今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表CVE-2026-98432
In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace
CVE-2026-61707
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76,
CVE-2026-61645
Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vul
CVE-2026-85165
n8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free identifiers in spread, computed
CVE-2026-82854
Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter. When an
CVE-2026-75913
CodeWhale versions >= 0.3.27 and = 0.3.27 and = 0.8.41 and < 0.8.64) contain an argument injection vulnerability in the
CVE-2026-6257
Vvveb CMS before 1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a mi
CVE-2026-65689
Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its datab
CVE-2026-61451
The Grav API plugin (grav-plugin-api) before 1.0.4 does not validate the origin of the client-supplied admin_base_url fi
CVE-2026-54390
JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerability that allows unauthenticate
CVE-2026-31158
SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbit
CVE-2026-107032
Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an e
CVE-2026-105215
ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the 'ext
CVE-2026-105209
ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability: when issuing passkey o
CVE-2026-105207
ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external identity providers
CVE-2026-72765
n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. An authenticated us
CVE-2026-62018
Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions.
CVE-2026-62008
Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions.
CVE-2026-62002
Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions.
CVE-2026-54859
Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.