CVE-2026-48106 影响 Arc（一个开源的、SQL 原生时间序列数据库）的 Enterprise 集群复制功能。在版本 26.06.1 之前，位于 internal/cluster/replication/receiver.go 的复制接收器仅校验入站消息的线格式封装（长度、操作码），而未对 MsgReplicateSync 消息体本身进行任何应用层认证——既没有 HMAC、数字签名，也没有逐消息 nonce。虽然传输层通过 TLS/mTLS 提供了加密和双向身份认证，但一旦对端进入了集群网络，应用层消息仍可被篡改或重放，缺乏完整性保护和抗重放机制。攻击者如果能够访问集群网络，可能通过构造恶意的 MsgReplicateSync 消息干扰数据复制流程，导致集群状态不一致、数据污染或复制服务异常。该问题在版本 2026.06.1 中修复。官方同时提供了临时缓解措施：通过严格防火墙规则限制集群网络仅允许可信对端访问，审计复制日志中异常的 MsgReplicateSync 流量，以及在修复可用前禁用集群模式。此漏洞暂无 CVSS 评分和 EPSS 数据，也尚未被列入 KEV 目录或标记为在野利用。建议受影响的用户尽快升级到修复版本，并优先应用网络层缓解措施以降低风险。

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, and recompute the unkeyed FINGERPRINT while the original HMAC remains valid because it covers only the message prefix. Server-side parsing in src/server/ns_turn_se

Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pg_hba.conf rules, via initial direct TLS connection. Despite a pg_hba.conf that appears to require GSSAPI, the connection may exchange data over TLS encryption alone. If the TLS settings are more permissive than the GSS settings, the connection may continue with lesser protection

DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability.

An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection's internal state and released for garbage collection.

Dräger Infinity Acute Care System and Standalone Infinity M540 patient monitors running software versions VG4.1.1, VG4.0.3, and lower contain network message handling vulnerabilities that allow network-adjacent attackers to spoof or tamper with data and cause denial-of-service conditions. Attackers with access to an enabled Infinity network port or physical proximity to a wireless access point can