NetworkManager-l2tp Privilege Escalation via pppd Plugin Injection
CVE-2026-93337
NetworkManager-l2tp contains an improper input validation vulnerability that allows local users with VPN connection crea
2026-09-18 归档
今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。
← 返回归档列表MCP Documentation Server: Web UI API binds to all interfaces without authentication by default
CVE-2026-54504
MCP Documentation Server is a local-first document management and semantic search server for AI coding agents. From 1.13
batman-adv: bla: avoid CRC corruption due to parallel claim add
CVE-2026-93203
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid CRC corruption due to parall
Ivanti Endpoint Manager Mobile代码注入漏洞
该条目来自知道创宇 / Seebug 漏洞库（vuldb 编号 ssvid-99967），标题指向 Ivanti Endpoint Manager Mobile（EPMM，前身为 MobileIron Core）存在代码注入类漏洞。EPMM
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
Yokogawa YFGW410 gateway
Yokogawa YFGW410 gateway
Steeltoe: Header-forwarded client cert lacks proof of private-key possession
CVE-2026-81868
### Summary When Steeltoe's certificate-based authorization (`UseCertificateAuthorization`) is configured, the default
从一个辅助 API 看资源边界：CVE-2026-71486（vLLM）
CVE-2026-71486
先知社区于 2026-09-18 发布了一篇题为《从一个辅助 API 看资源边界：CVE-2026-71486（vLLM）》的研究文章。文章聚焦 vLLM——当前主流的大语言模型推理与服务框架，它对内对外提供 OpenAI 兼容的 HTTP
Malware bypasses browser checks to force install Chrome, Edge extensions
BleepingComputer 报道了一起自 2025 年年中以来持续活跃的银行木马攻击行动，其核心特征是使用一套名为 KREMLIN 的工具包，在受害者主机上强制安装恶意的 Chrome 与 Edge 浏览器扩展。这些扩展的主要目标是窃
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike 于 2026-09-18 发布官方博客，宣布推出面向 AI Agent 的持续身份能力（Continuous Identity for AI Agents）。从标题与厂商定位看，该能力旨在把 AI 代理这类非人类身份
Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari)
CVE-2026-47252
Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, authenticated users with INSERT or UPDATE access
Scoold: GET /api/posts/{id}/answers leaks private-space replies when personal API tokens are enabled
CVE-2026-54676
Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, users with personal API tokens can retrieve
Scoold: Authenticated user can post replies and comments to private-space questions without space membership
CVE-2026-54677
Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, authenticated users who are not members of
udf: Mark LVID buffer as uptodate before marking it dirty
CVE-2026-93140
In the Linux kernel, the following vulnerability has been resolved: udf: Mark LVID buffer as uptodate before marking it
cxl/mbox: Break poison list loop on an empty payload
CVE-2026-93097
In the Linux kernel, the following vulnerability has been resolved: cxl/mbox: Break poison list loop on an empty payloa
dmaengine: dw-edma: Serialize channel state checks
CVE-2026-93040
In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Serialize channel state checks
Obsidian Web MCP is a secure remote MCP server for Obsidian vaults. Prior to 0.2.0, /oauth/authorize issues an authorization code without a login, consent, or session check, and...
CVE-2026-54618
Obsidian Web MCP is a secure remote MCP server for Obsidian vaults. Prior to 0.2.0, /oauth/authorize issues an authoriza
Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, authenticated users with INSERT or UPDATE access to affected macOS virtual tables can execute operating-s...
CVE-2026-47252
Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, authenticated users with INSERT or UPDATE access