共收录 2028 条相关情报。
← 返回所有主题CVE-2026-32995
Rocket.Chat 的 DDP 方法 autoTranslate.translateMessage 存在访问控制缺失漏洞。该漏洞影响多个版本分支：8.5.0 之前的 8.x 版本、8.4.2 之前的 8.4.x、8.3.4 之前的 8.
CVE-2026-9789
CVE-2026-9789 是一个影响 Acer NitroSense 软件（版本低于 3.01.3052）的本地权限提升（LPE）漏洞。漏洞源于 PSAdminAgent 服务，该服务创建了一个具有弱访问控制列表（ACL）的命名管道。任何
CVE-2026-46416
Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Micro
CVE-2026-47269
pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb's deny_remot
CVE-2026-1933
A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to miss
CVE-2026-48906
The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.
CVE-2026-49002
Access control failure means that an application does not effectively check user access permissions, so that unauthorize
CVE-2026-41704
AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on every re
CVE-2025-46307
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to acc
CVE-2025-43451
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be
CVE-2026-43945
**Pre-auth** RCE in FUXA via Logic Bypass Summary A Critical vulnerability chain exists in FUXA (v.1.3.0-2706) that al
CVE-2026-9604
A vulnerability was detected in JeecgBoot up to 3.9.1. This vulnerability affects unknown code of the component AiragMod
CVE-2025-46307
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to acc
CVE-2025-43451
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be
CVE-2026-9581
A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/co
CVE-2026-9580
A vulnerability was determined in JeecgBoot up to 3.9.1. The affected element is the function LoginController.selectDepa
CVE-2026-9579
A vulnerability was found in JeecgBoot up to 3.9.1. Impacted is the function user.getUsername of the file /sys/user/logi
CVE-2026-44730
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an
CVE-2026-9562
A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Th
CVE-2026-48904
An improper access check allows privelege escalation through the com_users group editing webservice endpoint.