2026-10-12 归档

今日共收录 1168 条安全情报，包含 403 个 CVE，452 篇安全通告，以及 67 篇研究论文。

漏洞预警2026-10-11 发布INFO

The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains the receive node that carried an accepted LL_PHY_UPDATE_IND so that...

CVE-2026-19740

The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains the receiv

历史摘要 · 未重新核验 · NVD

#cve #cwe-401 #cwe-459 #cwe-617 #cwe-772

漏洞预警2026-10-11 发布INFO

The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retains the received RX node while a Connection Update / Connection Para...

CVE-2026-19739

The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retains the rec

历史摘要 · 未重新核验 · NVD

#cve #cwe-401 #cwe-459 #cwe-617 #cwe-772

漏洞预警2026-10-11 发布INFO

The Bluetooth Link Layer Control Procedure (LLCP) implementation for Connected Isochronous Stream (CIS) creation retains an RX node (ctx->node_ref.rx, marked NODE_RX_TYPE_RETAIN...

CVE-2026-19738

The Bluetooth Link Layer Control Procedure (LLCP) implementation for Connected Isochronous Stream (CIS) creation retains

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-10-11 发布INFO

i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction only for I2S_DIR_BOTH. The I2S_DIR_RX and I2S_DIR_TX branches read dev_cfg->rx.data->confi...

CVE-2026-19737

i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction only for I2S_DIR_BOTH. The I2S_DI

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-10-11 发布INFO

The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c passed the caller's byte count straight to the vendor SDK routine TRNG_GetRandomData(). On i.MX RT5xx and...

CVE-2026-19736

The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c passed the caller's byte count straight to the v

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-11 发布INFO

The RFC 6528 initial-sequence-number implementation in subsys/net/ip/tcp.c derived every TCP ISN from SHA-256(unique_key || four-tuple) plus a uptime-derived offset, where uniqu...

CVE-2026-19735

The RFC 6528 initial-sequence-number implementation in subsys/net/ip/tcp.c derived every TCP ISN from SHA-256(unique_key

历史摘要 · 未重新核验 · NVD

#cve #cwe-330

漏洞预警2026-10-11 发布INFO

The user-mode syscall verifiers z_vrfy_fuel_gauge_get_props() and z_vrfy_fuel_gauge_set_props() in drivers/fuel_gauge/fuel_gauge_syscall_handlers.c declared two variable-length ...

CVE-2026-19669

The user-mode syscall verifiers z_vrfy_fuel_gauge_get_props() and z_vrfy_fuel_gauge_set_props() in drivers/fuel_gauge/fu

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-11 发布INFO

The Goodix GT9xx input driver in drivers/input/input_gt911.c reads the touch point count from the controller's status register and masks it with GT911_TOUCH_POINTS_MSK (0x0F), y...

CVE-2026-19576

The Goodix GT9xx input driver in drivers/input/input_gt911.c reads the touch point count from the controller's status re

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-11 发布INFO

The zbus proxy agent IPC backend in subsys/zbus/proxy_agent/zbus_proxy_agent_ipc.c logged the channel name of a rejected inter-domain frame with a plain %s conversion. The frame...

CVE-2026-18418

The zbus proxy agent IPC backend in subsys/zbus/proxy_agent/zbus_proxy_agent_ipc.c logged the channel name of a rejected

历史摘要 · 未重新核验 · NVD

#cve #cwe-125

漏洞预警2026-10-11 发布INFO

omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into ~/.local/state/omarchy/current/theme may include executab...

CVE-2026-108913

omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into

历史摘要 · 未重新核验 · NVD

#cve #cwe-829

漏洞预警2026-10-11 发布INFO

Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. Two of them include secrets the caller is no...

CVE-2026-107761

Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the c

历史摘要 · 未重新核验 · NVD

#cve #cwe-201 #cwe-213

漏洞预警2026-10-11 发布INFO

pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allows unauthenticated attackers to bypass API access checks ...

CVE-2026-108905

pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allo

历史摘要 · 未重新核验 · NVD

#cve #cwe-798

漏洞预警2026-10-11 发布INFO

pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member data because UserController:...

CVE-2026-108904

pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API client

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-10-11 发布INFO

pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chos...

CVE-2026-108903

pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated att

历史摘要 · 未重新核验 · NVD

#cve #cwe-807

漏洞预警2026-10-11 发布INFO

pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated members to delete a...

CVE-2026-108902

pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePho

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailByUserId handler that allows any authenticated user to read other us...

CVE-2026-108891

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailByUserId ha

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController exportXls handler that allows any authenticated user to export department r...

CVE-2026-108888

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController exportXls handler

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCommentController exportXls handler that allows any authenticated user to export all comments. L...

CVE-2026-108887

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCommentController exportXls handler tha

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController queryChildrenByUsername handler that allows any authenticated user to retrieve ot...

CVE-2026-108886

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController queryChildrenByUsername

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-11 发布INFO

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete handler that allows low-privileged authenticated users to delete messag...

CVE-2026-108885

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete handler that a

历史摘要 · 未重新核验 · NVD

#cve #cwe-862