共收录 1905 条相关情报。
← 返回所有主题CVE-2026-116340
A vulnerability was identified in iFlytek astron-agent up to 1.1.2. This impacts the function FileInfoV2Service.listKnow
CVE-2026-116186
OpenRemote core (openremote-manager) before 1.31.0 does not perform realm or gateway-descendant authorization on inbound
CVE-2026-116184
OpenRemote before 1.31.0 contains an authorization bypass vulnerability that allows realm admins to impersonate gateways
CVE-2026-116185
OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows authenticated users to read oth
CVE-2026-116183
phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerability that allows unauthenticated attackers
CVE-2026-116187
Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 --auth-proxy that allows a
CVE-2026-116187
Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 --auth-proxy that allows a
CVE-2026-116186
OpenRemote core (openremote-manager) before 1.31.0 does not perform realm or gateway-descendant authorization on inbound
CVE-2026-116185
OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows authenticated users to read oth
CVE-2026-116015
yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall trade module that all
CVE-2026-116018
ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authent
CVE-2026-116017
Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the manager-api DeviceCo
CVE-2026-116010
RosarioSIS before 12.9.1 contains a missing authorization vulnerability that allows authenticated teachers to write reco
CVE-2026-115994
BOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-beta could allow an attacker modify or delete targ
CVE-2026-115998
IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findings, proof-of-concept
CVE-2026-116018
ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authent
CVE-2026-116017
Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the manager-api DeviceCo
CVE-2026-116010
RosarioSIS before 12.9.1 contains a missing authorization vulnerability that allows authenticated teachers to write reco
CVE-2026-113489
The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the listing be
CVE-2026-93634
A cross-account authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to insert f