共收录 2104 条相关情报。
← 返回所有主题CVE-2026-87090
Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an
CVE-2026-88044
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.70.
CVE-2026-88939
knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only ag
CVE-2026-88044
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.70.
CVE-2026-88940 · CVE-2026-88939
knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only ag
CVE-2026-88008
Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.26 until 2.11.57 and 3.7.13, Traefik forwards
CVE-2026-88007
Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypo
CVE-2026-88006
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.1, Open WebU
CVE-2026-88005
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.9.0, Open WebUI
CVE-2026-88008
Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.26 until 2.11.57 and 3.7.13, Traefik forwards
CVE-2026-88007
Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypo
CVE-2026-88006
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.1, Open WebU
CVE-2026-88005
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.9.0, Open WebUI
CVE-2026-88894
Snipe-IT's predefined kit checkout path does not enforce Full Multiple Company Support (FMCS) tenant isolation on the ch
CVE-2026-88884
Renovate is a dependency update automation tool. In versions before 44.3.1 (and Mend Renovate CE/EE images before 15.4.0
CVE-2026-88862
Capgo (capgo.app) backend through 12.242.4 does not validate parent-child delegation when processing the x-limited-key-i
CVE-2026-88860
Capgo fails to clean up channel permission overrides when a user's last organization role binding is deleted, leaving st
CVE-2026-88894
Snipe-IT's predefined kit checkout path does not enforce Full Multiple Company Support (FMCS) tenant isolation on the ch
CVE-2026-88884
Renovate is a dependency update automation tool. In versions before 44.3.1 (and Mend Renovate CE/EE images before 15.4.0
CVE-2026-87803
An authorization bypass vulnerability exists in the Countly Server DBViewer due to flawed sub-pipeline detection in the