📊 2026-07-02 漏洞情报日报 · 200 条 · 高危 96
每日漏洞情报汇总 · 2026-07-02
📊 2026-07-02 漏洞情报日报
📋 共 200 条
🔥 高危/严重 96 条
🐙 GitHub-Advisory 42 条 🔥22
🛡️ NVD-Latest 74 条 🔥74
⚔️ Sploitus 84 条
🤖 今日安全态势分析
（今日数据暂无足够信息生成分析）
🐙 GitHub-Advisory（42 条）
Critical (4 条)
- CVE-2026-50545 - Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Tak
CVE-2026-50545Critical
Summary A stronger framing of the same root cause as GHSA-gx55-f84r-v3r7: the `Environment.spec.runtime.podSpec` / `spec.builder.podSpec` passthrough lacked… - CVE-2026-50563 - Fission Container Executor Function PodSpec Injection Leading to Node Escape
CVE-2026-50563Critical
Summary Fission's Container Executor path lets a tenant supply `Function.spec.podspec` directly; the executor merges it into the executor-built podspec and… - CVE-2026-50564 - Fission Environment CRD podspec passthrough enables hostPID/hostNetwork/privileg
CVE-2026-50564Critical
Summary Fission's `Environment` CRD exposes `spec.runtime.podSpec` and `spec.builder.podSpec`, which are merged into the Kubernetes pod specs for runtime and… - CVE-2026-50566 - Fission: Environment Runtime.Container and Builder.Container SecurityContext byp
CVE-2026-50566Critical
Summary A follow-up bypass of the round-4 PodSpec hardening (GHSA-gx55-f84r-v3r7, GHSA-wmgg-3p4h-48x7, GHSA-v455-mv2v-5g92). Those advisories validate and…
High (18 条)
- CVE-2026-47424 - OpenAM Authenticated RCE via Groovy Sandbox Escape
CVE-2026-47424High
## Summary **Description** A Protection Mechanism Failure (CWE-693) in OpenAM's server-side scripting sandbox allows an authenticated script author execute… - CVE-2026-47426 - OpenAM OAuth Client Impersonation via JWKS Resolver Cache
CVE-2026-47426High
## Summary **Description** An Improper Authentication (CWE-287) issue in OpenAM's OAuth2 private_key_jwt client authentication path allows any registered… - CVE-2026-44840 - Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query
CVE-2026-44840High
## Summary The `checkUserPassword` GraphQL query in Dgraph is vulnerable to DQL (Dgraph Query Language) injection. User-supplied password values are… - CVE-2026-49451 - Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing
CVE-2026-49451High
Impact A small OpenAPI document containing a circular schema reference can cause process termination through stack overflow in Microsoft.OpenApi. The issue… - CVE-2026-47198 - Paymenter has URL parameter injection that bypasses paid plan limits at checkout
CVE-2026-47198High
Summary The checkout component improperly filters URL-writable properties, allowing authenticated users to inject arbitrary key-value pairs into server… - GHSA-55f6-4pr5-c7m5 - Kahi has privilege-drop and socket/log permission issues High
Kahi releases up to and including v0.1.0-alpha.8 contain three privilege/permission issues, all fixed in v0.1.0-alpha.9. They were identified in a… - CVE-2026-49473 - @cedar-policy/authorization-for-expressjs has an authorization bypass via query
CVE-2026-49473High
Summary @cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by… - GHSA-7m8x-qg2j-4m3v - Fission: MessageQueueTrigger scaler manager materializes Secret values into Depl High
Summary The Fission MessageQueueTrigger (MQT) scaler controller exposed two privilege-escalation primitives to any subject able to create MQTs in a namespace.… - CVE-2026-49821 - Fission: Cross-namespace Environment reference in Package allows build-time comm
CVE-2026-49821High
Summary Fission's `buildermgr` controller processed `Package` CRDs without verifying that `Package.spec.environment.namespace` matched… - CVE-2026-49822 - Fission: Cross-namespace event leakage via KubernetesWatchTrigger allows persist
CVE-2026-49822High
