FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory
CVE-2026-116682
## Summary File read paths resolve symbolic links with `filepath.EvalSymlinks` and then operate on the resolved target
2026-10-28 归档
今日共收录 2009 条安全情报，包含 1141 个 CVE，471 篇安全通告，以及 100 篇研究论文。
← 返回归档列表【安全通告】PHP "php2shell" 远程代码执行漏洞风险通告（CVE-2026-109618, CVE-2026-109619）
CVE-2026-109619 · CVE-2026-109618
【安全通告】PHP "php2shell" 远程代码执行漏洞风险通告（CVE-2026-109618, CVE-2026-109619）
Alert for CVE-2026-109618
CVE-2026-109618
Alert for CVE-2026-109618
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
Chromium CVE-2026-106419: Use after free in ANGLE
CVE-2026-106419
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-106405: Race condition in CustomTabs
CVE-2026-106405
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-106400: Clickjacking in Messages
CVE-2026-106400
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-106395: Uninitialized resource in Dawn
CVE-2026-106395
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-106380: UI misrepresentation in UI
CVE-2026-106380
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-106368: UI misrepresentation in UI
CVE-2026-106368
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-106366: Incomplete cleanup in CustomTabs
CVE-2026-106366
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-106337: UI misrepresentation in UI
CVE-2026-106337
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-106326: Confused deputy in UI
CVE-2026-106326
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-106320: Use of released resource in UI
CVE-2026-106320
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-106317: UI misrepresentation in FullScreen
CVE-2026-106317
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-106298: Use after free in Chrome Tabs
CVE-2026-106298
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-106296: Improper privilege management in UI
CVE-2026-106296
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-106290: Uninitialized resource in GPU
CVE-2026-106290
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-106223: Uninitialized resource in GPU
CVE-2026-106223
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Chromium CVE-2026-106221: Confused deputy in WebAPKs
CVE-2026-106221
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P