今日共收录 1460 条安全情报，包含 709 个 CVE，466 篇安全通告，以及 13 篇研究论文。
← 返回归档列表CVE-2026-89124
Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within
CVE-2026-89122
SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated a
CVE-2026-89121
SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on assoc
CVE-2026-89120
A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The se
CVE-2026-89118
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-criti
CVE-2026-89117
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The
CVE-2026-89116
The affected code used child_process.execSync with a shell string for generator installation and uninstallation. This al
CVE-2026-89113
SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database
CVE-2026-89112
The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization c
CVE-2026-89106
SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could
CVE-2026-89105
The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from uninte
CVE-2026-76976
Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize user-suppli
CVE-2026-76975
Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link
CVE-2026-76972
Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could s
CVE-2026-58249
SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an
CVE-2026-58242
SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker thro
CVE-2026-108945
A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue
CVE-2026-108944
A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by
CVE-2026-108943
A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.from_pretrained o
CVE-2026-108942
A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This