共收录 1962 条相关情报。
← 返回所有主题CVE-2026-105145
A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function get_environ
CVE-2026-105098
该漏洞影响 Omega Solution 公司的 CoinEx Crypto 2025 产品。问题出在“支持工单 API”（Support Ticket API）组件中 /ticket/customer 这一接口的未知功能函数上：当攻击者对
CVE-2026-102795
Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0
CVE-2026-51916
TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in delete_user_knowledge in super
CVE-2026-102795
Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0
CVE-2026-51916
TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in delete_user_knowledge in super
CVE-2026-51899
In SuperAGI v0.0.14 and prior, controller endpoints (/api/agents/create, /api/agents/schedule, /api/agents/delete, /api/
CVE-2026-104914
MISP contains an improper access control vulnerability in its attribute search and paginated attribute view endpoints.
CVE-2026-104912
MISP contains an authorization flaw in its correlation handling during attribute searches. When a user performs an attri
CVE-2026-104637
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61
CVE-2026-13413
The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.20 does not correctly restrict access to the site while
CVE-2026-85004
The Popup Maker WordPress plugin through 1.4.5 does not perform a capability check on one of its account-connection act
CVE-2026-51895
Ragflow 0.24.0 and prior contains improper access control in update_metadata_setting (api/apps/kb_app.py). Depending on
CVE-2026-63045
Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through
CVE-2026-92958
## Summary NodeVM's builtin wildcard policy can allow sandboxed code to access `fs/promises` even when the embedder den
CVE-2026-92957
## Summary NodeVM normalizes `node:`-prefixed builtin specifiers during `require()` resolution, but it does not normali
CVE-2026-90972
The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers
CVE-2026-103541
A vulnerability was detected in formtools.org Form Tools up to 3.1.1. This issue affects the function Files::uploadFile
CVE-2026-103541
A vulnerability was detected in formtools.org Form Tools up to 3.1.1. This issue affects the function Files::uploadFile
CVE-2026-76142
Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy serv