2026-09-24 归档

今日共收录 1600 条安全情报,包含 683 个 CVE,518 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-23 发布INFO

Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts.

CVE-2026-87900

Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges.

CVE-2026-87899

Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root pr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges.

CVE-2026-87898

OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the default-open GET /subscribe endpoint in network/api/websocket/routes.go accepts unauth...

CVE-2026-86065

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the default-open GET /subscribe e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the default-open GET /log WebSocket route configured in config/node/api.yaml and registere...

CVE-2026-86064

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the default-open GET /log WebSock

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A flaw was found in the Ansible Automation Platform automation controller. The external logging (rsyslog) configuration is generated by interpolating user-controlled settings — ...

CVE-2026-85475

A flaw was found in the Ansible Automation Platform automation controller. The external logging (rsyslog) configuration

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplie...

CVE-2026-84724

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend. The email backend passes the user-supplied SMTP...

CVE-2026-84721

A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A flaw was found in the Ansible Automation Platform automation-controller. The WorkflowJobNode.ancestor_artifacts database column, which stores the raw merged set_stats artifact...

CVE-2026-84720

A flaw was found in the Ansible Automation Platform automation-controller. The WorkflowJobNode.ancestor_artifacts databa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A flaw was found in the Ansible Automation Platform automation-controller. In the shipped production configuration, the Controller trusts the client-supplied X-Forwarded-For hea...

CVE-2026-84718

A flaw was found in the Ansible Automation Platform automation-controller. In the shipped production configuration, the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A flaw was found in the Ansible Automation Platform automation-controller. The unauthenticated Bitbucket Data Center webhook receiver skips HMAC signature verification for diagn...

CVE-2026-84717

A flaw was found in the Ansible Automation Platform automation-controller. The unauthenticated Bitbucket Data Center web

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A flaw was found in the automation-controller instance install-bundle endpoint. When a System Administrator downloads an execution/hop node's...

CVE-2026-84716

A flaw was found in the automation-controller instance install-bundle endpoint. When a System Administ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A flaw was found in the automation-controller input-validation guard sanitize_jinja(). The function uses two regular expressions to reject us...

CVE-2026-84714

A flaw was found in the automation-controller input-validation guard sanitize_jinja(). The function us

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A flaw was found in the automation-controller notification subsystem. Although NotificationTemplate.notification_ configuration is protected ...

CVE-2026-84713

A flaw was found in the automation-controller notification subsystem. Although NotificationTemplate.no

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A flaw was found in the automation-controller API. The unauthenticated health-check endpoint /api/v2/ping/ (ApiV2PingView, AllowAny) over-ser...

CVE-2026-84712

A flaw was found in the automation-controller API. The unauthenticated health-check endpoint /api/v2/p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A flaw was found in Ansible Automation Platform's automation-controller. The custom Credential Type environment-variable injector validates variable names against a deny-list (a...

CVE-2026-84706

A flaw was found in Ansible Automation Platform's automation-controller. The custom Credential Type environment-variable

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The setting that formats the log message emitted for API 4XX errors is an administrator-control...

CVE-2026-84691

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The setting that formats the log messa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The HTML view of job, ad hoc command, project update, and inventory update standard output esca...

CVE-2026-84683

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The HTML view of job, ad hoc command,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, indexer/common.go serializedDataForUpdateAccounts places the attacker-controlled acc.Name ...

CVE-2026-82409

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, indexer/common.go serializedDataF

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, core/kapp/validators/validators.go Register and the runtime validator update path accept a...

CVE-2026-82407

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, core/kapp/validators/validators.g

历史摘要 · 未重新核验 · NVD