2026-09-17 归档

今日共收录 2425 条安全情报,包含 1381 个 CVE,651 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-16 发布INFO

On affected platforms running Arista EOS, an authenticated user with access to the gNMI (gRPC Network Management Interface) may receive incorrect authorization results, potentia...

CVE-2026-19640

On affected platforms running Arista EOS, an authenticated user with access to the gNMI (gRPC Network Management Interfa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validate_assertion_signature option is explicitly set to false. This option is enabled by defaul...

CVE-2026-14917

A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validate_assertion_signature option is

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

fastify is a fast and low-overhead web framework for Node.js. In versions before 5.12.5, when a route registers a response trailer via reply.trailer() and is served over HTTP/2,...

CVE-2026-92081

fastify is a fast and low-overhead web framework for Node.js. In versions before 5.12.5, when a route registers a respon

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes...

CVE-2026-89792

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: perf: Fix use-after-free when perf mmap() revival races with the last munmap() perf_mmap_close() drops rb->...

CVE-2026-89791

In the Linux kernel, the following vulnerability has been resolved: perf: Fix use-after-free when perf mmap() revival r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid divide by zero in rt6_multipath_rebalance rt6_multipath_rebalance() calculates the total eligib...

CVE-2026-89790

In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid divide by zero in rt6_multipath_rebalan

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free gtp_newlink()'s error path...

CVE-2026-89789

In the Linux kernel, the following vulnerability has been resolved: gtp: add synchronize_net() in gtp_newlink() error p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() For casefolded encrypted di...

CVE-2026-89787

In the Linux kernel, the following vulnerability has been resolved: ext4: check dir entry fits before reading the hash

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init ntfs_reparse_init() and ntfs_objid_ini...

CVE-2026-89785

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 rpcb_register_inet4() and rpcb_reg...

CVE-2026-89784

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpc_sockaddr2uaddr() return value in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject restart table growth beyond U16_MAX entries During $LogFile replay, log_replay() indexes t...

CVE-2026-89782

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject restart table growth beyond U16_MA

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read in read_log_rec_buf() read_log_rec_buf() copies a log record into a caller...

CVE-2026-89781

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read in read_log_rec_bu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: restore skb->dev on deaggregated frames rmnet_map_deaggregate() allocates each sub-fr...

CVE-2026-89780

In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: restore skb->dev on deaggrega

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: clear vdev->msi_perm after freeing it on init failure vfio_msi_cap_len() lazily allocates the per...

CVE-2026-89777

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: clear vdev->msi_perm after freeing it on

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes The VXLAN VNI filter entry policy declare...

CVE-2026-89776

In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: enforce exact length of GROUP/GRO

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: hold sk properly in sco_conn_ready sk deref in sco_conn_ready must be done either under con...

CVE-2026-89774

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: hold sk properly in sco_conn_ready

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

Use of Cache Containing Sensitive Information in ZenHive mpp allows a shared HTTP cache to store a paid response and serve it to clients that never paid. MPP.Plug.verify_creden...

CVE-2026-89186

Use of Cache Containing Sensitive Information in ZenHive mpp allows a shared HTTP cache to store a paid response and ser

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

Improper Validation of Unsafe Equivalence in Input in ZenHive mpp allows an unauthenticated remote client to pass the Tempo duplicate-submission gate twice with one signed trans...

CVE-2026-88255

Improper Validation of Unsafe Equivalence in Input in ZenHive mpp allows an unauthenticated remote client to pass the Te

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

Apache Airflow Akeyless provider: the Akeyless secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Dag author scoped to ...

CVE-2026-86465

Apache Airflow Akeyless provider: the Akeyless secrets backend's team-scope guard can be bypassed with a user-controlled

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

Apache Airflow FAB provider: changing a user's password through the Admin user-edit PATCH endpoint does not invalidate that user's existing database-backed sessions. An attacker...

CVE-2026-86462

Apache Airflow FAB provider: changing a user's password through the Admin user-edit PATCH endpoint does not invalidate t

历史摘要 · 未重新核验 · NVD