GitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13
CVE-2026-110264
On October 21, 2026, we released versions 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13 for GitLab Commun
2026-10-22 归档
今日共收录 1761 条安全情报，包含 937 个 CVE，415 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Ivanti Endpoint Manager Mobile代码注入漏洞
Ivanti Endpoint Manager Mobile代码注入漏洞
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in...
CVE-2026-114661
OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any
OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs
CVE-2026-62197
### Summary Browser CDP discovery could accept blocked WebSocket URLs. In affected versions, a lower-trust caller or co
Microsoft says October updates didn’t actually fix VPN issues
Microsoft says it mistakenly flagged a bug causing Always On VPN connection issues as fixed in the October 2026 Windows
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
RabbitMQ: JMS topic exchange erl_scan atom exhaustion
CVE-2026-67220
RabbitMQ: JMS topic exchange erl_scan atom exhaustion
CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: HIGH)
CVE-2026-109619 · CVE-2026-109618
CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Produ
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike Announces Continuous Identity for AI Agents
Stable Channel Update for ChromeOS / ChromeOS Flex
CVE-2026-106268 · CVE-2026-106233 · CVE-2026-106318 · CVE-2026-106235 · CVE-2026-106349 · CVE-2026-106204 · CVE-2026-106227 · CVE-2026-106266 · CVE-2026-106379 · CVE-2026-106358 · CVE-2026-106411 · CVE-2026-106211 · CVE-2026-106301 · CVE-2026-106244 · CVE-2026-106240 · CVE-2026-106347 · CVE-2026-106181 · CVE-2026-106200 · CVE-2026-106423 · CVE-2026-106346 · CVE-2026-106255 · CVE-2026-106269 · CVE-2026-106278 · CVE-2026-106184 · CVE-2026-106190 · CVE-2026-106257 · CVE-2026-106421 · CVE-2026-106329 · CVE-2026-106228 · CVE-2026-106234 · CVE-2026-106226 · CVE-2026-106393 · CVE-2026-106383 · CVE-2026-106248 · CVE-2026-106357
M-156, ChromeOS version 16836.19.0 (Browser version 156.0.8078.42) has rolled out to ChromeOS devices on the Stable chan
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
【EdgeOne】关于针对 PHP 核心远程代码执行漏洞的防护公告
【EdgeOne】关于针对 PHP 核心远程代码执行漏洞的防护公告
Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 function of the ioos binary, which passes the unsanitized f...
CVE-2026-113802
Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 fu
Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX...
CVE-2026-114636
Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTT
Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images
CVE-2026-112392
``` ============================================================================ NULL dereference in ImagingExpand via r
Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 20)
CVE-2026-0257
Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulner
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud