今日共收录 1979 条安全情报，包含 1214 个 CVE，387 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-101027
When `[migrations] ALLOWED_DOMAINS` was configured, a hostname matching the allow list was accepted without checking its
CVE-2026-9226
Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote a
CVE-2026-96890
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a repository
CVE-2026-86362
Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attac
CVE-2026-86361
Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnera
CVE-2026-83550
A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the u
CVE-2026-82162
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability
CVE-2026-71168
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory (
CVE-2026-70414
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low
CVE-2026-63697
Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privile
CVE-2026-56952
In platform_msg_handler_init of default_msg_handlers.c, there is a possible permission bypass due to a missing permissio
CVE-2026-56936
In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. This
CVE-2026-56906
In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalati
CVE-2026-55307
In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code.
CVE-2026-106513
MISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core application, the Ze
CVE-2026-106512
The CakeResponse::download() method in lib/Cake/Network/CakeResponse.php constructs a Content-Disposition header by dire
CVE-2026-106511
MultiversX's multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig
CVE-2026-106443
WeasyPrint helps web developers to create PDF documents. Prior to 70.0, the image-loading path in weasyprint/images.py p
CVE-2026-106442
Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.6 and 1.4.0.dev9, the instanti
CVE-2026-106441
Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9, Hydra passes Python