共收录 2028 条相关情报。
← 返回所有主题CVE-2026-20744
该漏洞影响充电站系统的WebSocket端点。由于缺乏适当的身份验证，任何能够访问该端点的攻击者均可建立连接，进而可能利用该通道执行未经授权的操作。CVSS 3.1评分为9.8（严重），表明攻击者无需身份验证即可远程利用该漏洞，且攻击复杂度
CVE-2026-55670
ZITADEL is an open source identity management platform. Prior to 4.15.1, ZITADEL's event store validation can retain the
CVE-2026-56335
Capgo before 12.128.2 contains an authorization bypass vulnerability where write-scoped API keys can directly mutate pro
CVE-2026-40452
Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB. Authorization bypass in /rest/v2/fastLas
CVE-2026-40009
Improper Privilege Management, Improper Access Control vulnerability in Apache IoTDB. Authenticated users can escalate t
CVE-2026-15329
A vulnerability was found in zhayujie CowAgent up to 2.1.0. This issue affects the function BrowserTool._do_navigate of
CVE-2026-15319
A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function IPAllowlist of the
CVE-2025-45422
Incorrect access control in Proximus b-box v8c.725A allows authenticated attackers to bypass normal restrictions and mak
CVE-2025-63579
Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The secu
CVE-2026-59720
Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, mock server creation in mock-server.service.t
CVE-2026-59720
Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, mock server creation in mock-server.service.t
CVE-2026-15188
A weakness has been identified in manjurulhoque django-job-portal up to dfa352f305bba44445ac5dc12e9b2a98c9dcd71f. Affect
CVE-2026-58525
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature
CVE-2026-58525
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature
CVE-2026-56217
Capgo before 12.128.2 contains a policy bypass vulnerability in app_versions update enforcement that allows app-scoped A
CVE-2026-56217
Capgo before 12.128.2 contains a policy bypass vulnerability in app_versions update enforcement that allows app-scoped A
CVE-2026-48956
An improper access check allows users to display a list of modules in the frontend.
CVE-2026-48957
An improper access check allows unauthorized users to access com_privacy datasets.
CVE-2026-48958
An improper access check allows unauthorized users to create custom fields via webservices endpoints.
CVE-2026-48955
An improper access check allows unauthorized users to access workflow stage and transition information.