共收录 1081 条相关情报。
← 返回所有主题CVE-2026-10845
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unauthorize
CVE-2026-12795
A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm
CVE-2026-12795
A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm
CVE-2026-12773
A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file lite
CVE-2026-12773
该漏洞影响 BerriAI litellm 至 1.59.8 版本，具体存在于 MCP Proxy 组件的 UserAPIKeyAuth 函数（位于 litellm/proxy/_experimental/mcp_server/auth/u
CVE-2026-56345
AVideo through 29.0 contains an authorization bypass vulnerability in the Meet plugin's uploadRecordedVideo.json.php end
CVE-2026-56345
AVideo 29.0及之前版本的Meet插件中存在一个授权绕过漏洞，位于 uploadRecordedVideo.json.php 端点。该漏洞源于端点从上传的文件名中提取目标用户ID（users_id）而未经任何验证。攻击者如果掌握了M
CVE-2026-56294
capacitor-native-biometric before 12.128.2 contains an authentication bypass vulnerability where the onAuthenticationSuc
CVE-2026-56294
capacitor-native-biometric before 12.128.2 contains an authentication bypass vulnerability where the onAuthenticationSuc
CVE-2026-56080
Capgo before 12.128.2 contains a flaw in the Enforce Password Policy feature: after a Super Admin enables the policy and
CVE-2026-56080
Capgo 12.128.2 之前版本中的“强制密码策略”功能存在缺陷。当超级管理员启用该策略并成功将密码更改为合规密码后，后端未能更新帐户的密码合规状态。因此，后端仍将帐户视为不合规，并不断强制要求更改密码，导致即使使用有效凭据进行身份验
CVE-2026-45480
Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-50559
Quarkus是一个用于构建云原生应用的Java框架。在版本3.37.0、3.36.3、3.33.2.1、3.33.3、3.27.4.1、3.27.5和3.20.6.2之前，Quarkus存在一个HTTP路径授权绕过漏洞。攻击者可以利用UR
CVE-2026-45480
Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-49872
Improper Authentication vulnerability in Apache APISIX. When the cas-auth plugin is used in a route, an attacker can po
CVE-2026-32174
Improper authentication in Azure Bot Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-32174
Improper authentication in Azure Bot Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-49454
Relyra is a strict-by-default SAML 2.0 Service Provider library for Elixir and Phoenix. Versions 1.0.0 and 1.1.0 accept
CVE-2026-11718
An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googl
CVE-2026-11717
An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googl