Summary A low-privilege developer who could create a `KubernetesWatchTrigger` (KWT) in their own namespace was able to establish a persistent surveillance… - CVE-2026-49823 - Fission: Cross-namespace Package read via unvalidated PackageRef in Function adm
CVE-2026-49823High
Summary A Fission Function spec carries three reference types — Secret, ConfigMap, and Package. The first two were namespace-validated by the admission… - CVE-2026-49824 - Fission: Cross-namespace Environment reference via unvalidated EnvironmentRef in
CVE-2026-49824High
Summary The Fission Function admission webhook (`pkg/webhook/function.go`) validated that `spec.secrets[].namespace` and `spec.configmaps[].namespace` equalled… - CVE-2026-48795 - @adonisjs/bodyparser has an incomplete fix for CVE-2026-25754
CVE-2026-48795High
Summary The fix for [GHSA-f5x2-vj4h-vg4c](https://github.com/adonisjs/core/security/advisories/GHSA-f5x2-vj4h-vg4c) / CVE-2026-25754 introduced in commit… - CVE-2026-49478 - Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution f
CVE-2026-49478High
## Impact Three security vulnerabilities were identified in the OIDC Discovery client: 1. **Blind Server-Side Request Forgery (SSRF) via Cross-Host… - CVE-2025-10996 - Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles
CVE-2025-10996High
Summary A memory-safety vulnerability in Open Babel's SMILES parser caused a heap buffer overflow when reading a crafted input string. Details The flaw was in… - GHSA-fr4h-3cph-29xv - pnpm: Hoisted install imports lockfile alias outside node_modules High
## Summary The hoisted dependency alias issue tracked as GHSA-fr4h-3cph-29xv / CAND-PNPM-059 has been addressed in both pnpm and pacquet. A crafted lockfile… - GHSA-72r4-9c5j-mj57 - pnpm: `patch-remove` could delete project-selected files outside the patches dir High
## Summary The `patch-remove` deletion-scope issue tracked as GHSA-72r4-9c5j-mj57 / CAND-PNPM-030 has been addressed in pnpm. A crafted patch entry could… - GHSA-qrv3-253h-g69c - pnpm: Path traversal in configDependencies env lockfile allows symlink creation High
## Summary `pnpm` accepts package names from the env lockfile `configDependencies` section and uses those names directly when creating config dependency…
Medium (13 条)
- CVE-2026-48593 - oban_web: Unbounded range expansion in cron describe causes memory exhaustion
CVE-2026-48593Medium 4.0
Summary `oban_web` 2.12.0 introduced a cron expression parser that expands `-`-separated ranges without validating the endpoints. An attacker with access to… - CVE-2026-48592 - oban_web missing authorization check on `save-job` event handler
CVE-2026-48592Medium 4.0
Summary `oban_web` 2.12.0 through the current unpatched release exposes a `save-job` LiveView event handler that performs no authorization check, allowing any… - CVE-2026-48717 - OpenAM OAuth Authorization Bypass via PKCE Challenge
CVE-2026-48717Medium
## Summary **Description** An Improper Authorization (CWE-285) issue in OpenAM's OAuth2 authorization-code grant allows a PKCE-protected authorization code to… - CVE-2022-31008 - RabbitMQ has predictable credential obfuscation seed value used in Shovel and Fe
CVE-2022-31008Medium
Impact Shovel and Federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a… - CVE-2023-46118 - RabbitMQ vulnerable to Denial of Service by publishing large messages over the H
CVE-2023-46118Medium
Summary Responsibly disclosed by @NSEcho. HTTP API did not enforce an HTTP request body limit, making it vulnerable for DoS attacks with very large messages.… - CVE-2026-50565 - Fission builder pods auto-mount the fission-builder ServiceAccount token in the
CVE-2026-50565Medium
Summary Fission builder pods were created with `ServiceAccountName: fission-builder` and no `AutomountServiceAccountToken: false`, so the kubelet auto-mounted… - CVE-2026-49820 - Probo has an open redirect bypass via path normalization
