共收录 2104 条相关情报。
← 返回所有主题CVE-2026-16140
OpenBMC's IPMI implementation, phosphor-net-ipmid, is vulnerable to a logic flaw where the authorization context of an e
CVE-2026-91998
Casdoor through 4.4.0 contains an authorization bypass vulnerability in the /api/mcp endpoint that allows attackers with
CVE-2026-57137
PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, createAgentLoop() in src/praisonai-ts/src/ai/agent-loop
CVE-2026-57136
PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, CommandValidator in src/praisonai-ts/src/cli/features/s
CVE-2026-57134
PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy() in src/praisonai-ts/src/mc
CVE-2026-57133
PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, the shell() helper exported from src/praisonai-ts/src/t
CVE-2026-52819
Kimai is an open-source time tracking application. Prior to 2.57.0, the GET /api/timesheets list endpoint accepts user a
CVE-2026-91851
Affected versions of MISP incorrectly filter dashboard templates that are restricted to a specific permission flag. Da
CVE-2026-91778
In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts on a w
CVE-2026-91181
Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 Fail to sanitize Team obje
CVE-2026-90820
A security vulnerability has been detected in a2aproject a2a-java 1.2.0. The impacted element is the function Authorizat
CVE-2026-84617
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iO
CVE-2026-84560
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS
CVE-2026-65404
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.
CVE-2026-65393
A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An ap
CVE-2026-43737
An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 a
CVE-2026-19816
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE (
CVE-2026-89267
starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchable_fields allowlist when configured as an emp
CVE-2026-89267
CVE-2026-89267 涉及 Python 生态中常用的 Starlette 后台管理框架扩展 starlette-admin。该框架允许开发者通过配置项 searchable_fields 声明哪些模型字段可以被前端搜索/过滤, 以
CVE-2026-90460
An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods (EC2 c