共收录 2098 条相关情报。
← 返回所有主题CVE-2026-118650
Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, a globally mounted middleware.Static instance can interpret an en
CVE-2026-118685
ToolJet from 3.20.2-lts before 3.20.242-lts contains an authorization bypass in SignupDisableGuard, which treats the str
CVE-2026-118676
n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows member users to use c
CVE-2026-118675
n8n before 1.123.85, 2.43.5, and 2.44.1 contains a credential guard bypass vulnerability that allows editors of shared w
CVE-2026-118642
n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows authenticated members
CVE-2026-118640
n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability in Chat Hub that allows chat-only
CVE-2026-118264
Echo is a Go web framework. From 4.0.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware selects a raw tunnel from a clien
CVE-2026-100105
A user with permission to edit contact points but not their protected fields can change protected settings, such as a co
CVE-2026-111960
The Royal MCP WordPress plugin before 1.5.10 does not perform object-level or post-type authorisation checks in one of
CVE-2026-111032
The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly verify authorization against the targeted produc
CVE-2026-57200
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
CVE-2026-116684
### Summary In affected versions, the SDK's server-side bearer authentication had no way to check that a token was issue
CVE-2026-116679
### Impact When legacy mode is enabled and `session.implicit_hosting` is enabled, the legacy WebRTC data channel incorr
CVE-2026-116684
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.
CVE-2026-116684
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.
CVE-2026-116679
Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deploy
CVE-2026-108302
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-116679
Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deploy
CVE-2026-106077
A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on th
CVE-2026-105780
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code