ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Data Exposure vulnerability in the Firewall Analyzer syslog collector.

CVE-2026-76980

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Data Exposure vul

历史摘要 · 未重新核验 · NVD

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature.

CVE-2026-76979

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vu

历史摘要 · 未重新核验 · NVD

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Command Injection vulnerability in the Diagnose Settings feature.

CVE-2026-76978

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Command Injection

历史摘要 · 未重新核验 · NVD

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-priv...

CVE-2026-84791

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Con

历史摘要 · 未重新核验 · NVD

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-priv...

CVE-2026-84789

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Con

历史摘要 · 未重新核验 · NVD

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Privilege Escalation vulnerability that allowed an authenticated low-privi...

CVE-2026-84787

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Privilege Escalat

历史摘要 · 未重新核验 · NVD

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to an SQL Injection vulnerability in Rule Management Search Reports.

CVE-2026-14913

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to an SQL Injection vu

历史摘要 · 未重新核验 · NVD

The Reachy Mini Bluetooth service asks a connecting device for a PIN before it will accept commands. The check protects the session but not the caller, so an attacker in Bluetoo...

CVE-2026-96456

The Reachy Mini Bluetooth service asks a connecting device for a PIN before it will accept commands. The check protects

历史摘要 · 未重新核验 · NVD

The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachy_mini/daemon/app/routers/apps.py, has no authen...

CVE-2026-96455

The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in

历史摘要 · 未重新核验 · NVD

The Paymob for WooCommerce WordPress plugin before 4.1.14 does not perform a capability check on several admin AJAX actions that manage its payment-gateway configuration, allowi...

CVE-2026-87981

The Paymob for WooCommerce WordPress plugin before 4.1.14 does not perform a capability check on several admin AJAX acti

历史摘要 · 未重新核验 · NVD

The Better Payment WordPress plugin before 2.3.4 does not validate the submitted payment amount server-side against the merchant's configured fixed price before building the ga...

CVE-2026-77765

The Better Payment WordPress plugin before 2.3.4 does not validate the submitted payment amount server-side against the

历史摘要 · 未重新核验 · NVD

The jet-form-builder-stripe-gateway WordPress plugin before 1.1.0 does not sanitise and escape a payment token before using it in a SQL statement, allowing unauthenticated users...

CVE-2022-4997

The jet-form-builder-stripe-gateway WordPress plugin before 1.1.0 does not sanitise and escape a payment token before us

历史摘要 · 未重新核验 · NVD

Hackers start exploiting critical WordPress flaw for code execution

CVE-2026-87902

Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files

历史摘要 · 未重新核验 · BleepingComputer

Compatibility Test Suite (CTS)

本次输入指向 Android 官方文档站点中的“Compatibility Test Suite (CTS)”（兼容性测试套件）页面，来源标注为 Android Security Bulletin（发布于 2026-09-24），但正文与摘

历史摘要 · 未重新核验 · Android Security Bulletin

Compatibility Definition Document (CDD)

该条目来自 Android 官方安全公告源，标题为 "Compatibility Definition Document (CDD)"，指向 source.android.com 上的 Android 兼容性定义文档页面。CDD 是 And

历史摘要 · 未重新核验 · Android Security Bulletin

Tools, build, and related reference

本次情报输入为 Android 开源项目（AOSP）官方网站 source.android.com 上的一个文档页面「Tools, build, and related reference」，来源标注为 Android Security B

历史摘要 · 未重新核验 · Android Security Bulletin

Latest Compatibility Definition Document (CDD)

本条来自 Android 官方安全公告站点（source.android.com）的「Latest Compatibility Definition Document (CDD)」页面，发布时间为 2026-09-24。该页面并非漏洞公告，

历史摘要 · 未重新核验 · Android Security Bulletin

Latest security bulletins

该输入来自 Google 官方的 Android 安全公告（Android Security Bulletin）索引页「Latest security bulletins」，发布时间为 2026-09-24，来源为 source.andro

历史摘要 · 未重新核验 · Android Security Bulletin

update the software on your Mac

该条信息来自 Apple 官方支持站点（support.apple.com，文档编号 108382），标题为“更新 Mac 上的软件”，属于 Apple 安全发布（Apple Security Releases）渠道的一部分。此类页面是 A

历史摘要 · 未重新核验 · Apple Security Releases

update the software on your iPhone or iPad

本条目来自 Apple 官方安全发布渠道（Apple Security Releases），页面标题为“更新你的 iPhone 或 iPad 上的软件”，源地址为 support.apple.com/en-us/118575，发布时间标注为

历史摘要 · 未重新核验 · Apple Security Releases