共收录 2028 条相关情报。
← 返回所有主题CVE-2026-4026
A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 that could allow an authenticated user wit
CVE-2026-46461
Dell Server Hardware Manager, versions prior to 3.2.2, contains an Improper Access Control vulnerability. A low privileg
CVE-2026-47647
Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network.
CVE-2026-47647
Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network.
CVE-2026-46699
conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a
CVE-2026-53855
### Summary Shell positional parameters could weaken strict inline-eval checks. In affected versions, a command request
CVE-2026-48617
A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation. This
CVE-2026-48617
A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation. This
CVE-2026-54533
vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, malicious algorithms
CVE-2026-12529
A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1
CVE-2026-35067
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control vulnerability. A low privileged att
CVE-2026-35066
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control vulnerability. A low privileged att
CVE-2026-35162
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control vulnerability. A low privileged att
CVE-2026-54015
## Summary Open WebUI's prompt version-history endpoints authorize the `prompt_id` in the URL but then act on caller-su
CVE-2026-54012
## Summary Open WebUI lets a user who can create, update, or import workspace models store arbitrary `meta.knowledge` e
CVE-2026-28699
### Summary Gitea fails to enforce OAuth2 access token scopes when the token is submitted via HTTP Basic authentication
CVE-2026-54305
## Impact Three EE endpoints used by the Dynamic Credentials feature accepted any authenticated n8n session without perf
CVE-2026-52844
### Summary On Windows, Caddy `path` matchers treat `/private\secret.txt` as outside `/private/*`, but `file_server` la
CVE-2026-47261
Wasmtime is a runtime for WebAssembly. In versions prior to 24.0.9, 36.0.10, and 44.0.2, when a filesystem preopen is gi
CVE-2026-50892
Incorrect access control in the "Let's Encrypt" certificate download endpoint of Nginx Proxy Manager v2.14.0 allows auth