今日共收录 2425 条安全情报，包含 1381 个 CVE，651 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-89207
A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776-HB6035 Web Interface (
CVE-2026-88263
XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve t
CVE-2026-86341
GitLab has remediated an issue in GitLab EE affecting all versions from 17.1 before 19.1.8, 19.2 before 19.2.6, and 19.3
CVE-2026-84408
QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in
CVE-2026-81326
QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the aff
CVE-2026-27564
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by
CVE-2026-27563
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by
CVE-2026-27562
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by send
CVE-2026-27561
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by send
CVE-2026-27560
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by send
CVE-2026-27559
A low-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sendi
CVE-2026-27558
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/aj
CVE-2026-27557
An unauthenticated remote attacker can exploit a path traversal vulnerability in the /index.php/view_uploaded_iodd_file
CVE-2026-27556
A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/save_iodd_param
CVE-2026-27555
A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/get_iodd_port_i
CVE-2026-27554
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/save_iodd_paramete
CVE-2026-27553
A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnostics_tab/ajax_diag_ta
CVE-2026-27552
A low-privileged remote attacker can exploit improper authorization in the /index.php/attached_devices_tab/do_upload end
CVE-2026-27551
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/parameterManage en
CVE-2026-27550
A low-privileged remote attacker can exploit a command injection vulnerability in the Field_Shadow_Password class using