Moving Target Defense in SDN-enabled EV Charging Network
Software-Defined Networking (SDN) is emerging as a promis- ing technology for EV Charging infrastructure (EVCI) since it
2026-10-12 归档
今日共收录 1168 条安全情报，包含 403 个 CVE，452 篇安全通告，以及 67 篇研究论文。
← 返回归档列表Organizational Context for the Enterprise Security Brain
Agents that investigate and decide on enterprise security reason over a machine-readable view of the environment: its as
From Public Posts to AI-Search Citations: Measuring the Fragility of AI Search
As more users ask AI systems for information, AI-search platforms are becoming a common gateway to web information. Unli
SoK: Privacy-Preserving Order Matching
Privacy-preserving order matching enables traders to discover and execute compatible orders while limiting disclosure of
Certifying Hidden Paths: Scalable Topology Assurance for QKD Networks
Large-scale Quantum Key Distribution (QKD) networks rely on trusted repeaters, making the security properties of the sel
A Zero-Knowledge Signature Framework for Efficient Post-Quantum Message Authentication in Cooperative Automated Driving
Connected and Automated Vehicles (CAV) rely on authenticated Vehicle-to-Everything (V2X) communications to exchange safe
Bluetooth LE Controller: retained RX node leak and reachable assertion in the PHY Update procedure
CVE-2026-19740
The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains the receiv
Use-after-free of an L2CAP CoC channel object in the Zephyr Bluetooth host: RX work item is not cancelled on channel teardown
CVE-2026-19935
The Bluetooth LE host queues received L2CAP connection-oriented channel (CoC) data for deferred processing through a str
NULL pointer dereference in the ESP32 I2S driver when triggering an unsupported direction
CVE-2026-19737
i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction only for I2S_DIR_BOTH. The I2S_DI
Out-of-bounds read when the zbus proxy agent IPC backend logs a rejected peer frame's channel name
CVE-2026-18418
The zbus proxy agent IPC backend in subsys/zbus/proxy_agent/zbus_proxy_agent_ipc.c logged the channel name of a rejected
Out-of-bounds write in the NXP MCUX TRNG entropy driver for non-word-multiple request lengths
CVE-2026-19736
The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c passed the caller's byte count straight to the v
Predictable TCP initial sequence numbers when the RFC 6528 secret key generation fails silently in the Zephyr TCP stack
CVE-2026-19735
The RFC 6528 initial-sequence-number implementation in subsys/net/ip/tcp.c derived every TCP ISN from SHA-256(unique_key
Stack out-of-bounds write in the Goodix GT911 touch controller driver from an unvalidated device-reported touch point count
CVE-2026-19576
The Goodix GT9xx input driver in drivers/input/input_gt911.c reads the touch point count from the controller's status re
CVE-2026-108913
CVE-2026-108913
omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into
pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Header
CVE-2026-108905
pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allo
pH7Builder before 18.5.0 Sensitive Data Exposure via Member API UserController
CVE-2026-108904
pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API client
pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID
CVE-2026-108903
pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated att
pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link
CVE-2026-108902
pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePho
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/getUserDetailByUserId
CVE-2026-108891
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailByUserId ha
JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/exportXls
CVE-2026-108888
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController exportXls handler