Firewall for AI
Firewall for AI
2026-10-08 归档
今日共收录 832 条安全情报，包含 0 个 CVE，435 篇安全通告，以及 100 篇研究论文。
← 返回归档列表SonicWall warns of max severity SSRF flaw in SMA1000 gateways
SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series
FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credentia
The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record...
CVE-2026-105196
The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of it
The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability....
CVE-2026-107459
The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can
An authentication bypass vulnerability exists in the web management interface of Brocade Fabric...
CVE-2026-94585
An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2
A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS...
CVE-2026-87664
A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.
An OS command injection vulnerability exists in the account management subsystem of Brocade...
CVE-2026-87677
An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.
In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates...
CVE-2026-107450
In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates/graphql/src/mutation/smart_li
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary...
CVE-2026-17609
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all ver
A flaw was found in Katello where the Docker Tags repositories API does not properly enforce...
CVE-2026-107444
A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when l
The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a...
CVE-2026-92862
The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application t
Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA ...
CVE-2026-94578
Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Author
The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow...
CVE-2026-92861
The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an
An input validation and output encoding vulnerability exists in the web management interface of...
CVE-2026-87678
An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versio
The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs)...
CVE-2024-8122
The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor a
Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME...
CVE-2026-105818
Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when
Docling: Configured HTTP headers sent to every remote image host named by a document
CVE-2026-105742
### Summary `HTMLBackendOptions.headers` is documented for passing authentication headers (API keys, bearer tokens) whe
Docling has SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)
CVE-2026-105743
### Summary When remote fetching is enabled (`enable_remote_fetch=True`, together with `fetch_images=True` or HTML `ren
Sensitive-Topic Leakage Through LLM Routing Metadata: Measurement and Mitigation
LLM routers pick a cheap or expensive model per request by its content, and many gateways and some cloud platforms can l