OpenClaw before 2026.5.12 contains an argument pattern validation bypass in the exec allowlist...
CVE-2026-53853
OpenClaw before 2026.5.12 contains an argument pattern validation bypass in the exec allowlist that allows attackers to
#severity:high
共收录 5509 条相关情报。
← 返回所有主题OpenClaw before 2026.4.2 contains an inline-eval bypass vulnerability allowing authenticated...
CVE-2026-53855
OpenClaw before 2026.4.2 contains an inline-eval bypass vulnerability allowing authenticated operators to weaken strict
OpenClaw before 2026.5.7 contains a privilege escalation vulnerability where the allowFrom...
CVE-2026-53849
OpenClaw before 2026.5.7 contains a privilege escalation vulnerability where the allowFrom feature improperly validates
OpenClaw before 2026.4.29 contains a path traversal vulnerability in the install helper that...
CVE-2026-53846
OpenClaw before 2026.4.29 contains a path traversal vulnerability in the install helper that allows workspace .env files
OpenClaw before 2026.5.2 contains an environment variable injection vulnerability allowing...
CVE-2026-53842
OpenClaw before 2026.5.2 contains an environment variable injection vulnerability allowing workspace .env files to influ
OpenClaw before 2026.5.26 contains an authorization bypass vulnerability where a surviving...
CVE-2026-53843
OpenClaw before 2026.5.26 contains an authorization bypass vulnerability where a surviving pairing-scoped device session
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in...
CVE-2026-50656
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicl
Daytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles
CVE-2026-54322
### Summary Daytona's organization role update and delete endpoints authorized the caller as an owner of the organizatio
Caddy: FastCGI header normalization bypass in `forward_auth copy_headers`
CVE-2026-52845
### Summary `forward_auth copy_headers` deletes the exact client-supplied identity header before copying the trusted va
Caddy: Windows `file_server` path authorization bypass via encoded backslash
CVE-2026-52844
### Summary On Windows, Caddy `path` matchers treat `/private\secret.txt` as outside `/private/*`, but `file_server` la
yt-dlp: Arbitrary code execution via manifest downloads with aria2c
CVE-2026-50574
### Summary If aria2c is used as an external downloader for a fragmented manifest format (such as an HLS/DASH stream), y
Daytona: Public sandbox previews remain accessible for up to one hour after being made private
CVE-2026-54321
### Summary Sandbox previews that were switched from public to private could remain reachable without authentication for
Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts
CVE-2026-53622
## Summary There is a critical vulnerability in Traefik's HTTP/3 (QUIC) TLS configuration selection that allows unauthe
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware...
CVE-2026-7273
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABT
Use of a non-secure protocol as the default FTP configuration in Canon EOS Network Setting Tool...
CVE-2026-9262
Use of a non-secure protocol as the default FTP configuration in Canon EOS Network Setting Tool Version 1.5.0 or earlier
Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier
CVE-2026-9261
Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier
Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or...
CVE-2026-9259
Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier
Potential security vulnerabilities have been identified in the HP One Agent for certain HP PC...
CVE-2026-5064
Potential security vulnerabilities have been identified in the HP One Agent for certain HP PC products, which might all
Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
CVE-2026-9258
Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions.
CVE-2026-52692
Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions.