2026-10-07 归档

今日共收录 1979 条安全情报，包含 1214 个 CVE，387 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-06 发布INFO

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, the server fails to enforce a field-l...

CVE-2026-105855

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions befo

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-10-06 发布INFO

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a malformed multipart requ...

CVE-2026-105854

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary ve

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-1333

漏洞预警2026-10-06 发布INFO

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, token refresh responses an...

CVE-2026-105853

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary ve

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-10-06 发布INFO

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, querying a readable collection with a...

CVE-2026-105852

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions befo

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-06 发布INFO

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, the duplicate operation co...

CVE-2026-105851

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary ve

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-863

漏洞预警2026-10-06 发布INFO

Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.90.0 and canary versions before 4.0.0-canary.34, use of t...

CVE-2026-105850

Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.

历史摘要 · 未重新核验 · NVD

#cve #cwe-837

漏洞预警2026-10-06 发布INFO

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, users with ordinary read a...

CVE-2026-105849

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary ve

历史摘要 · 未重新核验 · NVD

#cve #cwe-201 #cwe-862

漏洞预警2026-10-06 发布INFO

Payload is a free and open source headless content management system. In @payloadcms/plugin-stripe versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenti...

CVE-2026-105848

Payload is a free and open source headless content management system. In @payloadcms/plugin-stripe versions before 3.90.

历史摘要 · 未重新核验 · NVD

#cve #cwe-749 #cwe-862

漏洞预警2026-10-06 发布INFO

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a user who can query a col...

CVE-2026-105847

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary ve

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-639

漏洞预警2026-10-06 发布INFO

Payload is a free and open source headless content management system. In versions from 3.40.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an attacker can craft a r...

CVE-2026-105846

Payload is a free and open source headless content management system. In versions from 3.40.0 before 3.88.0 and canary v

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-10-06 发布INFO

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the SDK's OA...

CVE-2026-104850

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.

历史摘要 · 未重新核验 · NVD

#cve #cwe-345 #cwe-522

漏洞预警2026-10-06 发布INFO

Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP ...

CVE-2025-71384

Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a /api/login username or password field. This ...

CVE-2025-71383

Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network)

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-06 发布INFO

Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could pot...

CVE-2026-76105

Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-330

漏洞预警2026-10-06 发布INFO

Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC servic...

CVE-2026-70411

Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-10-06 发布INFO

Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjace...

CVE-2026-67270

Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-10-06 发布INFO

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthentic...

CVE-2026-63691

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell C

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-06 发布INFO

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerst...

CVE-2026-63690

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vuln

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-10-06 发布INFO

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote acc...

CVE-2026-63689

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-10-06 发布INFO

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote acc...

CVE-2026-61411

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File

历史摘要 · 未重新核验 · NVD

#cve #cwe-532