今日共收录 1127 条安全情报，包含 372 个 CVE，412 篇安全通告，以及 88 篇研究论文。
← 返回归档列表CVE-2026-108693
ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscrip
CVE-2026-108692
1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight ModuleFieldControll
CVE-2026-108691
mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to de
CVE-2026-108690
mall4j through 4.0 contains an information disclosure vulnerability that allows authenticated customers to read other sh
CVE-2026-108689
Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows authenticated users to write in
CVE-2026-108688
Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler t
CVE-2026-104841
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-108680
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send templa
CVE-2026-108679
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiCo
CVE-2026-108678
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiControl
CVE-2026-108677
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-pri
CVE-2026-108676
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController downLoadFiles ha
CVE-2026-108675
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController editIzTop handle
CVE-2026-108674
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OpenApiController queryById handler that a
CVE-2026-108673
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController exportXls handler t
CVE-2026-108672
JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of VideoGeneration
CVE-2026-108671
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP se
CVE-2026-108670
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment handler of AiragPromptsCo
CVE-2026-108668
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController deleteRecycleBin ha
CVE-2026-108667
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to