📊 2026-07-05 漏洞情报日报 · 200 条 · 高危 99
每日漏洞情报汇总 · 2026-07-05
📊 2026-07-05 漏洞情报日报
📋 共 200 条
🔥 高危/严重 99 条
🐙 GitHub-Advisory 42 条 🔥22
🛡️ NVD-Latest 77 条 🔥77
⚔️ Sploitus 81 条
🤖 今日安全态势分析
🎯 今日重点关注
- CVE-2026-13768 (CVSS 10.0)： Gardyn智能家居设备暴露了具备完全权限的IoTHub所有者密钥。攻击者利用该密钥可枚举所有连接设备、远程执行命令，并获取内部网络访问权限，导致从云到家庭网络的彻底沦陷。
- CVE-2026-9558 / CVE-2026-9559 (CVSS 9.9)： Mautic营销自动化平台存在服务端模板注入（SSTI）与路径遍历漏洞。攻击者可通过上传恶意ZIP文件或Twig模板实现远程代码执行与任意文件读写，威胁业务数据和服务器安全。
- 9router 未授权RCE (Critical)： 9router npm包的`/api/tunnel/tailscale-install`接口存在未授权访问和操作系统命令注入漏洞。远程攻击者无需认证即可通过JSON请求中的`sudoPassword`字段注入恶意命令，完全控制服务器。
- CVE-2026-52735 (Critical)： Zebra区块链节点（zebrad）的纯Rust实现中存在P2SH签名操作数低估漏洞，可导致全网共识分裂。直接影响所有使用zebrad v4.4.1及此前版本的节点运营者，可能引发链分叉和双花攻击。
- CVE-2026-27419 (CVSS 9.9)： Zegen协作平台(<=1.1.9)存在订阅者权限的任意文件上传漏洞。低权限用户可直接上传WebShell，结合后续利用可能导致服务器接管。
📈 威胁趋势
- 远程代码执行（RCE）： 占比最高，共计7个严重及以上漏洞。攻击向量包括模板引擎注入、路径遍历上传、命令注入（Linux打印驱动HPLIP、路由器固件9router），以及IoT固件密钥泄露导致的后门RCE。
- 权限提升与身份绕过： 出现于Mautic API v2授权绕过(CVSS 7.1)与Pardus软件参数注入(CVSS 8.8)，攻击者可提升权限至管理员级别。
- 共识分裂/DoS： 区块链相关（如Zebra节点漏洞）与文件删除（WordPress插件）攻击呈上升趋势，影响核心基础设施的可用性与数据完整性。
- 信息泄露与供应链风险： Gardyn设备暴露云密钥、Grackle MCP工具授权缺失，揭示了物联网和AI中间件中认证机制薄弱导致的横向渗透风险。
🛡️ 缓解建议
- 阻断高风险服务暴露： 立即检查并限制Gardyn、Zebra节点及9router等系统的公网访问；对Mautic、Zegen等需上传功能的Web应用，严格实施WAF规则，拦截ZIP、Twig等危险MIME类型。
- 优先处置关键补丁： 立即升级zebrad至v4.4.2+、Mautic至最新修复版本，并更新HPLIP、Pardus-software、Printcart插件至不受影响版本。对无法立即更新的组件，启用访问控制白名单。
- 强化认证与输入校验： 对所有API端点（特别是含命令执行、模板渲染、ZIP解压功能的）执行全面的输入验证、路径规范化检查和沙箱隔离。审计并禁用不必要的`POST`接口，防止未授权访问。
- 隔离IoT与云端凭据： 立即轮换所有Gardyn设备的iothubowner密钥，并建立密钥扫描与泄露检测机制。对区块链节点实施独立的网络隔离，避免P2P攻击波及其它系统。
🐙 GitHub-Advisory（42 条）
Critical (5 条)
- CVE-2026-52735 - zebrad has consensus divergence via P2SH sigop undercount in pure-Rust disabled
CVE-2026-52735Critical
Am I affected You are affected if: 1. You run any version of `zebrad` up to and including `v4.4.1`. 2. Your node validates blocks on mainnet, testnet, or any… - CVE-2026-9558 - Mautic has Server-Side Template Injection (SSTI) in Theme Templates
CVE-2026-9558Critical
Summary A Server-Side Template Injection (SSTI) vulnerability exists in Mautic's theme engine. The platform renders uploaded Twig templates without a sandbox…
+NVD-Latest - CVE-2026-9559 - Mautic vulnerable to Path Traversal via Campaign Import
CVE-2026-9559Critical
Summary A path traversal vulnerability exists in the campaign import feature of Mautic 7. When extracting uploaded ZIP files during campaign imports, a flaw in…
+NVD-Latest - GHSA-g6g7-pvmx-m74p - 9router: Missing Authorization and OS Command Injection Critical
# Unauthenticated RCE via `/api/tunnel/tailscale-install` **Affected:** `9router` (npm package) — current master (`v0.4.39`). Summary `POST… - CVE-2026-52830 - fast-mcp-telegram: Bearer token path traversal bypasses reserved Telegram sessio
CVE-2026-52830Critical
## Summary fast-mcp-telegram validates HTTP Bearer tokens by joining the raw token string into a session-file path. The verifier rejects the exact reserved…
High (17 条)
- GHSA-f9ff-5x35-7gfw - Grackle: Fail-open authorization in the MCP tool layer lets scoped agents perfor High
## Summary Authorization for scoped (agent) MCP callers is enforced **inline, per tool**, and is applied inconsistently — several mutating tools silently omit… - CVE-2026-52736 - Zebra has block suppression via NU5 same-header body poisoning of sent-hash cach
CVE-2026-52736High
## Description Am I affected You are affected if: 1. You run any version of `zebrad` up to and including `v4.4.1`. 2. Your node accepts inbound P2P connections… - CVE-2026-9808 - Mautic has an Authorization Bypass in API v2 Endpoints
CVE-2026-9808High
Summary An authorization bypass vulnerability exists in the Mautic 7 API v2 endpoints (utilizing API Platform). Under certain conditions, roles configured with…
+NVD-Latest - CVE-2026-9809 - Mautic has Stored Cross-Site Scripting (XSS) in Projects Component
CVE-2026-9809High
Summary A stored Cross-Site Scripting (XSS) vulnerability exists in the Projects component of Mautic 7. When displaying project tags and popovers on…
