📊 2026-06-16 漏洞情报日报 · 200 条 · 高危 90
每日漏洞情报汇总 · 2026-06-16
📊 2026-06-16 漏洞情报日报
📋 共 200 条
🔥 高危/严重 90 条
🚨 CISA-KEV 2 条
🐙 GitHub-Advisory 50 条 🔥16
🛡️ NVD-Latest 74 条 🔥74
⚔️ Sploitus 74 条
🤖 今日安全态势分析
🎯 今日重点关注
- CVE-2026-53633 (Vitest Browser)： 浏览器模式下的
cdp()接口未被权限控制，攻击者可通过 WebSocket RPC 代理 Chrome DevTools 协议，进而覆盖浏览器配置或执行恶意操作。无需认证，利用复杂度低。 - CVE-2026-54257 (Electron)： Node.js 的 Buffer API 在执行字节长度计算时存在缺陷，可能导致缓冲区分配错误、数据截断或应用崩溃。影响所有使用受影响版本的 Electron 应用，且暂无变通方案。
- CVE-2026-52704 (WooCommerce PDF Invoice Builder)： 远程代码执行漏洞（CVSS 10.0），攻击者可注入恶意代码并远程执行，完全控制受影响的 WordPress 站点。无需用户交互。
- CVE-2026-47208 / CVE-2026-47140 / CVE-2026-47137 / CVE-2026-47131 (vm2)： 多个沙盒逃逸漏洞（均 CVSS 10.0），可导致攻击者绕过 vm2 沙盒限制，在主机上执行任意代码。影响所有 3.11.4 以下版本。
- CVE-2026-8935 (WP MAPS PRO)： 插件中存在未经身份验证的 AJAX 操作，攻击者可利用公开的 nonce 创建管理员账户，从而完全接管网站。
📈 威胁趋势
- 远程代码执行 (RCE)： 当日高危漏洞的绝对主力，涉及 vm2 沙盒逃逸 (CVSS 10.0)、WooCommerce 插件、protobufjs-cli 代码注入以及 GD Perl 库的命令注入。攻击者可借此获得服务器完全控制权。
- 身份验证绕过/权限提升： WP MAPS PRO 允许未认证用户创建管理员账户；PyJWT 的密钥混淆漏洞可伪造 HS256 令牌。这两类漏洞均可能导致未经授权的管理员访问。
- 信息泄露/服务端请求伪造 (SSRF)： Starlette 在处理 Windows UNC 路径时存在 SSRF 和 NTLM 凭据窃取风险；Tornado 的 HTTP 客户端存在无限制的解压缓冲区，可被用于拒绝服务或信息泄露。
- 拒绝服务 (DoS)： ASP.NET Core SignalR 和 Blazor Server 存在 DoS 漏洞；Electron 的 Buffer 错误可能导致应用崩溃。均影响服务可用性。
🛡️ 缓解建议
- 立即升级： 重点修复 vm2 (
>=3.11.4)、Electron (遵循厂商发布的最新版本)、WooCommerce PDF Invoice Builder (>2.0.8) 及 Vitest Browser 至修复版本。 - 更新依赖组件： 更新受影响的 OpenSSL 静态链接包 (cryptography wheels 至
48.01+)、PyJWT 及 Perl 的 GD 模块至最新版，并确保所有 Python/JS 项目依赖为安全版本。 - 强化 WordPress 安全： 立即停用或更新 WP MAPS PRO (
>=6.1.1)，并检查是否有异常管理员账户被创建。对于所有 WordPress 插件，建议开启自动更新或设专人预警。 - 调整配置与监控： 对于 PyJWT，禁止同时配置对称与非对称算法；对于 Starlette，应限制或阻止对 UNC 路径的请求。同时监控异常的网络请求和沙盒进程行为。
🚨 CISA-KEV（2 条）
Unknown (2 条)
- CVE-2026-20262 - Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
CVE-2026-20262
CVE-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability 产品: Cisco Catalyst SD-WAN Manager 描述: Cisco Catalyst SD-WAN Manager… - CVE-2026-54420 - LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
CVE-2026-54420
CVE-2026-54420 LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability 产品: LiteSpeed cPanel Plugin 描述: LiteSpeed cPanel plugin contains a…
🐙 GitHub-Advisory（50 条）
Critical (2 条)
- CVE-2026-53633 - Vitest Browser: Exposed Browser Mode API Can Proxy CDP and Overwrite Config File
CVE-2026-53633Critical
## Summary Vitest Browser Mode exposes a `cdp()` API that forwards raw Chrome DevTools Protocol (CDP) methods over the Vitest browser WebSocket RPC. CDP is not… - CVE-2026-54257 - Electron: Buffer performs incorrect byte length calculations resulting in heap b
CVE-2026-54257Critical
Impact Most apps will crash and some may perform incorrect buffer allocations in the Node.js `Buffer` API resulting in unexpected truncation or allocation.…
High (14 条)
- CVE-2026-48526 - PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when m
CVE-2026-48526High
> [!NOTE] > Exploitation requires a verifier configured with both symmetric and asymmetric algorithms in `algorithms=[…]` and a raw-JSON JWK as the `key=`… - CVE-2026-45591 - Microsoft Security Advisory CVE-2026-45591 – ASP.NET Core Denial of Service Vuln
CVE-2026-45591High
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core SignalR and Blazor Server. This… - GHSA-537c-gmf6-5ccf - Vulnerable OpenSSL included in cryptography wheels High
pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in wheels prior to cryptograph 48.01 are vulnerable to… - CVE-2026-54271 - protobufjs-cli: Code injection in pbjs static output from crafted JSON descripto
CVE-2026-54271High
## Summary A previous fix for unsafe name handling in `pbjs` static / static-module code generation was incomplete. Affected versions of `protobufjs-cli` could… - CVE-2026-48818 - Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Window
CVE-2026-48818High
Summary When serving static files on Windows, `StaticFiles` resolves the requested path with… - CVE-2026-49855 - tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip
CVE-2026-49855High
Tornado's gzip decompression routines work in limited-size chunks, but have no overall limit for the total size of decompressed chunks that they will… - CVE-2026-49853 - Tornado: Authorization header forwarded across cross-origin redirects in SimpleA
CVE-2026-49853High
## Summary When SimpleAsyncHTTPClient follows a 3xx redirect, it shallow-copies the original HTTPRequest, rewrites the URL, decrements max_redirects, and… - CVE-2026-53539 - python-multipart: Quadratic-time querystring parsing with semicolon separators c
CVE-2026-53539High
Summary When parsing `application/x-www-form-urlencoded` bodies, `QuerystringParser` located the field separator with a two step lookup: it first scanned the… - CVE-2026-54281 - Nest: Middleware Bypass on Fastify via Trailing Slash
CVE-2026-54281High
Impact An authentication bypass vulnerability exists in `@nestjs/platform-fastify` (confirmed on version `11.1.24`, the latest available release at time of… - CVE-2026-54283 - Starlette: request.form() limits silently ignored for application/x-www-form-url
CVE-2026-54283High
Summary `request.form()` accepts `max_fields` and `max_part_size` to bound resource consumption while parsing form data. These limits are enforced for… - CVE-2026-48748 - Netty HTTP/3 QPACK Blocked Streams Memory Exhaustion
CVE-2026-48748High
Summary A memory exhaustion vulnerability in the Netty HTTP/3 codec allows the creation of an infinite number of blocked streams, which can cause OOM error.… - CVE-2026-50010 - Netty: Wrapping plain trust manager silently disables hostname verification
CVE-2026-50010High
SimpleTrustManagerFactory.engineGetTrustManagers() and related paths wrap any user-supplied plain X509TrustManager in X509TrustManagerWrapper, which extends… - CVE-2026-50011 - Netty: Unbounded pre-allocation in RedisArrayAggregator from RESP array length
CVE-2026-50011High
Summary RedisArrayAggregator pre-allocates ArrayList with initial capacity equal to the RESP array element count declared in an array header. That count is… - CVE-2026-11417 - aws-cdk-lib: OS Command Injection in NodejsFunction Bundling
CVE-2026-11417High
Summary AWS CDK (`aws-cdk-lib`) is an open-source framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormation. OS…
Medium (21 条)
- CVE-2026-48523 - PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` / `PyJWKClient` ke
CVE-2026-48523Medium
> [!NOTE] > Scored assuming a deployment where algorithm policy functions as an authentication/authorization boundary. In deployments where the algorithm… - CVE-2026-48522 - PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token
CVE-2026-48522Medium
> [!NOTE] > The library does not directly return non-HTTP(S) URI contents to the attacker; the chained "plant a JWKS to forge tokens" scenario described in the… - CVE-2026-48525 - PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload se
CVE-2026-48525Medium
> [!NOTE] > Practical impact depends on whether request body-size limits are enforced upstream (proxy/web-server/framework). Deployments with typical body-size… - CVE-2026-49459 - DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allow
CVE-2026-49459Medium
# IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM **CWE**: CWE-79 (XSS — Improper Neutralization… - CVE-2026-49458 - DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via
CVE-2026-49458Medium
# Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks **CWE**: CWE-79 (XSS — Improper Neutralization of Input… - GHSA-76mc-f452-cxcm - DOMPurify: Hook mutation of `data.allowedTags` / `data.allowedAttributes` perman Medium
# Hook mutation of `data.allowedTags` / `data.allowedAttributes` permanently pollutes `DEFAULT_ALLOWED_TAGS` / `DEFAULT_ALLOWED_ATTR` **CWE**: CWE-501 (Trust… - CVE-2026-49978 - DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template
CVE-2026-49978Medium
If the HTML you give it contains a <template> element, and inside that template there's an element with a shadow DOM attached to it, DOMPurify quietly skips… - CVE-2026-54276 - aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Chall
CVE-2026-54276Medium
Summary ``DigestAuthMiddleware`` can send an authentication response after following a cross-origin redirect. Impact If the client follows a redirect (the…
…另有 13 条 Medium 级漏洞（已省略）
Low (13 条)
- GHSA-x4vx-rjvf-j5p4 - DOMPurify: `IN_PLACE` mode trusts attacker-controlled `nodeName` on live non-for Low
## Summary When `DOMPurify.sanitize(root, { IN_PLACE: true })` is called on an attacker-supplied live DOM node, `DOMPurify` still trusts `currentNode.nodeName`… - GHSA-gvmj-g25r-r7wr - DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization Low
## Summary When DOMPurify is configured with both `SAFE_FOR_TEMPLATES: true` and `RETURN_DOM: true` (or `IN_PLACE: true`), an attacker can inject template… - CVE-2026-53663 - React Router: Potential CSRF via PUT/PATCH/DELETE document requests
CVE-2026-53663Low
Certain CSRF checks in React Router v7 [Framework Mode]() were insufficient and run on POST requests, but were bypassed on PUT/PATCH/DELETE requests. This is…
…另有 10 条 Low 级漏洞（已省略）
🛡️ NVD-Latest（74 条）
Critical (14 条)
- CVE-2026-52704 Improper Control of Generation of Code ('Code Injection') vulnerability in Edgar
CVE-2026-52704Critical 10.0
CVE-2026-52704 CVSS:10.0 Improper Control of Generation of Code ('Code Injection') vulnerability in Edgar Rojas WooCommerce PDF Invoice Builder allows Remote… - CVE-2026-47208 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, VM2 suffe
CVE-2026-47208Critical 10.0
CVE-2026-47208 CVSS:10.0 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, VM2 suffers from a sandbox breakout vulnerability. This allows… - CVE-2026-47140 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM bl
CVE-2026-47140Critical 10.0
CVE-2026-47140 CVSS:10.0 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM blocks several dangerous Node.js builtins such as… - CVE-2026-47137 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix f
CVE-2026-47137Critical 10.0
CVE-2026-47137 CVSS:10.0 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gwmx (CVE-2023-37903) introduced a… - CVE-2026-47131 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, by combin
CVE-2026-47131Critical 10.0
CVE-2026-47131 CVSS:10.0 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, by combining Buffer.call.call({}.__lookupGetter__, Buffer,… - CVE-2018-25436 WordPress Plugin Baggage Freight Shipping Australia 0.1.0 contains an unrestrict
CVE-2018-25436Critical 9.8
CVE-2018-25436 CVSS:9.8 WordPress Plugin Baggage Freight Shipping Australia 0.1.0 contains an unrestricted file upload vulnerability that allows… - CVE-2026-8935 The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX
CVE-2026-8935Critical 9.8
CVE-2026-8935 CVSS:9.8 The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly… - CVE-2026-11526 GD versions before 2.86 for Perl allow OS command injection and file overwrite v
CVE-2026-11526Critical 9.8
CVE-2026-11526 CVSS:9.8 GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in… - CVE-2026-12183 Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2
CVE-2026-12183Critical 9.8
CVE-2026-12183 CVSS:9.8 Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication… - CVE-2026-6853 Improper restriction of excessive authentication attempts vulnerability in Başbe
CVE-2026-6853Critical 9.8
CVE-2026-6853 CVSS:9.8 Improper restriction of excessive authentication attempts vulnerability in Başbelen Group Food Cafe Businesses Industry and Trade Ltd.… - CVE-2026-54133 jmespath.php allows users to use JMESPath, software for declaratively specifying
CVE-2026-54133Critical 9.8
CVE-2026-54133 CVSS:9.8 jmespath.php allows users to use JMESPath, software for declaratively specifying how to extract elements from a JSON document, in PHP… - CVE-2026-53787 Amasty Order Attributes for Magento 2 before version 4.0.0 contains an unauthent
CVE-2026-53787Critical 9.8
CVE-2026-53787 CVSS:9.8 Amasty Order Attributes for Magento 2 before version 4.0.0 contains an unauthenticated arbitrary file upload vulnerability that allows… - CVE-2026-47210 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, a sandbox
CVE-2026-47210Critical 9.8
CVE-2026-47210 CVSS:9.8 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, a sandbox escape vulnerability in vm2 allows arbitrary code… - CVE-2026-10557 The Yarbo Android and iOS applications contain hard-coded MQTT broker credential
CVE-2026-10557Critical 9.8
CVE-2026-10557 CVSS:9.8 The Yarbo Android and iOS applications contain hard-coded MQTT broker credentials that are identical for all users and all devices.…
High (60 条)
- CVE-2026-5242 Improper neutralization of formula elements in a CSV file vulnerability in MIA T
CVE-2026-5242High 8.8
CVE-2026-5242 CVSS:8.8 Improper neutralization of formula elements in a CSV file vulnerability in MIA Technology Inc. Pizzy Library allows Code Injection. This… - CVE-2026-49111 Incorrect Privilege Assignment vulnerability in ThemeGrill Masteriyo - LMS allow
CVE-2026-49111High 8.8
CVE-2026-49111 CVSS:8.8 Incorrect Privilege Assignment vulnerability in ThemeGrill Masteriyo - LMS allows Privilege Escalation. This issue affects Masteriyo -… - CVE-2026-49062 Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Eng
CVE-2026-49062High 8.8
CVE-2026-49062 CVSS:8.8 Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation.… - CVE-2016-20075 WordPress Ultimate Product Catalog 3.8.6 contains an arbitrary file upload vulne
CVE-2016-20075High 8.8
CVE-2016-20075 CVSS:8.8 WordPress Ultimate Product Catalog 3.8.6 contains an arbitrary file upload vulnerability that allows authenticated users with… - CVE-2026-12192 A vulnerability was determined in GALAYOU Y4 1.0.0. Impacted is an unknown funct
CVE-2026-12192High 8.8
CVE-2026-12192 CVSS:8.8 A vulnerability was determined in GALAYOU Y4 1.0.0. Impacted is an unknown function of the component Web Server. This manipulation… - CVE-2026-12187 A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Aff
CVE-2026-12187High 8.8
CVE-2026-12187 CVSS:8.8 A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Affected by this vulnerability is an unknown functionality… - CVE-2026-12186 A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. Affected is the
CVE-2026-12186High 8.8
CVE-2026-12186 CVSS:8.8 A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function replace_country in the library… - CVE-2026-12174 A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issu
CVE-2026-12174High 8.8
CVE-2026-12174 CVSS:8.8 A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file… - CVE-2026-6211 Unrestricted upload of file with dangerous type vulnerability in Global IT Infor
CVE-2026-6211High 8.7
CVE-2026-6211 CVSS:8.7 Unrestricted upload of file with dangerous type vulnerability in Global IT Informatics Services Inc. WEOLL allows Accessing… - CVE-2026-47135 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, Symbol.fo
CVE-2026-47135High 8.7
CVE-2026-47135 CVSS:8.7 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, Symbol.for override in setup-sandbox.js only intercepts 2 of 9… - CVE-2026-45674 Netty is a network application framework for development of protocol servers and
CVE-2026-45674High 8.7
CVE-2026-45674 CVSS:8.7 Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and… - CVE-2026-12057 When the application executes the JavaScript script embedded in the PDF within t
CVE-2026-12057High 8.6
CVE-2026-12057 CVSS:8.6 When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous… - CVE-2026-11527 Config::IniFiles versions before 3.001000 for Perl allow OS command injection an
CVE-2026-11527High 8.6
CVE-2026-11527 CVSS:8.6 Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open() of the -file… - CVE-2026-54410 nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_ms
CVE-2026-54410High 8.6
CVE-2026-54410 CVSS:8.6 nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_msg_header() function of the Modbus/TCP server that… - CVE-2026-47209 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the BaseH
CVE-2026-47209High 8.6
CVE-2026-47209 CVSS:8.6 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the BaseHandler.set trap in bridge.js (line 1231) ignores the… - CVE-2026-47139 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM su
CVE-2026-47139High 8.6
CVE-2026-47139 CVSS:8.6 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM supports excluding public network builtins from the… - CVE-2026-54420 LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn bef
CVE-2026-54420High 8.5
CVE-2026-54420 CVSS:8.5 LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user… - CVE-2016-20073 Answer My Question 1.3 plugin for WordPress contains an SQL injection vulnerabil
CVE-2016-20073High 8.2
CVE-2016-20073 CVSS:8.2 Answer My Question 1.3 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute… - CVE-2016-20072 BBS e-Franchise 1.1.1 plugin for WordPress contains an SQL injection vulnerabili
CVE-2016-20072High 8.2
CVE-2016-20072 CVSS:8.2 BBS e-Franchise 1.1.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute… - CVE-2016-20071 The 404 Redirection Manager plugin version 1.0 for WordPress contains an unauthe
CVE-2016-20071High 8.2
CVE-2016-20071 CVSS:8.2 The 404 Redirection Manager plugin version 1.0 for WordPress contains an unauthenticated SQL injection vulnerability that allows remote… - CVE-2016-20069 WordPress Booking Calendar Contact Form 1.0.23 contains an unauthenticated blind
CVE-2016-20069High 8.2
CVE-2016-20069 CVSS:8.2 WordPress Booking Calendar Contact Form 1.0.23 contains an unauthenticated blind SQL injection vulnerability in the shortcode function… - CVE-2016-20068 WordPress Booking Calendar Contact Form version 1.0.23 contains an unauthenticat
CVE-2016-20068High 8.2
CVE-2016-20068 CVSS:8.2 WordPress Booking Calendar Contact Form version 1.0.23 contains an unauthenticated blind SQL injection vulnerability that allows remote… - CVE-2026-54413 driftregion iso14229 through 0.9.0 contains an integer underflow and downstream
CVE-2026-54413High 8.2
CVE-2026-54413 CVSS:8.2 driftregion iso14229 through 0.9.0 contains an integer underflow and downstream out-of-bounds read in the Handle_0x27_SecurityAccess()… - CVE-2026-54412 LiamBindle MQTT-C through version 1.1.6 contains a heap-based out-of-bounds read
CVE-2026-54412High 8.2
CVE-2026-54412 CVSS:8.2 LiamBindle MQTT-C through version 1.1.6 contains a heap-based out-of-bounds read and integer underflow in the… - CVE-2026-7368 The Yarbo cloud does not enforce per-device or per-user authorization. Any clien
CVE-2026-7368High 8.1
CVE-2026-7368 CVSS:8.1 The Yarbo cloud does not enforce per-device or per-user authorization. Any client possessing valid credentials, whether the shared… - CVE-2026-12222 A vulnerability was determined in Yealink SIP-T46U 108.86.0.118. Affected is the
CVE-2026-12222High 8.0
CVE-2026-12222 CVSS:8.0 A vulnerability was determined in Yealink SIP-T46U 108.86.0.118. Affected is the function mod_webd.BlueToothTest of the file… - CVE-2026-12221 A vulnerability was found in Yealink SIP-T46U 108.86.0.118. This impacts the fun
CVE-2026-12221High 8.0
CVE-2026-12221 CVSS:8.0 A vulnerability was found in Yealink SIP-T46U 108.86.0.118. This impacts the function sprintf of the file /api/upgrade/upgrade of the… - CVE-2026-12220 A vulnerability has been found in Yealink SIP-T46U 108.86.0.118. This affects th
CVE-2026-12220High 8.0
CVE-2026-12220 CVSS:8.0 A vulnerability has been found in Yealink SIP-T46U 108.86.0.118. This affects the function mod_upgrade.SparePartsUpload of the file… - CVE-2026-12218 A vulnerability was detected in Yealink SIP-T46U 108.87.50.1. The affected eleme
CVE-2026-12218High 8.0
CVE-2026-12218 CVSS:8.0 A vulnerability was detected in Yealink SIP-T46U 108.87.50.1. The affected element is the function StartReportInformation of the file… - CVE-2026-50100 Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPA
CVE-2026-50100High 7.8
CVE-2026-50100 CVSS:7.8 Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a privilege escalation vulnerability.… - CVE-2026-12217 A security vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5. Impa
CVE-2026-12217High 7.8
CVE-2026-12217 CVSS:7.8 A security vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5. Impacted is an unknown function in the library dvdfabio.sys… - CVE-2026-12214 A security flaw has been discovered in Qihoo 360 Total Security 6.0. This vulner
CVE-2026-12214High 7.8
CVE-2026-12214 CVSS:7.8 A security flaw has been discovered in Qihoo 360 Total Security 6.0. This vulnerability affects the function RpcStringBindingComposeW… - CVE-2026-12193 A vulnerability was identified in VS Revo RevoUninstaller 2.5.x/2.6.x. The affec
CVE-2026-12193High 7.8
CVE-2026-12193 CVSS:7.8 A vulnerability was identified in VS Revo RevoUninstaller 2.5.x/2.6.x. The affected element is the function IOCtl_Handler in the… - CVE-2026-12191 A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the fun
CVE-2026-12191High 7.8
CVE-2026-12191 CVSS:7.8 A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file… - CVE-2026-54228 A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D
CVE-2026-54228High 7.8
CVE-2026-54228 CVSS:7.8 A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump… - CVE-2026-6428 SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.3
CVE-2026-6428High 7.6
CVE-2026-6428 CVSS:7.6 SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11,… - CVE-2026-5079 Impact: multer versions 1.0.0 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to
CVE-2026-5079High 7.5
CVE-2026-5079 CVSS:7.5 Impact: multer versions 1.0.0 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service via deeply nested field names in… - CVE-2026-49064 Insertion of Sensitive Information Into Sent Data vulnerability in Stiofan GetPa
CVE-2026-49064High 7.5
CVE-2026-49064 CVSS:7.5 Insertion of Sensitive Information Into Sent Data vulnerability in Stiofan GetPaid allows Retrieve Embedded Sensitive Data. This issue… - CVE-2018-25437 WordPress CherryFramework Themes 3.1.4 contains an information disclosure vulner
CVE-2018-25437High 7.5
CVE-2018-25437 CVSS:7.5 WordPress CherryFramework Themes 3.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to… - CVE-2016-20081 WordPress Plugin HB Audio Gallery Lite 1.0.0 contains a path traversal vulnerabi
CVE-2016-20081High 7.5
CVE-2016-20081 CVSS:7.5 WordPress Plugin HB Audio Gallery Lite 1.0.0 contains a path traversal vulnerability that allows unauthenticated attackers to download… - CVE-2016-20076 WordPress Simple-Backup 2.7.11 contains multiple vulnerabilities that allow unau
CVE-2016-20076High 7.5
CVE-2016-20076 CVSS:7.5 WordPress Simple-Backup 2.7.11 contains multiple vulnerabilities that allow unauthenticated attackers to delete arbitrary files and… - CVE-2026-9848 The WP Ticket plugin for WordPress is vulnerable to SQL Injection via the WordPr
CVE-2026-9848High 7.5
CVE-2026-9848 CVSS:7.5 The WP Ticket plugin for WordPress is vulnerable to SQL Injection via the WordPress search query parameter (`s`) in versions up to, and… - CVE-2026-46340 Netty is a network application framework for development of protocol servers and
CVE-2026-46340High 7.5
CVE-2026-46340 CVSS:7.5 Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to… - CVE-2026-45416 Netty is a network application framework for development of protocol servers and
CVE-2026-45416High 7.5
CVE-2026-45416 CVSS:7.5 Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and… - CVE-2026-44894 Netty is a network application framework for development of protocol servers and
CVE-2026-44894High 7.5