CVE-2026-49820Medium
Impact Probo's `saferedirect` package validates redirect URLs used across authentication flows (OIDC, SAML, session transfer, OAuth connectors, and… - CVE-2026-48796 - CefSharp.Common: `FolderSchemeHandlerFactory` path boundary check can expose fil
CVE-2026-48796Medium
Summary `FolderSchemeHandlerFactory` was intended to restrict served files to a configured `rootFolder`, but its path validation used a raw string prefix…
…另有 5 条 Medium 级漏洞（已省略）
Low (7 条)
- CVE-2026-48791 - Sigstore Java has a vulnerability with bundle verification of integratedTime
CVE-2026-48791Low
Summary Regression: Verification of `integratedTime` from Rekor V1 Log Entry against Fuclio Certificate validity was missing Details - PR… - CVE-2026-48805 - Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources
CVE-2026-48805Low
Description The 3.26.0 source-policy hardening changed the signature of `CoreExtension::checkArrow()` to take a boolean `$isSandboxed` instead of an… - CVE-2026-2704 - Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString
CVE-2026-2704Low
> ### Summary > > A memory-safety vulnerability in Open Babel's CIF file format parser > allowed an out-of-bounds read when reading a crafted input file. > >…
…另有 4 条 Low 级漏洞（已省略）
🛡️ NVD-Latest（74 条）
Critical (18 条)
- CVE-2026-13763 Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer
CVE-2026-13763Critical 9.8
CVE-2026-13763 CVSS:9.8 Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer with AWS WAF enabled might allow remote actors to… - CVE-2026-13762 Inconsistent interpretation of HTTP/2 requests in Amazon CloudFront with AWS WAF
CVE-2026-13762Critical 9.8
CVE-2026-13762 CVSS:9.8 Inconsistent interpretation of HTTP/2 requests in Amazon CloudFront with AWS WAF enabled might allow remote actors to bypass AWS WAF… - CVE-2026-56782 Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/
CVE-2026-56782Critical 9.8
CVE-2026-56782 CVSS:9.8 Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that allows… - CVE-2026-57881 An unauthenticated stack-based buffer overflow vulnerability exists in vlsvr in
CVE-2026-57881Critical 9.8
CVE-2026-57881 CVSS:9.8 An unauthenticated stack-based buffer overflow vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier.… - CVE-2026-57880 An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in G
CVE-2026-57880Critical 9.8
CVE-2026-57880 CVSS:9.8 An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier.… - CVE-2026-57879 An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in G
CVE-2026-57879Critical 9.8
CVE-2026-57879 CVSS:9.8 An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier.… - CVE-2026-57878 An unauthenticated stack-based buffer overflow vulnerability exists in thttpd in
CVE-2026-57878Critical 9.8
CVE-2026-57878 CVSS:9.8 An unauthenticated stack-based buffer overflow vulnerability exists in thttpd in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier.… - CVE-2026-57498 Coolify is an open-source and self-hostable tool for managing servers, applicati
CVE-2026-57498Critical 9.6
CVE-2026-57498 CVSS:9.6 Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, Coolify's… - CVE-2026-54831 Unauthenticated SQL Injection in GeoDirectory <= 2.8.162 versions.
CVE-2026-54831Critical 9.3
CVE-2026-54831 CVSS:9.3 Unauthenticated SQL Injection in GeoDirectory <= 2.8.162 versions. 产品: - CVE-2026-54827 Unauthenticated SQL Injection in Real Estate 7 <= 3.5.9 versions.
CVE-2026-54827Critical 9.3
CVE-2026-54827 CVSS:9.3 Unauthenticated SQL Injection in Real Estate 7 <= 3.5.9 versions. 产品: - CVE-2026-54825 Unauthenticated SQL Injection in wpDataTables <= 7.4 versions.
