Check Point warns of hackers exploiting Security Gateway VPN RCE flaw
CVE-2026-85102
Check Point 已确认其 Security Gateway 产品的 VPN 证书处理功能中存在预认证远程代码执行漏洞，编号 CVE-2026-85102，并确认该漏洞已被真实攻击者在野利用。报道由 BleepingComputer
2026-09-25 归档
今日共收录 784 条安全情报，包含 0 个 CVE，390 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile（简称 EPMM，前身为 MobileIron Core）是一款企业级移动设备管理（MDM/UEM）平台，用于对企业内部的 iOS、Android 等移动终端进行统一注册、配置下发
Huawei Secoway USG firewall weak password
知道创宇 / Seebug 漏洞库收录了一条标题为「Huawei Secoway USG firewall weak password」的条目（ssvid-91373），指向华为 Secoway USG 系列防火墙存在弱口令（默认口令或口令
Yokogawa YFGW410 gateway
该条目来自知道创宇 / Seebug 漏洞库（ssvid-90296），标题为「Yokogawa YFGW410 gateway」，发布时间为 2026-09-25，未关联任何 CVE 编号，也未被标注严重等级（severity 为 unk
In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI)...
CVE-2026-97730
In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dash
The Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and...
CVE-2026-82585
The Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and RTSP connections. An at
@rsdoctor/rspack-plugin has Unauthenticated HTTP API that Exposes Project Source Code and Build Metadata
CVE-2026-61782
### Summary The default Rsdoctor report HTTP server started by `@rsdoctor/rspack-plugin` binds to all network interface
Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces
CVE-2026-56742
### Impact In Cilium clusters using [Gateway API](https://docs.cilium.io/en/stable/network/servicemesh/gateway-api/gate
从一个辅助 API 看资源边界：CVE-2026-71486（vLLM）
CVE-2026-71486
先知社区发布的技术研究文章《从一个辅助 API 看资源边界：CVE-2026-71486（vLLM）》，发布时间为 2026-09-25，讨论对象是主流开源大模型推理与服务框架 vLLM 中编号 CVE-2026-71486 的安全问题。文
Prior to 9/18/2026, the iSteamX mobile application's AWS policy could grant authenticated users...
CVE-2026-95699
Prior to 9/18/2026, the iSteamX mobile application's AWS policy could grant authenticated users access to wildcard MQTT
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CrowdStrike Announces Continuous Identity for AI Agents
本条情报来自 CrowdStrike 官方博客，标题为《CrowdStrike Announces Continuous Identity for AI Agents》，发布时间为 2026-09-25。需要注意的是，本次输入仅提供了标题、
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
多款Huawei路由器信息泄露漏洞
多款Huawei路由器信息泄露漏洞
MinIO through 7aac2a2 does not verify that every x-amz-* header present on a request also appears...
CVE-2026-97731
MinIO through 7aac2a2 does not verify that every x-amz-* header present on a request also appears in the client-supplied
Lemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for Perl allow a PKCE bypass for public...
CVE-2026-92289
Lemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for Perl allow a PKCE bypass for public Relying Parties in "PKC
The Botslab G980H dash camera firmware generates session identifiers using a small sequential...
CVE-2026-85496
The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a
Taskview Community before 1.56.0 contains a missing authentication vulnerability that allows...
CVE-2026-93354
Taskview Community before 1.56.0 contains a missing authentication vulnerability that allows unauthenticated attackers t
A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element...
CVE-2026-97320
A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element is the function AiKnowle