Multiple OS Command Injection vulnerabilities exist in the management interface and session...
CVE-2026-87682
Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Broca
2026-10-08 归档
今日共收录 832 条安全情报，包含 0 个 CVE，435 篇安全通告，以及 100 篇研究论文。
← 返回归档列表An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation...
CVE-2026-87681
An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabri
Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component...
CVE-2026-87683
Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS ver
The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage...
CVE-2026-82627
The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for Wor
When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the...
CVE-2026-87679
When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supp
The Aurora Heatmap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url...
CVE-2026-94154
The Aurora Heatmap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all vers
Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries...
CVE-2026-105816
Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the
Vault and Vault Enterprise did not consistently evaluate ACL policies against the canonical form...
CVE-2026-89322
Vault and Vault Enterprise did not consistently evaluate ACL policies against the canonical form of resource and policy
The LatePoint - Appointment Booking & Reservation plugin for WordPress is vulnerable to Insecure...
CVE-2026-17538
The LatePoint - Appointment Booking & Reservation plugin for WordPress is vulnerable to Insecure Direct Object Reference
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-97664
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal...
CVE-2026-105820
Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may all
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold...
CVE-2026-76275
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power"
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role...
CVE-2026-76279
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect c
In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform...
CVE-2026-76286
In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of a us
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role...
CVE-2026-76277
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edit_user cap
Protection Mechanism Failure. Splunk addressed multiple internally identified vulnerabilities in...
CVE-2026-76283
Protection Mechanism Failure. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versi
Improper Neutralization. Splunk addressed multiple internally identified vulnerabilities in...
CVE-2026-76284
Improper Neutralization. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 1
Improper Access Control. Splunk addressed multiple internally identified vulnerabilities in...
CVE-2026-76281
Improper Access Control. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 1
PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats
CVE-2026-61439
### Summary Injection Defense is a purpose-built prompt injection defense layer. It scans LLM inputs through six detecti
Ghost: Remote Code Execution via Bookmark Card Images
CVE-2026-105642
### Impact An image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user