CVE-2026-54825Critical 9.3
CVE-2026-54825 CVSS:9.3 Unauthenticated SQL Injection in wpDataTables <= 7.4 versions. 产品: - CVE-2026-54820 Unauthenticated SQL Injection in JetBooking <= 4.0.4.1 versions.
CVE-2026-54820Critical 9.3
CVE-2026-54820 CVSS:9.3 Unauthenticated SQL Injection in JetBooking <= 4.0.4.1 versions. 产品: - CVE-2026-55276 Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat mean
CVE-2026-55276Critical 9.1
CVE-2026-55276 CVSS:9.1 Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation… - CVE-2026-53434 Detection of Error Condition Without Action vulnerability in Apache Tomcat when
CVE-2026-53434Critical 9.1
CVE-2026-53434 CVSS:9.1 Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connector. This issue… - CVE-2026-39868 This issue was addressed with improved input validation. This issue is fixed in
CVE-2026-39868Critical 9.1
CVE-2026-39868 CVSS:9.1 This issue was addressed with improved input validation. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. An… - CVE-2026-37637 An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbit
CVE-2026-37637Critical 9.1
CVE-2026-37637 CVSS:9.1 An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php component 产品: - CVE-2025-64152 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v
CVE-2025-64152Critical 9.1
CVE-2025-64152 CVSS:9.1 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB. This issue affects Apache… - CVE-2025-55017 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v
CVE-2025-55017Critical 9.1
CVE-2025-55017 CVSS:9.1 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB. This issue affects Apache…
High (56 条)
- CVE-2026-34597 Coolify is an open-source and self-hostable tool for managing servers, applicati
CVE-2026-34597High 8.8
CVE-2026-34597 CVSS:8.8 Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.470, a critical… - CVE-2026-34594 Coolify is an open-source and self-hostable tool for managing servers, applicati
CVE-2026-34594High 8.8
CVE-2026-34594 CVSS:8.8 Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, an… - CVE-2026-43731 A use-after-free issue was addressed with improved memory management. This issue
CVE-2026-43731High 8.8
CVE-2026-43731 CVSS:8.8 A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS… - CVE-2026-43715 A use-after-free issue was addressed with improved memory management. This issue
CVE-2026-43715High 8.8
CVE-2026-43715 CVSS:8.8 A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS… - CVE-2026-43705 A type confusion issue was addressed with improved checks. This issue is fixed i
CVE-2026-43705High 8.8
CVE-2026-43705 CVSS:8.8 A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS… - CVE-2026-58000 luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command i
CVE-2026-58000High 8.8
CVE-2026-58000 CVSS:8.8 luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command injection vulnerability in the generateKey ubus method… - CVE-2026-57999 luci-app-tailscale-community contains a command injection vulnerability in the t
CVE-2026-57999High 8.8
CVE-2026-57999 CVSS:8.8 luci-app-tailscale-community contains a command injection vulnerability in the tailscale.do_login RPC method that allows authenticated… - CVE-2025-68052 Unauthenticated Cross Site Request Forgery (CSRF) in Eagle Booking <= 1.3.4.3 ve
CVE-2025-68052High 8.8
CVE-2025-68052 CVSS:8.8 Unauthenticated Cross Site Request Forgery (CSRF) in Eagle Booking <= 1.3.4.3 versions. 产品: - CVE-2026-50741 Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also re
CVE-2026-50741High 8.8
CVE-2026-50741 CVSS:8.8 Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can be bypassed… - CVE-2026-56285 Nitter's /video media proxy endpoint fails to validate target URLs against Twitt
CVE-2026-56285High 8.6
CVE-2026-56285 CVSS:8.6 Nitter's /video media proxy endpoint fails to validate target URLs against Twitter/X domains and uses a hardcoded default HMAC key,… - CVE-2026-57877 An unauthenticated format string vulnerability exists in vlsvr in GeoVision GV-L
CVE-2026-57877High 8.6
CVE-2026-57877 CVSS:8.6 An unauthenticated format string vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The… - CVE-2026-57955 SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authen
CVE-2026-57955High 8.5
CVE-2026-57955 CVSS:8.5 SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers to execute arbitrary ClickHouse… - CVE-2026-57947 Pinpoint through 3.1.0 contains a server-side request forgery vulnerability in t
CVE-2026-57947High 8.5
CVE-2026-57947 CVSS:8.5 Pinpoint through 3.1.0 contains a server-side request forgery vulnerability in the webhook registration endpoint that allows… - CVE-2026-13325 A flaw was found in KubeVirt's migration proxy. When spec.configuration.migratio
CVE-2026-13325High 8.5
CVE-2026-13325 CVSS:8.5 A flaw was found in KubeVirt's migration proxy. When spec.configuration.migrations.disableTLS is set to true on the KubeVirt custom… - CVE-2026-2053 The WSO2 API Manager's message flow component, when processing WS-Addressing hea
CVE-2026-2053High 8.3
CVE-2026-2053 CVSS:8.3 The WSO2 API Manager's message flow component, when processing WS-Addressing headers, does not sufficiently validate or restrict… - CVE-2026-43735 The issue was addressed with improved checks. This issue is fixed in Safari 26.5
CVE-2026-43735High 8.1
CVE-2026-43735 CVSS:8.1 The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A… - CVE-2026-57950 ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access
CVE-2026-57950High 8.1
CVE-2026-57950 CVSS:8.1 ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control vulnerability in ErpSaleOrderController that… - CVE-2026-40711 Dell Dell Container Storage Modules, version(s) csi-powerstore v2.16.0, csi-unit
CVE-2026-40711High 8.0
CVE-2026-40711 CVSS:8.0 Dell Dell Container Storage Modules, version(s) csi-powerstore v2.16.0, csi-unity v2.16.0, csi-powerflex v2.16.0, csi-powermax v2.16.0,… - CVE-2026-57919 PBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a na
CVE-2026-57919High 7.8
CVE-2026-57919 CVSS:7.8 PBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a named pipe (\\.\pipe\PBackupVSS) with a DACL that grants… - CVE-2026-43724 The issue was addressed with improved input sanitization. This issue is fixed in
CVE-2026-43724High 7.8
CVE-2026-43724 CVSS:7.8 The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. An… - CVE-2026-45257 The KTLS receive path decrypted each record in place, assuming that the mbufs ho
CVE-2026-45257High 7.8
CVE-2026-45257 CVSS:7.8 The KTLS receive path decrypted each record in place, assuming that the mbufs holding received data were anonymous and safe to modify. … - CVE-2026-57920 Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon t
CVE-2026-57920High 7.7
CVE-2026-57920 CVSS:7.7 Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass access-control rules for certain… - CVE-2026-10835 The SALESmanago & Leadoo WordPress plugin before 3.11.3 does not properly saniti
CVE-2026-10835High 7.7
CVE-2026-10835 CVSS:7.7 The SALESmanago & Leadoo WordPress plugin before 3.11.3 does not properly sanitise and escape a parameter passed to one of its AJAX… - CVE-2026-54826 Subscriber Insecure Direct Object References (IDOR) in SupportCandy <= 3.4.6 ver
CVE-2026-54826High 7.6
CVE-2026-54826 CVSS:7.6 Subscriber Insecure Direct Object References (IDOR) in SupportCandy <= 3.4.6 versions. 产品: - CVE-2026-41896 Coolify is an open-source and self-hostable tool for managing servers, applicati
CVE-2026-41896High 7.5
CVE-2026-41896 CVSS:7.5 Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, the HMAC… - CVE-2026-56018 JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call