+NVD-Latest - CVE-2026-50281 - Craft CMS's mass assignment via id in newAttributes during bulk duplicate overwr
CVE-2026-50281High
## Summary There is a mass-assignment flaw in the bulk-duplicate element action. Alice, holding only the permission to duplicate an entry she owns, submits an… - CVE-2026-50282 - Craft CMS Vulnerable to Unauthorized Deletion of Destination Folders During Forc
CVE-2026-50282High
We have identified an authorization issue in Craft CMS where a forced folder move can delete a conflicting destination folder without destination delete… - CVE-2026-52746 - jsonata: Malicious inputs to "$toMillis" function can cause resource exhaustion
CVE-2026-52746High
Impact In JSONata `<v2.2.0`, it is possible to craft non-matching inputs to the [$toMillis](https://docs.jsonata.org/date-time-functions#tomillis) function… - GHSA-322x-v876-g883 - @asymmetric-effort/nogginlessdom's Path Traversal in matchFileSnapshot allows ar High
## Summary The `matchFileSnapshot` function in `src/assertions/snapshots.ts` accepted a `filePath` parameter with zero validation. When snapshot update mode… - CVE-2026-52817 - Linuxfabrik Monitoring Plugins: Sudoers may be able to obtain privilege escalati
CVE-2026-52817High
Summary In the [Debian.sudoers](https://github.com/Linuxfabrik/monitoring-plugins/blob/main/assets/sudoers/Debian.sudoers) file, `apt-get` is allowed for the… - CVE-2026-49283 - SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authenticat
CVE-2026-49283High
## Summary SimpleSAMLphp's HTTP-Artifact receive path can treat an unsigned embedded SAML `Response` as cryptographically valid for the wrong IdP. In the… - CVE-2026-52829 - Zebra Address Book Aborted by IPv4-Mapped Mempool Misbehavior Update
CVE-2026-52829High
Am I affected You are affected if: 1. You run `zebrad` up to and including `v4.4.1`. 2. Your node listens on the default `[::]` address on a Linux host (the… - CVE-2026-49289 - SimpleSAMLphp has Possible DoS via XPath Transform
CVE-2026-49289High
## Summary This library turned out to be vulnerable to Denial-of-Service attacks using XPath transforms. A mitigation has been put in place to restrict the… - CVE-2026-50194 - Steeltoe vulnerable to management-port isolation bypass via spoofed Host header
CVE-2026-50194High
Summary When Steeltoe management endpoints are configured to listen on an alternate port (`Management:Endpoints:Port` is configured), the middleware… - CVE-2026-50196 - Steeltoe.Discovery.Eureka: Unrecognized DataCenterInfo.Name poisons entire regis
CVE-2026-50196High
Summary `DataCenterInfo.FromJson` throws `ArgumentException` for any `name` value other than `"MyOwn"` or `"Amazon"`, despite the Java Eureka specification… - CVE-2026-50200 - Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords
CVE-2026-50200High
Summary The `Sanitizer` component in the Environment actuator redacts configuration values by matching the configuration key name against a suffix list. The… - CVE-2026-2092 - Keycloak: Unauthorized access via improper validation of encrypted SAML assertio
CVE-2026-2092High
Keycloak's SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed… - CVE-2026-52834 - jxl-grid on 32-bit platforms has an out-of-bounds writes due to integer overflow
CVE-2026-52834High
Summary On 32-bit platforms, decoding a crafted image may lead to out-of-bounds writes due to integer overflow in length calculation. Details & PoC The test…
Medium (16 条)
- GHSA-c8w6-x74f-vmg3 - zebrad vulnerable to full node denial of service via crafted Sapling receiver in Medium
Am I affected You are affected if: 1. You run `zebrad` up to and including `v4.4.1`. 2. Your `zebrad.toml` sets `rpc.listen_addr` to a TCP address (RPC server… - CVE-2026-52732 - zebrad has mempool transaction admission denial via single-peer inbound queue sa
CVE-2026-52732Medium
Am I affected You are affected if: 1. You run `zebrad` up to and including `v4.4.1`. 2. Your node accepts inbound P2P connections (`network.listen_addr` is… - CVE-2026-52737 - Zebra has sync restart poisoning from single unauthenticated peer via above-look
