今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-76578
A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which
CVE-2026-59562
Missing authentication for critical function vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0
CVE-2026-58663
An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: f
CVE-2026-94265
When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might erroneously
CVE-2026-87095
Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affec
CVE-2026-86249
On a brpc::Server that sets both ServerOptions.auth and ServerOptions.internal_port, the HTTP built-in service exemption
CVE-2026-42010
A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched
CVE-2026-108771
Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin. Impact most
CVE-2026-61738
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77,
CVE-2026-61730
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected depl
CVE-2026-61729
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76,
CVE-2026-61728
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected snap
CVE-2026-61707
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76,
CVE-2026-37171
A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one
CVE-2026-110447
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution
CVE-2026-98432
In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace
CVE-2026-94140
Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes St
CVE-2026-55486
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.0
CVE-2026-46652
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.0
CVE-2026-119706
InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remot