今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-63414
Shopify App is a Rails engine for building Shopify applications. From 22.1.0 until 23.0.3, `token-exchange` authenticate
CVE-2026-63378
TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language
CVE-2026-63339
IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authentica
CVE-2026-63338
IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authentica
CVE-2026-62298
mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, `OPEN TYPE` decoding can dereference an unallocated member pointe
CVE-2026-85893
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-76287
In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline capabilit
CVE-2026-76290
In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to
CVE-2026-61694
go-xrpl is a Go implementation of the XRP Ledger protocol. In versions through the June 18, 2026 revision identified by
CVE-2026-103299
The Payment Gateway WordPress plugin through 2.2.0 does not ensure a shared secret is configured before using it to aut
CVE-2026-62303
Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, `SegmentTreeNode::sanitizeResourc
CVE-2026-119703
xiaozhi-esp32-server through 0.9.8 contains an authentication bypass vulnerability in WebSocketServer._handle_auth that
CVE-2026-96894
The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Si
CVE-2026-94482
Next.js is a React framework for building full-stack web applications. From 13.0.0 until 15.5.28 and 16.4.1, crafted req
CVE-2026-115820
The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to generi
CVE-2026-114486
Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allow
CVE-2026-107039
Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 2026080
CVE-2026-105931
The Apache Pulsar broker exposes a transaction administration REST API under /admin/v3/transactions. When authentication
CVE-2026-96203
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-96199
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net