共收录 4228 条相关情报。
← 返回所有主题CVE-2026-46716
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to be
CVE-2026-50244
The Naxclow platform exposes a registration endpoint that accepts signed requests containing a batch prefix and an arbit
CVE-2026-50108
The Naxclow platform API that returns device relay registration details exposes a persistent credential without verifyin
CVE-2026-10715
Camaleon CMS 2.9.2 contains an improper authorization vulnerability in the administrator draft autosave endpoint. A low-
CVE-2026-45085
Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to be
CVE-2026-42851
Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.0, a program able to write bytes to a kitty term
CVE-2026-11607
### Problem Backend users with access to the Form Framework were able to use files not ending in `.form.yaml` as form de
CVE-2026-47349
### Problem Backend users with access to the Recycler module were able to restore soft-deleted records on pages or for t
CVE-2026-47343
### Problem Non-privileged backend users with file mount access were able to perform write operations (move, delete, ren
CVE-2026-49741
### Problem Backend users with write access to the `form_definition` database table were able to directly create, update
CVE-2026-47350
### Problem Backend users were able to move records to a different page without having edit permissions on the source pa
CVE-2026-47346
### Problem Backend users with file write permissions were able to upload form definition files with mixed-case extensio
CVE-2026-50244
The Naxclow platform exposes a registration endpoint that accepts signed requests containing a batch prefix and an arbit
CVE-2026-50108
The Naxclow platform API that returns device relay registration details exposes a persistent credential without verifyin
CVE-2026-10715
Camaleon CMS 2.9.2 contains an improper authorization vulnerability in the administrator draft autosave endpoint. A low-
CVE-2026-47352
### Problem Authenticated backend users were able to retrieve file metadata via several Backend API routes without prope
CVE-2026-47351
### Problem Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read p
CVE-2026-6689
Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Fail to enforce Permiss
CVE-2026-50084
The Aqara Cloud Production API (open-cn.aqara.com/v3.0/open/api) would authorize any valid developer token for access to
CVE-2026-50026
Frappe is a full-stack web application framework. Prior to versions 15.107.0 and 16.17.0, a lack of permission checks in