LLMGateway through 1.20.0 Blind SSRF via Video-Generation callback_url
CVE-2026-108719
LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reac
2026-10-12 归档
今日共收录 1168 条安全情报，包含 403 个 CVE，452 篇安全通告，以及 67 篇研究论文。
← 返回归档列表Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
Huawei Secoway USG firewall weak password
Huawei Secoway USG firewall weak password
Yokogawa YFGW410 gateway
Yokogawa YFGW410 gateway
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike Announces Continuous Identity for AI Agents
JeecgBoot through 3.9.5 Missing Authorization via /airag/app/queryById
CVE-2026-108878
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that
AmoyLab Unla through 0.10.0 OAuth2 Authentication Bypass via /authorize
CVE-2026-108865
AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obt
Predibase LoRAX through 0.12.1 API Token Exposure via Router Logs
CVE-2026-108858
Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied a
Hugging Face Text Embeddings Inference through 1.9.4 Cleartext API Key Logging
CVE-2026-108857
Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability that exposes the configu
Abilityai Trinity through 0.9.5 Missing Authorization in Telegram Binding Routes
CVE-2026-108756
Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram router that allows agent-
EdgeEver through 1.108.0 Missing Authorization via Memo-Template API Routes
CVE-2026-108727
EdgeEver through 1.108.0 contains a missing authorization vulnerability in the Hono API memo-template routes that allows
UnicomAI Wanwu before 0.6.3 IDOR via DELETE /v1/appspace/app
CVE-2026-108853
UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-pri
hyper-mcp through 0.8.3 Improper Signature Verification of OCI WebAssembly Plugins
CVE-2026-108699
hyper-mcp through 0.8.3 contains an improper signature verification vulnerability that allows attackers to load maliciou
CloudBeaver through 25.3.5 Missing Authorization via /api/sql-result-value Servlet
CVE-2026-108745
CloudBeaver through 25.3.5 contains a missing authorization vulnerability in WebSQLResultServlet that allows any web ses
CloudBeaver through 25.3.5 Missing Authorization via initConnection GraphQL Mutation
CVE-2026-108742
CloudBeaver through 25.3.5 contains a missing authorization vulnerability in the initConnection GraphQL mutation that le
Traccar 5.7 through 6.16.0 Login CSRF via OpenID Connect Callback
CVE-2026-108738
Traccar 5.7 through 6.16.0 contains a cross-site request forgery vulnerability that allows attackers to log victims into
A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web Mana...
CVE-2026-108804
A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fw
The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying instead on a credential that is identica...
CVE-2026-81649
The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API
Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.
CVE-2026-42716
Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.