共收录 89 条相关情报。
← 返回所有主题CVE-2026-84787
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Privilege Escalat
CVE-2026-77521
MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.5-lts, assistants with a tool, MCP tool, skil
CVE-2026-92574
A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious checkpointed container t
CVE-2026-54501
Browsertrix is a high-fidelity, browser-based crawling service for web archiving that can be self-hosted or used through
CVE-2026-55225
Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. I
CVE-2026-75092
A privilege escalation flaw was found in the scan_mysql actor of leapp-upgrade-el9toel10 (provided by leapp-repository).
CVE-2026-89259
Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS
CVE-2026-69464
CVE-2026-69464 是 Microsoft Office SharePoint 中存在的一处特权提升漏洞。根据 NVD 提供的元数据，该漏洞被描述为“以不必要的权限执行”，允许已获得授权的攻击者通过网络远程提升自身权限。CVSS
CVE-2026-69409
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose informati
CVE-2026-80238
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains
CVE-2026-72654
Execution with Unnecessary Privileges (CWE-250) in the Kibana machine learning feature can lead to information disclosur
CVE-2026-76018
Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engin
CVE-2026-70496
A flaw was found in search-v2-operator. The operator's ClusterRole has permissions equivalent to a cluster administrator
CVE-2026-24183
NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use imp
CVE-2026-71846
A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secr
CVE-2026-71846
A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secr
CVE-2026-72508
A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management (RHACM). This
CVE-2026-72508
A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management (RHACM). This
CVE-2026-17445
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper
CVE-2026-18669
IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to a privilege escalation as the result of a remote code execution vulnerabil