2026-09-24 归档
今日共收录 1600 条安全情报,包含 683 个 CVE,518 篇安全通告,以及 100 篇研究论文。
← 返回归档列表 漏洞预警2026-09-22 发布INFO
CVE-2025-12767
IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to cause a denial of service using a specially crafted reg
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-96269
GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symb
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-96260
Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to enforce a request
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-96259
Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to apply the internal
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-95815
OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including persistent bearer keys to unified logs as pub
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-95814
Vaultwarden through 1.37.3 omits organization membership status validation from three cipher access-restriction queries,
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-95812
ClipBucket v5 before 5.5.3-#182 contains a reflected cross-site scripting vulnerability in the sort_link() helper functi
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-94450
Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an unauthenticated
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-91018
lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-88020
Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-77987
A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of GitHub Enterprise Server. Th
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-77912
A stored cross-site scripting (XSS) vulnerability was identified in GitHub Enterprise Server that allowed an authenticat
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-77426
Unleash is an open-source feature management platform. Prior to 8.0.3, the Unleash admin API contains five authorization
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-77425
Unleash is an open-source feature management platform. Prior to 8.0.3, POST /api/admin/projects/:projectId/features/:fea
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-76910
Unleash is an open-source feature management platform. Prior to 8.0.3, cloneFeatureToggle and POST /api/admin/projects/:
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-76909
Unleash is an open-source feature management platform. Prior to 8.0.3, the change-request approval email template at src
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-75101
An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user of
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-67615
openEQUELLA before 2026.1.0 contains an authenticated remote code execution vulnerability that allows any authenticated
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-62364
wlc is a Weblate command-line client using Weblate's REST API. Prior to 2.0.1, automatically discovered configuration fr
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-94574
A local cross-user code execution vulnerability exists in GNU wget (Windows builds from eternallybored.org) due to a har
历史摘要 · 未重新核验 · NVD