2026-10-21 归档

今日共收录 2917 条安全情报，包含 2077 个 CVE，435 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-20 发布INFO

libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither the URL provided to libcurl nor t...

CVE-2026-94266

libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing credentia

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might erroneously retain and re-transmit the original host's HTTP Negotiate...

CVE-2026-94265

When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might erroneously

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within ...

CVE-2026-92391

A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

When invoked with `--remote-header-name` (`-J`), curl fails to preserve its documented anti-clobbering protection if an intermediate 103 Early Hints response precedes the final ...

CVE-2026-92390

When invoked with `--remote-header-name` (`-J`), curl fails to preserve its documented anti-clobbering protection if an

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchan...

CVE-2026-92389

libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting ope

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

When an FTP wildcard `LIST` operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback set to the internal listing parser and ...

CVE-2026-92388

When an FTP wildcard `LIST` operation fails, libcurl omits the restoration path meant for successful listings, leaving t

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

By permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its configured transfer timeout me...

CVE-2026-92387

By permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make `curl` write a record that exceeds its line-length parsing limit. Consequently,...

CVE-2026-92386

When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make `curl` write a record

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

When built with wolfSSL, curl can successfully validate a pinned public key hash against a key the TLS peer does not possess. During the TLS handshake, wolfSSL validates the con...

CVE-2026-87866

When built with wolfSSL, curl can successfully validate a pinned public key hash against a key the TLS peer does not pos

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated initial entry can cause host key validation to report a key mismatch as a missing key to the `CURLOP...

CVE-2026-87865

When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated initial entry can cause host key validation to

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Enabling `CURLOPT_CRLF` causes curl to advertise the raw input byte count in the `IMAP APPEND {N}` literal while transmitting line-ending expanded data. The server reads only $N...

CVE-2026-87864

Enabling `CURLOPT_CRLF` causes curl to advertise the raw input byte count in the `IMAP APPEND {N}` literal while transmi

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

An authenticated HTTPS origin can supply an HSTS `max-age` value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age value...

CVE-2026-87863

An authenticated HTTPS origin can supply an HSTS `max-age` value that the parser accepts, but time serialization later f

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Importing a `includeSubDomains` parent HSTS entry before a longer-lived child entry, silently drops the child. Consequently, when the parent expires, the child's valid HSTS poli...

CVE-2026-87862

Importing a `includeSubDomains` parent HSTS entry before a longer-lived child entry, silently drops the child. Consequen

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via Negotiate for a different origin, le...

CVE-2026-87861

When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previous

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a tran...

CVE-2026-86415

libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

An HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket) to the proxy itself, by answering the `CONNECT` tunnel req...

CVE-2026-86414

An HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket) t

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with push access to the...

CVE-2026-112407

Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10

历史摘要 · 未重新核验 · NVD

#cve #cwe-266

漏洞预警2026-10-20 发布INFO

markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a link reference definition whose label or title is never closed is O(n²) w...

CVE-2026-111758

markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a link reference d

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-407

漏洞预警2026-10-20 发布INFO

The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing.

CVE-2026-110322

The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferenci

历史摘要 · 未重新核验 · NVD

#cve #cwe-822

漏洞预警2026-10-20 发布INFO

The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had...

CVE-2026-109576

The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list ad

历史摘要 · 未重新核验 · NVD

#cve #cwe-787