2026-09-18 归档

今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-16 发布INFO

OpenSign through 2.41.3 fails to validate caller identity in the getDocument cloud function when one-time-password verification is disabled. Attackers can supply a document iden...

CVE-2026-92794

OpenSign through 2.41.3 fails to validate caller identity in the getDocument cloud function when one-time-password verif

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-16 发布INFO

GoAdmin through 1.2.26 fails to properly anchor the logout pattern when checking permissions, allowing authenticated users to bypass permission checks by appending a query param...

CVE-2026-92793

GoAdmin through 1.2.26 fails to properly anchor the logout pattern when checking permissions, allowing authenticated use

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-09-16 发布INFO

Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return a continue action that bypasses AI t...

CVE-2026-92790

Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper t

历史摘要 · 未重新核验 · NVD

#cve #cwe-703

漏洞预警2026-09-16 发布INFO

Graylog through 7.1.4 validates outbound URLs against an allowlist before making requests but fails to re-validate after following HTTP redirects. Attackers with lookup table or...

CVE-2026-92789

Graylog through 7.1.4 validates outbound URLs against an allowlist before making requests but fails to re-validate after

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-16 发布INFO

Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authenticated attackers can enumerate predicta...

CVE-2026-92788

Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-09-16 发布INFO

Angel through 3.3.0 deserializes untrusted setAlgoMetrics payload using Kryo without class registration or allowlist validation. Unauthenticated network attackers can instantiat...

CVE-2026-92785

Angel through 3.3.0 deserializes untrusted setAlgoMetrics payload using Kryo without class registration or allowlist val

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-09-16 发布INFO

@refinedev/inferencer through 7.0.0 fails to escape API field names when interpolating them into generated JSX source code. Attackers controlling the data provider can inject ma...

CVE-2026-92784

@refinedev/inferencer through 7.0.0 fails to escape API field names when interpolating them into generated JSX source co

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-16 发布INFO

Yeti through 2.11.0 fails to validate caller permissions in the DELETE /api/v2/rbac/{id} endpoint, allowing users with read access to delete access control relationships. Attack...

CVE-2026-92783

Yeti through 2.11.0 fails to validate caller permissions in the DELETE /api/v2/rbac/{id} endpoint, allowing users with r

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-16 发布INFO

KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated user to access protected functionality. Attackers can ca...

CVE-2026-92780

KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-16 发布INFO

Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set helper function that processes content block bindings withou...

CVE-2026-92779

Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set hel

历史摘要 · 未重新核验 · NVD

#cve #cwe-1321

漏洞预警2026-09-16 发布INFO

CMAK through 3.0.0.6 fails to apply the scheduled leader election feature toggle to HTML form routes, allowing attackers to bypass the feature gate. Attackers can access the for...

CVE-2026-92778

CMAK through 3.0.0.6 fails to apply the scheduled leader election feature toggle to HTML form routes, allowing attackers

历史摘要 · 未重新核验 · NVD

#cve #cwe-693

漏洞预警2026-09-16 发布INFO

Wiki.js through 2.5.314 omits page tags from authorization checks in multiple GraphQL resolvers, allowing tag-based access restrictions to be bypassed. Attackers can query the l...

CVE-2026-92774

Wiki.js through 2.5.314 omits page tags from authorization checks in multiple GraphQL resolvers, allowing tag-based acce

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-09-16 发布INFO

Trigger.dev before 4.6.0 fails to verify that an authenticated user controls a GitHub App installation before binding it to their organization. Attackers can claim another user'...

CVE-2026-92773

Trigger.dev before 4.6.0 fails to verify that an authenticated user controls a GitHub App installation before binding it

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-16 发布INFO

Leantime before 3.9.6 contains an authorization bypass vulnerability in the HTMX plugin install endpoint that lacks permission validation. Authenticated users with limited roles...

CVE-2026-92772

Leantime before 3.9.6 contains an authorization bypass vulnerability in the HTMX plugin install endpoint that lacks perm

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-16 发布INFO

ArcherySec through 2.0.6 fails to validate organization ownership in the WebScanVulnList endpoint, allowing authenticated users to read vulnerability findings from other organiz...

CVE-2026-92765

ArcherySec through 2.0.6 fails to validate organization ownership in the WebScanVulnList endpoint, allowing authenticate

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-09-16 发布INFO

Rundeck through 6.2.1 fails to properly authorize the importConfig and importNodesSources parameters in the project archive import endpoint. Attackers with only the import actio...

CVE-2026-92763

Rundeck through 6.2.1 fails to properly authorize the importConfig and importNodesSources parameters in the project arch

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-16 发布INFO

Shlink through 5.1.6 fails to enforce API key role restrictions when issuing Mercure subscription tokens, allowing restricted keys to subscribe to all topics. Attackers with aut...

CVE-2026-92760

Shlink through 5.1.6 fails to enforce API key role restrictions when issuing Mercure subscription tokens, allowing restr

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-09-16 发布INFO

SecObserve versions before 1.59.1 contain an information disclosure vulnerability in the ApiConfigurationSerializer that fails to strip the basic_auth_password field from API co...

CVE-2026-92759

SecObserve versions before 1.59.1 contain an information disclosure vulnerability in the ApiConfigurationSerializer that

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-09-16 发布INFO

PatrowlManager through 1.8.4 contains an improper access control vulnerability in the user listing API endpoint where the authorization decorator is commented out. Authenticated...

CVE-2026-92754

PatrowlManager through 1.8.4 contains an improper access control vulnerability in the user listing API endpoint where th

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-16 发布INFO

CMAK through 3.0.0.6 fails to install a cross-site request forgery filter, allowing attackers to perform state-changing actions on behalf of authenticated operators. Attackers c...

CVE-2026-92751

CMAK through 3.0.0.6 fails to install a cross-site request forgery filter, allowing attackers to perform state-changing

历史摘要 · 未重新核验 · NVD

#cve #cwe-352