A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the...
CVE-2026-113744
A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewa
2026-10-21 归档
今日共收录 2917 条安全情报，包含 2077 个 CVE，435 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
CVE-2026-0257
Palo Alto Networks has disclosed that it's continuing to observe exploitation of a now-patched security flaw impacting
Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
Trigger.dev 4.5.0 before 4.6.0 contains an information disclosure vulnerability in the Dashboard...
CVE-2026-114070
Trigger.dev 4.5.0 before 4.6.0 contains an information disclosure vulnerability in the Dashboard Agent input proxy that
FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in...
CVE-2026-114041
FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a
Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader
The Russia-linked state-sponsored threat actor tracked as APT28 (aka BlueDelta, Fancy Bear, and Forest Blizzard) has bee
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike Announces Continuous Identity for AI Agents
tty: fix saved termios reset race
CVE-2026-98750
tty: fix saved termios reset race
wifi: mac80211: keep fallback association elements alive
CVE-2026-98704
wifi: mac80211: keep fallback association elements alive
Stable Channel Update for ChromeOS / ChromeOS Flex
CVE-2026-106228 · CVE-2026-106393 · CVE-2026-106204 · CVE-2026-106278 · CVE-2026-106226 · CVE-2026-106234 · CVE-2026-106240 · CVE-2026-106235 · CVE-2026-106423 · CVE-2026-106347 · CVE-2026-106318 · CVE-2026-106244 · CVE-2026-106211 · CVE-2026-106266 · CVE-2026-106181 · CVE-2026-106257 · CVE-2026-106200 · CVE-2026-106421 · CVE-2026-106329 · CVE-2026-106255 · CVE-2026-106383 · CVE-2026-106269 · CVE-2026-106268 · CVE-2026-106190 · CVE-2026-106233 · CVE-2026-106358 · CVE-2026-106349 · CVE-2026-106357 · CVE-2026-106346 · CVE-2026-106379 · CVE-2026-106411 · CVE-2026-106301 · CVE-2026-106184 · CVE-2026-106248 · CVE-2026-106227
M-156, ChromeOS version 16836.19.0 (Browser version 156.0.8078.42) has rolled out to ChromeOS devices on the Stable chan
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 1...
CVE-2026-91491
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). S
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 1...
CVE-2026-91490
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). S
Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A sp...
CVE-2026-9660
Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (ve
Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A sp...
CVE-2026-9659
Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (ve
@fastify/middie is the Express-style middleware engine for Fastify. In versions from 9.0.0 through 9.3.5, the use() function joined a path-scoped middleware's mount path to the ...
CVE-2026-112712
@fastify/middie is the Express-style middleware engine for Fastify. In versions from 9.0.0 through 9.3.5, the use() func
Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 function of the ioos binary, which passes the unsanitized f...
CVE-2026-113802
Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 fu
ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows...
CVE-2026-114056
ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify