共收录 5513 条相关情报。
← 返回所有主题CVE-2026-45136
## Summary `tools/quota-statusline.sh` (introduced in v3.5.0) interpolates Claude Code's hook stdin payload directly in
CVE-2026-44798
### Impact A user with access to add/change a GitRepository record could use the REST API to directly set the `current_
CVE-2026-44797
### Impact Nautobot's `Webhook` data model and associated feature set could be configured by users with sufficient acce
CVE-2026-44738
## Summary The Twig sandbox allow-list permits any user with the `admin.pages` role to call `config.toArray()` from wit
CVE-2026-45134
## Description The LangSmith SDK's prompt pull methods (`pull_prompt` / `pull_prompt_commit` in Python, `pullPrompt` /
CVE-2026-44724
## Summary On Linux, `systeminformation` is vulnerable to command injection in `networkInterfaces()` when an **active N
CVE-2026-44697
## Summary A remote, unauthenticated denial-of-service vulnerability in `Batch.Decompress` (`data/batch/batch.go`) allo
CVE-2026-5371
The MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) plugin for WordPress is vulnera
CVE-2026-45227
Heym before 0.0.21 contains a sandbox escape vulnerability in the custom Python tool executor that allows authenticated
CVE-2026-1250
The Court Reservation – Manage Your Court Bookings Online plugin for WordPress is vulnerable to generic SQL Injection vi
CVE-2026-8108
The installation of Fuji Tellus adds a driver to the kernel which grants all users read and write permissions.
CVE-2026-8449
Linux ksmbd contains a remote memory corruption vulnerability in the ACL inheritance path that allows remote clients wit
CVE-2026-45225
Heym before 0.0.21 contains a path traversal vulnerability in the file upload endpoint that allows authenticated users t
CVE-2026-45226
Heym before 0.0.21 contains an authorization bypass vulnerability in workflow execution that allows authenticated users
CVE-2026-44871
Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS
CVE-2026-35555
PowerSYSTEM Center feature for device project groups allows an authenticated user with limited permissions to perform an
CVE-2026-26289
PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to
CVE-2026-44660
### Summary When `ujson.dump()` writes to a file-like object and the write operation raises an exception, the serialize
CVE-2026-44648
### Summary Changing a user’s password does not invalidate existing sessions, allowing an attacker with a stolen cookie
CVE-2026-44594
### Summary A Local File Inclusion (LFI) vulnerability exists in the esbuild plugin's handling of the `browser` field i