2026-10-07 归档

今日共收录 1979 条安全情报,包含 1214 个 CVE,387 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-10-06 发布INFO

Stable Channel Update for Desktop

CVE-2026-106308 · CVE-2026-106327 · CVE-2026-106214 · CVE-2026-106358 · CVE-2026-106366 · CVE-2026-106382 · CVE-2026-106426 · CVE-2026-106298 · CVE-2026-106332 · CVE-2026-106197 · CVE-2026-106419 · CVE-2026-102322 · CVE-2026-106293 · CVE-2026-106396 · CVE-2026-106347 · CVE-2026-106258 · CVE-2026-106215 · CVE-2026-106273 · CVE-2026-106364 · CVE-2026-106377 · CVE-2026-106202 · CVE-2026-106376 · CVE-2026-106323 · CVE-2026-106412 · CVE-2026-106239 · CVE-2026-106369 · CVE-2026-106245 · CVE-2026-106281 · CVE-2026-106203 · CVE-2026-106231 · CVE-2026-106243

The Stable channel has been updated to 155.0.8059.39/.40 for Windows and Mac and 155.0.8059.39 to Linux which will roll

历史摘要 · 未重新核验 · Google Chrome Releases

安全公告2026-10-07 发布INFO

Ivanti Endpoint Manager Mobile代码注入漏洞

Ivanti Endpoint Manager Mobile代码注入漏洞

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-10-07 发布INFO

Huawei Secoway USG firewall weak password

Huawei Secoway USG firewall weak password

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-10-07 发布INFO

Yokogawa YFGW410 gateway

Yokogawa YFGW410 gateway

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-10-07 发布INFO

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd...

CVE-2026-106589

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpected

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

Citrix NetScaler 内存泄漏(CVE-2025-5777)

CVE-2025-5777

Citrix NetScaler 内存泄漏(CVE-2025-5777)

历史摘要 · 未重新核验 · 知道创宇 / Seebug

威胁情报2026-10-07 发布INFO

CrowdStrike Announces Continuous Identity for AI Agents

CrowdStrike Announces Continuous Identity for AI Agents

历史摘要 · 未重新核验 · CrowdStrike

安全公告2026-10-06 发布INFO

RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers

CVE-2026-106122

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.

历史摘要 · 未重新核验 · OSV.dev

威胁情报2026-10-07 发布INFO

从一个辅助 API 看资源边界:CVE-2026-71486(vLLM)

CVE-2026-71486

从一个辅助 API 看资源边界:CVE-2026-71486(vLLM)

历史摘要 · 未重新核验 · 先知社区

安全公告2026-10-07 发布INFO

PLANET VDR-300NU ADSL Router - 未授权修改DNS

PLANET VDR-300NU ADSL Router - 未授权修改DNS

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-10-07 发布INFO

Acknowledgements

Acknowledgements

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-10-07 发布INFO

多款Huawei路由器信息泄露漏洞

多款Huawei路由器信息泄露漏洞

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-10-07 发布INFO

A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to...

CVE-2026-19386

A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code v

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote...

CVE-2026-16528

Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS...

CVE-2026-14911

Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a rem

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token...

CVE-2026-19396

A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE5

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

wolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob matches...

CVE-2026-16516

wolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob matches the algorithm negotiate

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group...

CVE-2026-84897

src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_M

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-06 发布INFO

MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server

CVE-2026-104850

### Summary In affected versions, the SDK's OAuth client let the MCP server decide which authorization server received t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

Firefox browsers

Firefox browsers

历史摘要 · 未重新核验 · Mozilla Security Advisories