今日共收录 1399 条安全情报，包含 504 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-92537
The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Insufficiently Protected Crede
CVE-2026-14157
Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute ar
CVE-2026-13313
An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP
CVE-2026-103530
A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src
CVE-2026-51867
agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally
CVE-2026-102146
An authenticated Email Protection Gateway administrator holding only limited, delegated permissions could write files wi
CVE-2026-102144
A resource exhaustion vulnerability in Kiteworks Email Protection Gateway allowed an unauthenticated remote attacker to
CVE-2026-102139
An authorization check in the large file exchange feature of Kiteworks Email Protection Gateway did not correctly establ
CVE-2026-102138
An authenticated administrator on a node with an optional, separately licensed gateway role enabled could supply a conne
CVE-2026-102135
On a Kiteworks Email Protection Gateway cluster with database replication enabled, a party trusted by the cluster could
CVE-2026-102134
Kiteworks Core did not apply its gateway-level API security controls to every request authenticated through the platform
CVE-2026-102131
Kiteworks Email Protection Gateway rejected certain configuration settings, but its validation did not recognize every f
CVE-2026-102130
Kiteworks Email Protection Gateway did not sufficiently validate the content of an uploaded backup, and allowed an admin
CVE-2026-102128
An identity-verification weakness in Kiteworks Email Protection Gateway allowed the gateway to act on the Kiteworks plat
CVE-2026-102127
An XML parser used by Kiteworks Email Protection Gateway did not restrict external entity references. Where an optional,
CVE-2026-102116
-A weakness could have allowed an authenticated Kiteworks Email Protection Gateway administrator to write a file outside
CVE-2026-102108
An authenticated administrator of Kiteworks Email Protection Gateway could submit a crafted serialized object to a clust
CVE-2026-102097
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Remote Code Execution. Kiteworks Email Protecti
CVE-2026-102094
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Unsafe Reflection and does not sufficiently res
CVE-2026-102089
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to a path traversal weakness in an administrative