共收录 2104 条相关情报。
← 返回所有主题CVE-2026-92945
## Summary `isPathAllowedForModule` decides whether a resolved path belongs to an allowlisted external module using a r
CVE-2026-103758
Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP s
CVE-2026-103284
Ghost versions from 5.125.1 before 6.57.1 contain an information disclosure vulnerability in the Admin Feedback endpoint
CVE-2026-103273
Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can
CVE-2026-103271
Ghost versions from 4.0.0 before 6.63.0 contain a content API vulnerability that allows unauthenticated visitors to acce
CVE-2026-103266
Ghost versions 5.2.0 through versions prior to 6.62.0 allow a remote attacker, without authentication, to abuse the Stri
CVE-2026-103265
Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results e
CVE-2026-103259
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a session token leakage vulnerability in the Dynamic Credent
CVE-2026-103758
Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP s
CVE-2026-103284
Ghost versions from 5.125.1 before 6.57.1 contain an information disclosure vulnerability in the Admin Feedback endpoint
CVE-2026-103273
Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can
CVE-2026-103271
Ghost versions from 4.0.0 before 6.63.0 contain a content API vulnerability that allows unauthenticated visitors to acce
CVE-2026-103266
Ghost versions 5.2.0 through versions prior to 6.62.0 allow a remote attacker, without authentication, to abuse the Stri
CVE-2026-103265
Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results e
CVE-2026-103259
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a session token leakage vulnerability in the Dynamic Credent
CVE-2026-103488
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project
CVE-2026-82828
Hitachi Coding Software Suite contains an Incorrect Authorization vulnerability that allows an unprivileged user to perf
CVE-2026-78210
In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts in an
CVE-2026-102139
An authorization check in the large file exchange feature of Kiteworks Email Protection Gateway did not correctly establ
CVE-2026-102122
Kiteworks did not correctly enforce which roles a shared folder's manager was permitted to assign. In a default configur