2026-09-21 归档

今日共收录 815 条安全情报,包含 111 个 CVE,394 篇安全通告,以及 53 篇研究论文。

← 返回归档列表
安全公告2026-09-21 发布INFO

Ivanti Endpoint Manager Mobile代码注入漏洞

Ivanti Endpoint Manager Mobile(EPMM,原名 MobileIron)是一款企业级移动设备管理(MDM)平台,用于统一管理移动终端的安全策略、应用分发和配置。该公告标题指出 EPMM 存在代码注入漏洞,但未提供

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-09-21 发布INFO

Huawei Secoway USG firewall weak password

知道创宇/Seebug 漏洞库于 2026 年 9 月 21 日收录了一个关于华为 Secoway USG 防火墙的弱口令问题。该条目标题为“Huawei Secoway USG firewall weak password”,表明防火墙可

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-09-21 发布INFO

Yokogawa YFGW410 gateway

该条目来自知道创宇 Seebug 漏洞库(ssvid-90296),标题指向横河电机(Yokogawa)的 YFGW410。YFGW410 属于工业自动化场景中的现场无线管理网关(Field Wireless Management Gate

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-09-21 发布INFO

A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246. The affected...

CVE-2026-94101

A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246. The affected element is the function v

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-21 发布INFO

A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function...

CVE-2026-94100

A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wan_config_set_vlan of th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough...

CVE-2026-90817

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import proce

历史摘要 · 未重新核验 · GitHub Advisory

威胁情报2026-09-21 发布INFO

从一个辅助 API 看资源边界:CVE-2026-71486(vLLM)

CVE-2026-71486

先知社区于 2026-09-21 发布一篇针对 CVE-2026-71486 的研究文章,标题为《从一个辅助 API 看资源边界:CVE-2026-71486(vLLM)》。文章聚焦 vLLM——一个用于大模型高吞吐推理与在线服务、常见于

历史摘要 · 未重新核验 · 先知社区

漏洞预警2026-09-21 发布CRITICAL

A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246. The affected element is the function vlan_load_form_uci of the file /usr/bin/routerd. The manip...

CVE-2026-94101

NVD 披露 Netcore NBR200V2 固件版本 1.3.241127.071246 中存在一处缓冲区溢出漏洞(CVE-2026-94101)。问题位于设备 /usr/bin/routerd 可执行文件中的 vlan_load_fo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-21 发布CRITICAL

A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wan_config_set_vlan of the file /usr/bin/routerd of the component WAN VLAN Reconfi...

CVE-2026-94100

本条目披露的是 Netcore(磊科)NBR200V2 路由器固件版本 1.3.241127.071246 中的一个缓冲区溢出漏洞。问题位于设备内部 /usr/bin/routerd 二进制程序里负责 WAN VLAN 重配置(WAN VL

历史摘要 · 未重新核验 · NVD

安全公告2026-09-21 发布INFO

Citrix NetScaler 内存泄漏(CVE-2025-5777)

CVE-2025-5777

Citrix NetScaler 内存泄漏(CVE-2025-5777)

历史摘要 · 未重新核验 · 知道创宇 / Seebug

威胁情报2026-09-21 发布INFO

CrowdStrike Announces Continuous Identity for AI Agents

CrowdStrike 于 2026 年 9 月 21 日在官方博客发布题为《CrowdStrike Announces Continuous Identity for AI Agents》的产品公告,宣布推出面向 AI 智能体(AI Ag

历史摘要 · 未重新核验 · CrowdStrike

漏洞预警2026-09-20 发布INFO

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially ...

CVE-2026-90817

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import proce

历史摘要 · 未重新核验 · NVD

安全公告2026-09-21 发布INFO

PLANET VDR-300NU ADSL Router - 未授权修改DNS

PLANET VDR-300NU ADSL Router - 未授权修改DNS

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-09-21 发布INFO

Acknowledgements

Acknowledgements

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-09-21 发布INFO

多款Huawei路由器信息泄露漏洞

多款Huawei路由器信息泄露漏洞

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-09-20 发布INFO

Tencent BrowserSkill through 0.3.0 Origin Validation Error in Local WebSocket Daemon

CVE-2026-94111

Tencent BrowserSkill through 0.3.0 contains an authentication bypass vulnerability in the local daemon WebSocket origin

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-21 发布INFO

A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function...

CVE-2026-94110

A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function self_Tmp in the library

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the...

CVE-2026-94050

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfg_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402....

CVE-2026-94036

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element i

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-21 发布HIGH

A weakness has been identified in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. Affected is an unknown function of the file /send_order.cgi?parameter=l...

CVE-2026-94139

本漏洞影响成都飞鱼星科技(Chengdu Feiyuxing Technology)出品的飞鱼星路由器固件版本 B-MB5E202-210322-r11656。问题位于该设备 Web 管理组件中的 /send_order.cgi 接口,具体

历史摘要 · 未重新核验 · NVD