Linux 内核提权 CVE-2026-31431(copy-fail)
CVE-2026-31431
Linux 内核提权 CVE-2026-31431(copy-fail)
2026-09-27 归档
今日共收录 1038 条安全情报，包含 222 个 CVE，481 篇安全通告，以及 74 篇研究论文。
← 返回归档列表Alert for CVE-2026-35273
CVE-2026-35273
Alert for CVE-2026-35273
【安全通告】Linux Kernel vhost "Vghost" 本地权限提升漏洞风险通告（CVE-2026-74580）
CVE-2026-74580
【安全通告】Linux Kernel vhost "Vghost" 本地权限提升漏洞风险通告（CVE-2026-74580）
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
CVE-2026-65660
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft
Control the Harness, Control the Cost: Routing and Governing AI Coding Agents in the Enterprise
论文关注企业大规模部署 AI 编码智能体（coding agent）所带来的成本与治理问题。所谓 harness，指运行 AI 编码智能体的产品（如 Anthropic 的 Claude Code、OpenAI 的 Codex），企业通常不
Extracting CNNs in the Unknown-Architecture and Feedback-Agnostic Setting
该论文研究卷积神经网络（CNN）的密码分析式模型提取（cryptanalytic extraction），即在无法接触模型内部实现的前提下，仅通过黑盒查询反推网络结构与权重参数。此前的同类攻击普遍假设目标网络的架构已知，攻击目标仅限于恢复模
Poster: FedWM-Guard: Thwarting Imagination Poisoning in Federated World Model-based Autonomous Driving
该论文针对联邦学习（FL）驱动的世界模型自动驾驶（WM-AD）提出了一类新的完整性威胁，并给出首个针对性防御框架。背景是：联邦学习让多辆自动驾驶车辆可以在不上传原始私有数据的前提下协同训练世界模型，但代价是把模型聚合过程变成了一个安全攸关的
The Fly That Stopped: Mushroom-Body-Inspired Habituation as a Reward-Free Scheduling Prior for Autonomous Penetration Testing
该论文研究自主渗透测试（autonomous penetration testing）智能体在固定动作预算下反复选择相同工具、浪费预算的问题，提出一种受果蝇蘑菇体（mushroom body）新颖性处理机制启发的无奖励（reward-fre
MimicSat: A Reconfigurable Cyber-Physical Testbed For Small Satellite Systems and Cybersecurity Research
MimicSat 是一套面向小型卫星系统与网络安全研究的可重构网络-物理（cyber-physical）实验平台。论文指出，当前卫星安全研究面临一个共性难题：攻击、故障与防御响应带来的影响，究竟如何从单个子系统行为的变化，逐级传播并最终影响
zkSAS: Practical Zero-Knowledge Proofs for Verifiable Spectrum Access Management
该论文聚焦动态频谱接入（DSA）中频谱接入系统（SAS）长期存在的「可验证性」与「隐私保护」矛盾。现有集中式 SAS（如美国 CBRS 采用的多层频谱共享架构）由少数运营方掌握分配逻辑，频谱用户（PAL/GAA 用户以及既有 incumbe
Fast Frame Rate Estimation in Electromagnetic Side-Channel Attacks on Public Systems
本文研究的是电磁侧信道分析中的一个前置环节：目标系统显示帧刷新率的估计。在电磁侧信道攻击流程里，只有先确定显示器（或其它周期性数字电路）的帧刷新率，分析者才能定位出携带信息的"泄漏谐波频率"，后续的采集与解调才有意义，因此帧率估计是整个分析
capgo through 12.128.2 IDOR via PUT /app icon endpoint
CVE-2026-100626
capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /app/:appId endpoint that a
Froxlor before 2.3.12 Stored XSS via SSL certificate issuer
CVE-2026-100720
Froxlor 2.0.0 through 2.3.10 is vulnerable to stored cross-site scripting. When a customer (the lowest-privileged authen
Froxlor before 2.3.12 Credential Disclosure via DirProtections API
CVE-2026-100719
Froxlor versions before 2.3.12 contain a credential disclosure vulnerability in the DirProtections.listing API command t
Froxlor before 2.3.12 Authentication Bypass via EmailSender.add
CVE-2026-100718
Froxlor through 2.3.10 does not enforce the mail.allow_external_domains policy in the EmailSender.add API command. When
froxlor before 2.3.12 CRLF Injection via validateUrl userinfo
CVE-2026-100717
froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl rejects carriage return
Froxlor before 2.3.12 Privilege Escalation via Symlink
CVE-2026-100716
Froxlor is a server administration panel. In versions 2.3.10 and earlier, the customer data-export (DataDump) cron fails
Froxlor before 2.3.12 Arbitrary File Deletion via Symlink
CVE-2026-100715
Froxlor through 2.3.10 is vulnerable to arbitrary file deletion via symlink following in the FTP data deletion cron task
Froxlor before 2.3.12 Command Injection via letsencryptchallengepath
CVE-2026-100714
Froxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting: unlike sibling settings h
Froxlor before 2.3.12 Privilege Escalation via SSH Key Sync
CVE-2026-100713
Froxlor 2.3.10 and earlier contain a time-of-check time-of-use (TOCTOU) race condition in the SSH key synchronization cr