CVE-2026-56018High 7.5
CVE-2026-56018 CVSS:7.5 JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth. In… - CVE-2026-56017 JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer
CVE-2026-56017High 7.5
CVE-2026-56017 CVSS:7.5 JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the… - CVE-2026-56780 Modoboa before 2.9.0 contains an insecure direct object reference vulnerability
CVE-2026-56780High 7.5
CVE-2026-56780 CVSS:7.5 Modoboa before 2.9.0 contains an insecure direct object reference vulnerability in the PUT /api/v1/accounts/{pk}/password/ endpoint… - CVE-2026-36848 Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS
CVE-2026-36848High 7.5
CVE-2026-36848 CVSS:7.5 Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem. 产品: gigamon gigavue-os - CVE-2026-54837 Unauthenticated Broken Access Control in Intranet & Private Site – All
CVE-2026-54837High 7.5
CVE-2026-54837 CVSS:7.5 Unauthenticated Broken Access Control in Intranet & Private Site – All-In-One Intranet <= 1.8.1 versions. 产品: - CVE-2026-54835 Unauthenticated Broken Access Control in Five Star Restaurant Menu <= 2.5.2 vers
CVE-2026-54835High 7.5
CVE-2026-54835 CVSS:7.5 Unauthenticated Broken Access Control in Five Star Restaurant Menu <= 2.5.2 versions. 产品: - CVE-2026-54834 Unauthenticated Sensitive Data Exposure in Object Cache 4 everyone <= 2.3.2 vers
CVE-2026-54834High 7.5
CVE-2026-54834 CVSS:7.5 Unauthenticated Sensitive Data Exposure in Object Cache 4 everyone <= 2.3.2 versions. 产品: - CVE-2026-54832 Unauthenticated Broken Access Control in Gutenverse Companion <= 2.5.0 versions.
CVE-2026-54832High 7.5
CVE-2026-54832 CVSS:7.5 Unauthenticated Broken Access Control in Gutenverse Companion <= 2.5.0 versions. 产品: - CVE-2026-54824 Unauthenticated Sensitive Data Exposure in Ads by WPQuads <= 3.0.3 versions.
CVE-2026-54824High 7.5
CVE-2026-54824 CVSS:7.5 Unauthenticated Sensitive Data Exposure in Ads by WPQuads <= 3.0.3 versions. 产品: - CVE-2026-30041 An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 al
CVE-2026-30041High 7.5
CVE-2026-30041 CVSS:7.5 An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 allows attackers to execute arbitrary code or cause a… - CVE-2025-68064 Contributor Local File Inclusion in Goya Core < 1.0.9.4 versions.
CVE-2025-68064High 7.5
CVE-2025-68064 CVSS:7.5 Contributor Local File Inclusion in Goya Core < 1.0.9.4 versions. 产品: - CVE-2025-68063 Contributor Local File Inclusion in Splash - Sport Club WordPress Theme for Bask
CVE-2025-68063High 7.5
CVE-2025-68063 CVSS:7.5 Contributor Local File Inclusion in Splash - Sport Club WordPress Theme for Basketball, Football, Hockey <= 4.4.3 versions. 产品: - CVE-2026-57913 Johnson & Johnson Audit Tracking Management System (ATMS) before 2026-04-21 allo
CVE-2026-57913High 7.5
CVE-2026-57913 CVSS:7.5 Johnson & Johnson Audit Tracking Management System (ATMS) before 2026-04-21 allows viewing of meeting minutes and transcripts. 产品: - CVE-2026-57912 Johnson & Johnson Campus Recruiting before 2025-10-31 allows viewing of data pro
CVE-2026-57912High 7.5
CVE-2026-57912 CVSS:7.5 Johnson & Johnson Campus Recruiting before 2025-10-31 allows viewing of data provided by recruited students, and notes entered about… - CVE-2026-11702 Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state
CVE-2026-11702High 7.5
CVE-2026-11702 CVSS:7.5 Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes. When an object is initialised… - CVE-2026-11625 Bytes::Random::Secure versions through 0.29 for Perl share internal state across
CVE-2026-11625High 7.5
CVE-2026-11625 CVSS:7.5 Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes. When an object is initialised before… - CVE-2026-57876 An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoV
