2026-10-14 归档

今日共收录 1875 条安全情报,包含 867 个 CVE,609 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-13 发布INFO

An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.

CVE-2026-109412

An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitiv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated request...

CVE-2026-106042

An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authent

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.1...

CVE-2026-102989

TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an authenticated administrator can set an arbitrary Git repos...

CVE-2026-55695

FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWT_SECRET_KEY, while verify_jwt_token() acce...

CVE-2026-53709

MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipula...

CVE-2026-109157

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument...

CVE-2026-109108

A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of...

CVE-2026-108929

A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSs

历史摘要 · 未重新核验 · NVD

安全公告2026-10-14 发布INFO

PLANET VDR-300NU ADSL Router - 未授权修改DNS

PLANET VDR-300NU ADSL Router - 未授权修改DNS

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-10-14 发布INFO

Acknowledgements

Acknowledgements

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-10-14 发布INFO

Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects...

CVE-2026-53564

Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects...

CVE-2026-53563

Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects...

CVE-2026-84419

Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: be

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects...

CVE-2026-84420

Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app fo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure Vulnerability

CVE-2026-85790

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Firefox browsers

Firefox browsers

历史摘要 · 未重新核验 · Mozilla Security Advisories

安全公告2026-10-14 发布INFO

Sign in to Cloud

Sign in to Cloud

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-10-14 发布INFO

Sign Up for Free Cloud Tier

Sign Up for Free Cloud Tier

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-10-14 发布INFO

iOS 26.4.2 and iPadOS 26.4.2

iOS 26.4.2 and iPadOS 26.4.2

历史摘要 · 未重新核验 · Apple Security Releases

安全公告2026-10-14 发布INFO

iOS 18.7.8 and iPadOS 18.7.8

iOS 18.7.8 and iPadOS 18.7.8

历史摘要 · 未重新核验 · Apple Security Releases