrete CMS before 9.5.3 is vulnerable to Stored XSS via SVG upload in "Reject" sanitization mode

CVE-2026-81927

Concrete CMS before 9.5.3 contained a stored cross-site scripting vulnerability in SVG file handling. When SVG processin

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-15 发布INFO

Concrete CMS 9.4.0 through 9.5.2 is vulnerable to Cross-site scripting in the location panel duplicate-path confirmation dialog

CVE-2026-81926

Concrete CMS 9.4.0 through 9.5.2 did not escape colliding page paths before rendering them in the location panel's dupli

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-16 发布INFO

OpenFGA: ListUsers returns a deliberately-excluded user when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that also grants that...

CVE-2026-61709

### Description In OpenFGA, the ListUsers API could incorrectly return a user who should have been excluded. ### Prec

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-16 发布INFO

djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tags

CVE-2026-61597

### Impact Many djust built-in component template tags (`djust.components.templatetags.*`) render a developer/user-suppl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-17 发布INFO

Firefox browsers

Firefox browsers

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-09-17 发布INFO

Sign in to Cloud

Sign in to Cloud

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-09-17 发布INFO

Sign Up for Free Cloud Tier

Sign Up for Free Cloud Tier

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-09-17 发布INFO

iOS 26.4.2 and iPadOS 26.4.2

iOS 26.4.2 and iPadOS 26.4.2

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-09-17 发布INFO

iOS 18.7.8 and iPadOS 18.7.8

iOS 18.7.8 and iPadOS 18.7.8

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-09-17 发布INFO

iOS 18.7.7 and iPadOS 18.7.7

iOS 18.7.7 and iPadOS 18.7.7

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-09-17 发布INFO

iOS 26.4 and iPadOS 26.4

iOS 26.4 and iPadOS 26.4

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-09-17 发布INFO

Background Security Improvements for iOS, iPadOS, and macOS

Background Security Improvements for iOS, iPadOS, and macOS

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-09-17 发布INFO

iOS 16.7.15 and iPadOS 16.7.15

iOS 16.7.15 and iPadOS 16.7.15

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-09-17 发布INFO

iOS 15.8.7 and iPadOS 15.8.7

iOS 15.8.7 and iPadOS 15.8.7

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-09-17 发布INFO

iOS 26.3 and iPadOS 26.3

iOS 26.3 and iPadOS 26.3

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-09-17 发布INFO

iOS 18.7.5 and iPadOS 18.7.5

iOS 18.7.5 and iPadOS 18.7.5

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-09-17 发布INFO

Android Code Search

Android Code Search

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-09-17 发布INFO

Android Devices

Android Devices

历史摘要 · 未重新核验 · Android Security Bulletin