CVE-2026-57876High 7.5
CVE-2026-57876 CVSS:7.5 An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The… - CVE-2026-57875 An unauthenticated NULL pointer dereference vulnerability exists in the HTTP req
CVE-2026-57875High 7.5
CVE-2026-57875 CVSS:7.5 An unauthenticated NULL pointer dereference vulnerability exists in the HTTP request parsing logic of multiple CGI components in… - CVE-2026-57874 An unauthenticated buffer overflow vulnerability exists in IEEE8021x_upload.cgi
CVE-2026-57874High 7.5
CVE-2026-57874 CVSS:7.5 An unauthenticated buffer overflow vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and… - CVE-2026-57873 An unauthenticated NULL pointer dereference vulnerability exists in IEEE8021x_up
CVE-2026-57873High 7.5
CVE-2026-57873 CVSS:7.5 An unauthenticated NULL pointer dereference vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12… - CVE-2026-57872 An unauthenticated directory traversal vulnerability exists in get_fcont.cgi in
CVE-2026-57872High 7.5
CVE-2026-57872 CVSS:7.5 An unauthenticated directory traversal vulnerability exists in get_fcont.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier.… - CVE-2026-49486 The Apache Airflow FTP provider's `FTPSHook.get_conn()` created an `ftplib.FTP_T
CVE-2026-49486High 7.5
CVE-2026-49486 CVSS:7.5 The Apache Airflow FTP provider's `FTPSHook.get_conn()` created an `ftplib.FTP_TLS` connection but never called `prot_p()`, so although… - CVE-2026-10823 The YMC Filter WordPress plugin before 3.11.3 does not properly authorize access
CVE-2026-10823High 7.5
CVE-2026-10823 CVSS:7.5 The YMC Filter WordPress plugin before 3.11.3 does not properly authorize access to one of its REST API endpoints and does not validate… - CVE-2026-54833 Unauthenticated Backdoor in Enable CORS <= 2.0.3 versions.
CVE-2026-54833High 7.4
CVE-2026-54833 CVSS:7.4 Unauthenticated Backdoor in Enable CORS <= 2.0.3 versions. 产品: - CVE-2026-53404 Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's re
CVE-2026-53404High 7.3
CVE-2026-53404 CVSS:7.3 Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR… - CVE-2026-13592 A vulnerability was detected in liftoff-sr CIPster up to e8e9dba09bf56962807d350
CVE-2026-13592High 7.3
CVE-2026-13592 CVSS:7.3 A vulnerability was detected in liftoff-sr CIPster up to e8e9dba09bf56962807d3504b783ccdb6287f3e4. Affected by this issue is the… - CVE-2026-12912 A flaw was found in libtiff. A remote attacker could exploit this vulnerability
CVE-2026-12912High 7.3
CVE-2026-12912 CVSS:7.3 A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed… - CVE-2026-57915 It is possible to bypass the Kerberos pre-authentication check in Apache Kerby b
CVE-2026-57915High 7.3
CVE-2026-57915 CVSS:7.3 It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported… - CVE-2026-43725 The issue was addressed with improved input validation. This issue is fixed in S
CVE-2026-43725High 7.1
CVE-2026-43725 CVSS:7.1 The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe… - CVE-2026-43701 The issue was addressed with improved checks. This issue is fixed in Safari 26.5
CVE-2026-43701High 7.1
CVE-2026-43701 CVSS:7.1 The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A… - CVE-2026-57918 libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC i
CVE-2026-57918High 7.1
CVE-2026-57918 CVSS:7.1 libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC in rpc_read_from_socket in lib/socket.c during a…
⚔️ Sploitus（84 条）
Unknown (84 条)
- Exploit for OS Command Injection in Ivanti Standalone_Sentry exploit
Exploit for OS Command Injection in Ivanti Standalone_Sentry exploit - Exploit for CVE-2026-53694 exploit
CVE-2026-53694
Exploit for CVE-2026-53694 exploit
…另有 82 条 Unknown 级漏洞（已省略）
🤖 漏洞情报自动汇总 · 2026-07-02 · 数据来源: NVD / GitHub Advisory / Sploitus / CISA-KEV