CVE-2026-44894 CVSS:7.5 Netty is a network application framework for development of protocol servers and clients. NoQuicTokenHandler is the tokenHandler used… - CVE-2026-44893 Netty is a network application framework for development of protocol servers and
CVE-2026-44893High 7.5
CVE-2026-44893 CVSS:7.5 Netty is a network application framework for development of protocol servers and clients. In netty-codec-haproxy prior to versions… - CVE-2026-12204 A vulnerability was determined in ShopXO up to 6.7.1. This vulnerability affects
CVE-2026-12204High 7.3
CVE-2026-12204 CVSS:7.3 A vulnerability was determined in ShopXO up to 6.7.1. This vulnerability affects the function… - CVE-2026-12200 A security vulnerability has been detected in Ritlabs TinyWeb Server up to 1.94
CVE-2026-12200High 7.3
CVE-2026-12200 CVSS:7.3 A security vulnerability has been detected in Ritlabs TinyWeb Server up to 1.94 on Win32. This impacts an unknown function in the… - CVE-2026-12198 A weakness has been identified in Microweber up to 2.0.20. This affects the func
CVE-2026-12198High 7.3
CVE-2026-12198 CVSS:7.3 A weakness has been identified in Microweber up to 2.0.20. This affects the function userfiles_path of the file… - CVE-2026-12066 A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability
CVE-2026-12066High 7.3
CVE-2026-12066 CVSS:7.3 A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the function retrieve of the file… - CVE-2016-20084 WordPress appointment-booking-calendar 1.1.24 contains multiple privilege escala
CVE-2016-20084High 7.2
CVE-2016-20084 CVSS:7.2 WordPress appointment-booking-calendar 1.1.24 contains multiple privilege escalation vulnerabilities that allow unauthenticated… - CVE-2016-20066 WordPress CP Polls 1.0.8 contains a persistent cross-site scripting vulnerabilit
CVE-2016-20066High 7.2
CVE-2016-20066 CVSS:7.2 WordPress CP Polls 1.0.8 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts… - CVE-2026-12197 A security flaw has been discovered in Ruijie EG105G-P 2.340. The impacted eleme
CVE-2026-12197High 7.2
CVE-2026-12197 CVSS:7.2 A security flaw has been discovered in Ruijie EG105G-P 2.340. The impacted element is the function nslookup of the file… - CVE-2026-5513 The Online Scheduling and Appointment Booking System – Bookly plugin for WordPre
CVE-2026-5513High 7.2
CVE-2026-5513 CVSS:7.2 The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… - CVE-2026-9109 The GPTranslate – Multilingual AI Translation for WordPress: Automatically Trans
CVE-2026-9109High 7.2
CVE-2026-9109 CVSS:7.2 The GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites plugin for WordPress is vulnerable to… - CVE-2026-5233 Improper Control of Interaction Frequency vulnerability in MIA Technology Inc. P
CVE-2026-5233High 7.1
CVE-2026-5233 CVSS:7.1 Improper Control of Interaction Frequency vulnerability in MIA Technology Inc. Pizzy Library allows Flooding. This issue affects Pizzy… - CVE-2026-5230 Improper Access Control, Missing Authorization vulnerability in MIA Technology I
CVE-2026-5230High 7.1
CVE-2026-5230 CVSS:7.1 Improper Access Control, Missing Authorization vulnerability in MIA Technology Inc. Pizzy Library allows Exploiting Incorrectly… - CVE-2019-25746 WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerab
CVE-2019-25746High 7.1
CVE-2019-25746 CVSS:7.1 WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate… - CVE-2026-54230 A symlink following vulnerability was found in the ABRT post-create event handle
CVE-2026-54230High 7.0
CVE-2026-54230 CVSS:7.0 A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output… - CVE-2026-54229 A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir meth
CVE-2026-54229High 7.0
CVE-2026-54229 CVSS:7.0 A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with…
⚔️ Sploitus（74 条）
Unknown (74 条)
- Exploit for CVE-2026-54596 exploit
CVE-2026-54596
Exploit for CVE-2026-54596 exploit - Exploit for CVE-2026-54597 exploit
CVE-2026-54597
Exploit for CVE-2026-54597 exploit
…另有 72 条 Unknown 级漏洞（已省略）
🤖 漏洞情报自动汇总 · 2026-06-16 · 数据来源: NVD / GitHub Advisory / Sploitus / CISA-KEV