今日共收录 2425 条安全情报，包含 1381 个 CVE，651 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-86466
Apache Airflow FAB provider: the Authentik OAuth path in the FAB auth manager does not validate the issuer or audience c
CVE-2026-86443
Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an
CVE-2026-85628
Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application
CVE-2026-84501
An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a cra
CVE-2026-84439
When audit logging is enabled (zookeeper.audit.enable=true), an unauthenticated attacker can inject arbitrary fields int
CVE-2026-82310
Apache Airflow FAB provider: deactivating a user account does not stop tokens issued to that account before deactivation
CVE-2026-79993
The `deleteContainer` opcode (0x14/20) is processed without verifying the caller's ACL permissions, allowing any authent
CVE-2026-77190
On affected platforms running Arista EOS, an unauthenticated attacker who is network-adjacent to the switch and able to
CVE-2026-76187
Apache Airflow Keycloak provider: the unauthenticated token endpoint accepts a client-credentials grant for any confiden
CVE-2026-76186
Apache Airflow Keycloak provider: from Airflow 3.3 the Keycloak auth manager takes a user's identity from the signed Air
CVE-2026-76151
Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Gr
CVE-2026-73469
When specific platforms are using Arista EOS with a loose Unicast Reverse Path Forwarding (uRPF) configuration, certain
CVE-2026-73468
A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentia
CVE-2026-73455
On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, a specially crafte
CVE-2026-73440
On affected platforms running Arista EOS with Simple Network Management Protocol (SNMP) configured, SNMPv3 local or remo
CVE-2026-73438
On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, an unauthenticated
CVE-2026-73436
On affected platforms running Arista EOS with OSPFv2 and OSPFv2 segment routing configured, a specially crafted OSPFv2 p
CVE-2026-73435
On affected platforms running Arista EOS with Open Shortest Path First version 2 (OSPFv2) configured, a specially crafte
CVE-2026-59969
Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, z
CVE-2026-59739
Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check. An attacker can dis