共收录 92 条相关情报。
← 返回所有主题CVE-2026-63121
Kubewarden policies is a collection of WebAssembly policies for securing and governing Kubernetes clusters. For versions
CVE-2026-109411
An access control bypass flaw was identified in Samba's vfs_ceph_rgw module in it's openat() function. An authenticated
CVE-2026-116135
HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decod
CVE-2026-108313
Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.
CVE-2026-109841
### Impact undici's `fetch()` verifies Subresource Integrity (SRI) metadata by looking up the algorithm token in a lowe
CVE-2026-114132
## Impact With the default `router.options.sensitive: false`, Nuxt's page router resolves routes case-insensitively, so
CVE-2026-107832
### Impact Fastify lowercases header names in a `headers` schema before compilation, because Node.js stores request hea
CVE-2026-114132
Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.2, Nuxt resolves pages case-insensitively by d
CVE-2026-114132
Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.2, Nuxt resolves pages case-insensitively by d
CVE-2026-74041
Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector
CVE-2026-107832
fastify is a fast and low overhead web framework for Node.js. In versions 5.12.2 through 5.12.5, the routine that lowerc
CVE-2026-74041
Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector
CVE-2026-107832
fastify is a fast and low overhead web framework for Node.js. In versions 5.12.2 through 5.12.5, the routine that lowerc
CVE-2026-108721
Open Computer Use through 1.0.0 on macOS contains an improper case sensitivity handling vulnerability that allows local
CVE-2026-108721
Open Computer Use through 1.0.0 on macOS contains an improper case sensitivity handling vulnerability that allows local
CVE-2026-89322
Vault and Vault Enterprise did not consistently evaluate ACL policies against the canonical form of resource and policy
CVE-2026-106503
Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/pl
CVE-2026-106497
Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend pac
CVE-2026-102131
Kiteworks Email Protection Gateway rejected certain configuration settings, but its validation did not recognize every f
CVE-2026-86472
### Impact `fast-uri` folds the host to lowercase before it percent-decodes the host, so a percent-encoded uppercase un