安全日报 - 2026-10-23 - Cyber Security Daily Radar

安全公告2026-10-21 发布INFO

Race condition on shared HCI TX descriptor in the Infineon PSOC 6 BLESS Bluetooth driver can leak adjacent memory over the air

CVE-2026-78117

The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c stored the outgoing HCI packet

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-362

安全公告2026-10-21 发布INFO

LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects

CVE-2026-114493

LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that vali

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

安全公告2026-10-23 发布INFO

PLANET VDR-300NU ADSL Router - 未授权修改DNS

历史摘要 · 未重新核验 · 知道创宇 / Seebug

#knownsec #seebug #vulnerability

安全公告2026-10-23 发布INFO

Acknowledgements

历史摘要 · 未重新核验 · Android Security Bulletin

#android #mobile

安全公告2026-10-23 发布INFO

【EdgeOne】关于针对 PHP 核心远程代码执行漏洞的防护公告

历史摘要 · 未重新核验 · 腾讯云安全公告

#tencent #cloud #advisory

安全公告2026-10-23 发布INFO

【腾讯云 EdgeOne】关于中国大陆网络优化计费项名称变更的公告

历史摘要 · 未重新核验 · 腾讯云安全公告

#tencent #cloud #advisory

安全公告2026-10-23 发布INFO

Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute...

CVE-2026-96185

Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-121 #severity:high

安全公告2026-10-22 发布INFO

Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer...

CVE-2026-112332

Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a re

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-755 #severity:high

安全公告2026-10-22 发布INFO

Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive

CVE-2026-114132

## Impact With the default `router.options.sensitive: false`, Nuxt's page router resolves routes case-insensitively, so

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-178 #cwe-863 #severity:medium

安全公告2026-10-22 发布INFO

Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routes

CVE-2026-114131

### Summary Nuxt compared `routeRules` keys against the raw request path, without decoding percent-encoding, while the

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-436 #cwe-863 #severity:medium

安全公告2026-10-22 发布INFO

toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()

CVE-2026-114141

## Summary `toml.parse()` is vulnerable to a quadratic-complexity (O(n²)) denial-of-service via many array-of-tables (`

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-407 #severity:high

安全公告2026-10-23 发布INFO

Firefox browsers

历史摘要 · 未重新核验 · Mozilla Security Advisories

#mozilla #firefox #browser

安全公告2026-10-23 发布INFO

Sign in to Cloud

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

#oracle #database #java

安全公告2026-10-23 发布INFO

Sign Up for Free Cloud Tier

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

#oracle #database #java

安全公告2026-10-23 发布INFO