今日共收录 2425 条安全情报，包含 1381 个 CVE，651 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-86338
Ash field_policies are documented to protect against filter-based information disclosure: when a field the actor may not
CVE-2026-85501
Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. T
CVE-2026-82720
NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs
CVE-2026-82717
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memor
CVE-2026-82311
Apache Airflow FAB provider: resetting a user's password does not delete that user's existing database-backed sessions,
CVE-2026-81642
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial
CVE-2026-81634
In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap b
CVE-2026-80225
In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT readin
CVE-2026-78227
NLnet Labs Unbound 1.22.0 up to and including 1.26.1, has a use-after-free vulnerability when compiled for DNS-over-QUIC
CVE-2026-77955
In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones (zonemd-check: yes)
CVE-2026-77860
In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a dou
CVE-2026-73464
On affected platforms running Arista EOS with gRPC Network Management Interface (gNMI) enabled, a specially crafted requ
CVE-2026-73463
On affected platforms running Arista EOS, when multiple gRPC Network Security Interface (gNSI) transports are configured
CVE-2026-73461
On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated us
CVE-2026-73454
On affected platforms running Arista EOS with gRPC Network Security Interface (gNSI) Credentialz configured, a specially
CVE-2026-73445
On affected platforms running Arista EOS, an issue with the gRPC Network Security Interface (gNSI) Authz Rotate RPC may
CVE-2026-73439
On affected platforms running Arista EOS, if OpenConfig is configured and running a gNMI server on the system, and if gN
CVE-2026-2380
On affected platforms running Arista EOS with OpenConfig-related services (i.e., gNMI, gNSI, RESTCONF and NETCONF), sens
CVE-2026-92355
In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a pat
CVE-2026-92091
A flaw was found in jwcrypto. The JWK.import_key() function validates the key_ops JWK member for duplicate values using