今日共收录 1979 条安全情报，包含 1214 个 CVE，387 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-102167
On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network
CVE-2026-102165
On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send
CVE-2026-102164
On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the V
CVE-2026-102163
On affected Arista access points with Wireless Intrusion Prevention System (WIPS) active, an unauthenticated attacker wi
CVE-2026-102161
An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load
CVE-2026-102160
An operating system (OS) command injection vulnerability in CloudVision CUE backup management may allow an authenticated
CVE-2026-102158
Improper validation of selected CloudVision CUE application programming interface (API) request parameters may allow an
CVE-2026-102157
An insecure direct object reference (IDOR) vulnerability in a CloudVision CUE file-serving interface may allow an authen
CVE-2026-102156
Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticate
CVE-2026-102155
An XML External Entity (XXE) injection vulnerability in the WiFi-server Spectralight application allows any authenticate
CVE-2026-101158
A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload
CVE-2026-101157
A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to
CVE-2026-101156
A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store mali
CVE-2026-101154
An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the
CVE-2026-101153
On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. A
CVE-2026-101152
Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker to craft a
CVE-2026-101151
Insufficient validation of request in login flow could allow a remote, unauthenticated attacker to craft a URL that, whe
CVE-2026-101150
Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct re
CVE-2026-101149
Insufficient validation of OIDC SSO provider configuration could allow a user with specific high privileges to direct re
CVE-2026-101029
Gitea's repository migration and pull mirror egress checks could be bypassed with a hostname that returns multiple DNS a