Cyber Security Daily Radar

2026-09-27 归档

今日共收录 1038 条安全情报，包含 222 个 CVE，481 篇安全通告，以及 74 篇研究论文。

← 返回归档列表
漏洞预警2026-09-26 发布INFO

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file viewresult.p...

CVE-2026-100739

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be.

历史摘要 · 未重新核验 · NVD

#cve#cwe-74#cwe-89
漏洞预警2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

CVE-2026-94408

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · NVD

#cve#cwe-400
漏洞预警2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130)

CVE-2026-94400

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130)

历史摘要 · 未重新核验 · NVD

#cve#cwe-400
漏洞预警2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

CVE-2026-94399

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · NVD

#cve#cwe-400
漏洞预警2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

CVE-2026-94398

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · NVD

#cve#cwe-400
漏洞预警2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

CVE-2026-94397

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · NVD

#cve#cwe-400
漏洞预警2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

CVE-2026-94396

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · NVD

#cve#cwe-400
漏洞预警2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).

CVE-2026-82300

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAP

历史摘要 · 未重新核验 · NVD

#cve#cwe-400
漏洞预警2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).

CVE-2026-82294

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAP

历史摘要 · 未重新核验 · NVD

#cve#cwe-400
漏洞预警2026-09-26 发布INFO

Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). An authenti...

CVE-2026-78582

Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configure

历史摘要 · 未重新核验 · NVD

#cve#cwe-862
漏洞预警2026-09-26 发布INFO

Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit a shared agent co...

CVE-2026-72668

Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent Builder can lead to privilege escalation.

历史摘要 · 未重新核验 · NVD

#cve#cwe-441
漏洞预警2026-09-26 发布INFO

Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Prop...

CVE-2026-72662

Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized disclosure, modification,

历史摘要 · 未重新核验 · NVD

#cve#cwe-639
漏洞预警2026-09-26 发布INFO

The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.6.0. This is due to the groups_joi...

CVE-2026-77203

The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions u

历史摘要 · 未重新核验 · NVD

#cve#cwe-269
漏洞预警2026-09-26 发布INFO

Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

CVE-2026-97163

Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

历史摘要 · 未重新核验 · NVD

#cve#cwe-22#cwe-284
漏洞预警2026-09-26 发布INFO

Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

CVE-2026-97162

Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

历史摘要 · 未重新核验 · NVD

#cve#cwe-89
漏洞预警2026-09-26 发布INFO

Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

CVE-2026-97161

Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.

历史摘要 · 未重新核验 · NVD

#cve#cwe-22#cwe-284
漏洞预警2026-09-26 发布INFO

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

CVE-2026-97160

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0

历史摘要 · 未重新核验 · NVD

#cve#cwe-94
漏洞预警2026-09-26 发布INFO

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIME parts of incoming emails wer...

CVE-2026-94132

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterpri

历史摘要 · 未重新核验 · NVD

#cve#cwe-434
漏洞预警2026-09-26 发布INFO

Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0 - A subscriber could store a path in a file-type custom f...

CVE-2026-94131

Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0

历史摘要 · 未重新核验 · NVD

#cve#cwe-89
漏洞预警2026-09-26 发布INFO

Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality and sorting...

CVE-2026-94130

Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injectio

历史摘要 · 未重新核验 · NVD

#cve#cwe-89