wifi: mac80211: don't allow injecting frames wider than the chanctx
CVE-2026-98329
wifi: mac80211: don't allow injecting frames wider than the chanctx
2026-10-13 归档
今日共收录 1460 条安全情报，包含 709 个 CVE，466 篇安全通告，以及 13 篇研究论文。
← 返回归档列表GitLab Critical Patch Release: 19.4.2, 19.3.5, 19.2.8
CVE-2026-97229
On October 12, 2026, we released versions 19.4.2, 19.3.5, 19.2.8 for GitLab Community Edition (CE) and Enterprise Edi
obsidian-tc tokens can access arbitrary configured vaults
CVE-2026-77366
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, tool dispatch
obsidian-tc fail-open default ACL exposes Obsidian control-directory secrets
CVE-2026-77364
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, undefined read
obsidian-tc Streamable HTTP transport permits cross-origin loopback vault access
CVE-2026-77363
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable
psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parameters
CVE-2026-109448
Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters t
ZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsigned Login V2 Session Cookie
CVE-2026-109373
ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticat
ZITADEL 3.0.0 before 4.18.0 Unauthenticated Username Change via Login V1
CVE-2026-109371
ZITADEL 3.0.0 before 4.18.0 contains a missing authentication vulnerability in the hosted Login V1 UI, where the change-
Zebra before 6.4.0 Gossiped Block Drop via Forged Coinbase scriptSig Height
CVE-2026-109366
Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip download path that allo
Zebra before 6.4.0 Denial of Service via Same-Hash Forged Block Bodies
CVE-2026-109365
Zebra before 6.4.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated peers to forc
Zebra 2.3.0 before 6.4.0 Peer Ban Bypass via Exact-IP Keying
CVE-2026-109364
Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because
Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction
CVE-2026-109363
ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying a pre-NU6.3 consensus branch ID, but the
Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokens
CVE-2026-109362
Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep exec
MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nnUNetV2Runner postprocessing_file Path
CVE-2026-109361
MONAI 1.2.0 before 1.6.1 contains an insecure deserialization vulnerability in nnUNetV2Runner that unpickles the postpro
MONAI 0.4.0 before 1.6.1 RCE via SENet Pretrained Weights Over Plaintext HTTP
CVE-2026-109360
MONAI 0.4.0 before 1.6.1 contains a remote code execution vulnerability that allows on-path attackers to execute code by
Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Recovery
CVE-2026-109359
Contrast 1.8.0 before 1.24.1 contains an improper verification vulnerability in Coordinator peer recovery that fails to
LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header
CVE-2026-109357
LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because userna
LibreNMS before 26.9.0 Missing Authorization in Port Purge via PortsController
CVE-2026-109356
LibreNMS before 26.9.0 contains a missing authorization vulnerability in PortsController::purge that allows global-read
LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameter
CVE-2026-109354
LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsen_channel_common.inc.php that allows authenticated
LibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc.php
CVE-2026-109353
LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying