共收录 4228 条相关情报。
← 返回所有主题CVE-2026-44770
该漏洞存在于 SAP Create Single Payment 组件中，由于未对已认证用户执行必要的授权检查，导致受限用户能够访问特定的实体集键，从而造成信息泄露。根据 CVSS 3.1 评分，该漏洞的严重性为 4.3（中等），攻击向量为
CVE-2026-52828
### Summary The `ExportController` web routes for creating and editing export templates are gated only by the class-lev
CVE-2026-62191
OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in message mutation handling th
CVE-2026-62186
OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI-compatible HTTP model override
CVE-2026-52825
### Summary Kimai contains an authenticated improper authorization vulnerability in Team-related assignment APIs. A Tea
CVE-2026-52822
### Summary Kimai 2.56.0 contains an authenticated authorization bypass in the timesheet `restart` and `duplicate` work
CVE-2026-52821
### Summary Kimai 2.56.0 contains an authenticated improper authorization vulnerability in the preset-project activity
CVE-2026-62328
该漏洞影响 9Router 版本 0.4.41 及更早版本，属于未授权信息泄露漏洞。攻击者无需任何认证即可通过向未受保护的 API 端点发送请求，来枚举分页的请求日志，并检索完整的 AI 对话历史，包括系统提示、用户消息、助理响应、工具调用
CVE-2026-62194
OpenClaw 是一款软件，其版本 2026.5.20 至 2026.6.9（不含）存在一个权限提升漏洞（CVE-2026-62194）。该漏洞位于插件安装命令中，由于对调用者信任级别检查不充分，且输入路径校验存在缺陷，低权限攻击者能够通
CVE-2026-62191
OpenClaw 版本 2026.6.6 至 2026.6.9 之前（不含 2026.6.9）存在一个授权绕过漏洞。该漏洞位于消息变更处理（message mutation handling）逻辑中，由于缺乏充分的授权检查，低信任度的调用者
CVE-2026-62186
OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI-compatible HTTP model override
CVE-2026-59801 · CVE-2026-62327 · CVE-2026-62328
9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerability that allows remote attack
CVE-2026-62194
OpenClaw versions 2026.5.20 before 2026.6.9 contain a privilege escalation vulnerability in plugin install commands that
CVE-2026-62191
OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in message mutation handling th
CVE-2026-62186
OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI-compatible HTTP model override
CVE-2026-58410
ChurchCRM is an open-source church management system. Prior to version 7.4.0, there was an authorization flaw in the fam
CVE-2026-58410
ChurchCRM is an open-source church management system. Prior to version 7.4.0, there was an authorization flaw in the fam
CVE-2026-58408
ChurchCRM is an open-source church management system. Prior to version 7.4.0, a low-privileged user can bypass the /admi
CVE-2026-58408
ChurchCRM is an open-source church management system. Prior to version 7.4.0, a low-privileged user can bypass the /admi
CVE-2026-9824
Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to check the manage_shared_channels per