2026-10-23 归档

今日共收录 1236 条安全情报,包含 262 个 CVE,575 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-22 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have...

CVE-2026-112326

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-22 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unau...

CVE-2026-112212

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-22 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an un...

CVE-2026-105777

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-22 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public ...

CVE-2026-105711

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-22 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when an instance administrator locke...

CVE-2026-103515

GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across devices. An attacker who obtains an encr...

CVE-2026-89052

A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic k

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software...

CVE-2026-76530

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software...

CVE-2026-76529

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software...

CVE-2026-76528

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software...

CVE-2026-76527

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software...

CVE-2026-76526

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software...

CVE-2026-76408

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software...

CVE-2026-76407

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected Splunk SOAR instance could submit Basic authentication dat...

CVE-2026-76406

In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected S

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

In Splunk SOAR versions below 8.7.0, an authenticated user could change the Enterprise Security edition through the Representational State Transfer (REST) API and cause Splunk S...

CVE-2026-76308

In Splunk SOAR versions below 8.7.0, an authenticated user could change the Enterprise Security edition through the Repr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permission could use the Representational State Transfer (REST) API to infer authenti...

CVE-2026-76307

In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permission could use the Rep

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

In Splunk SOAR versions below 8.7.0, a user that has the "Observer" role could use query filters in the Representational State Transfer (REST) API to infer password hashes and a...

CVE-2026-76306

In Splunk SOAR versions below 8.7.0, a user that has the "Observer" role could use query filters in the Representational

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to view apps could download an archive of an installed app. This could expose...

CVE-2026-76305

In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to view apps could d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to edit Automation Brokers could download the Splunk SOAR Automation Broker D...

CVE-2026-76304

In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to edit Automation B

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could store attacker-controlled content that Splunk SOAR displays in app documenta...

CVE-2026-76303

In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could store attacker-cont

历史摘要 · 未重新核验 · NVD