CVE-2026-52737Medium
Am I affected You are affected if: 1. You run `zebrad` up to and including `v4.4.1`. 2. Your node accepts inbound P2P connections and is syncing or catching up… - CVE-2026-52738 - Zebra: Finalized address balance credit-first overflow on consensus-valid blocks
CVE-2026-52738Medium
Am I affected You are affected if: 1. You run `zebrad` up to and including `v4.4.1`. 2. Your node processes blocks on any Zcash network. Summary The finalized… - CVE-2026-52739 - Zebra: Repeated Non-Finalized Shielded Transaction Aborts Zebra Before Duplicate
CVE-2026-52739Medium
Am I affected You are affected if: 1. You run `zebrad` up to and including `v4.4.1`. 2. Your node processes blocks past the checkpoint height (non-finalized… - CVE-2026-9557 - Mautic Focus component Vulnerable to SSRF
CVE-2026-9557Medium
Summary A Server-Side Request Forgery (SSRF) vulnerability exists in the Mautic Focus component (`MauticFocusBundle`). Under certain conditions, insufficiency… - CVE-2026-9811 - Mautic has Stored Cross-Site Scripting (XSS) in Project Option Selector
CVE-2026-9811Medium
Summary A stored Cross-Site Scripting (XSS) vulnerability exists in the project selector component of Mautic 7. When rendering selection menus for associating… - CVE-2026-52733 - zebrad has persistent on-disk corruption of Sapling/Orchard subtree roots after
CVE-2026-52733Medium
Am I affected You are affected if: 1. You run `zebrad` up to and including `v4.4.1`. 2. Your node participates in a network where chain forks occur (mainnet,…
…另有 8 条 Medium 级漏洞（已省略）
Low (4 条)
- GHSA-443g-gwgp-49x4 - zebrad vulnerable to getblocks/getheaders locator CPU amplification via uncapped Low
Am I affected You are affected if: 1. You run `zebrad` up to and including `v4.4.1`. 2. Your node accepts inbound P2P connections. Summary The `read_getblocks`… - GHSA-h72h-ppcx-998p - Zebra has pre-handshake buffer capacity reservation based on attacker-claimed bo Low
Am I affected You are affected if: 1. You run `zebrad` up to and including `v4.4.1`. 2. Your node accepts inbound P2P connections (`network.listen_addr` is… - CVE-2026-50268 - Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding
CVE-2026-50268Low
Summary Configuring `encrypt:rsa:algorithm=OAEP` does not enable OAEP encryption. Due to an incorrect BouncyCastle transformation string, the `OAEP` setting…
…另有 1 条 Low 级漏洞（已省略）
🛡️ NVD-Latest（77 条）
Critical (6 条)
- CVE-2026-13768 Gardyn devices expose a privileged iothubowner key. Access to this key will allo
CVE-2026-13768Critical 10.0
CVE-2026-13768 CVSS:10.0 Gardyn devices expose a privileged iothubowner key. Access to this key will allow a malicious user to invoke an IoTHub Registry…
+PoC-in-GitHu - CVE-2026-27419 Subscriber Arbitrary File Upload in Zegen <= 1.1.9 versions.
CVE-2026-27419Critical 9.9
CVE-2026-27419 CVSS:9.9 Subscriber Arbitrary File Upload in Zegen <= 1.1.9 versions. 产品: - CVE-2026-4321 Improper neutralization of special elements used in an SQL command ('SQL injecti
CVE-2026-4321Critical 9.8
CVE-2026-4321 CVSS:9.8 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Raera - Ankara Web Design and… - CVE-2026-14544 A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnera
CVE-2026-14544Critical 9.8
CVE-2026-14544 CVSS:9.8 A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow… - CVE-2026-9725 The Printcart Web to Print Product Designer for WooCommerce plugin for WordPress
CVE-2026-9725Critical 9.1
CVE-2026-9725 CVSS:9.1 The Printcart Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up… - CVE-2026-27436 Editor Arbitrary Code Execution in Five Star Business Profile and Schema <= 2.3.
CVE-2026-27436Critical 9.1
CVE-2026-27436 CVSS:9.1 Editor Arbitrary Code Execution in Five Star Business Profile and Schema <= 2.3.19 versions. 产品:
High (71 条)
- CVE-2026-14460 Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Rese
CVE-2026-14460High 8.8
CVE-2026-14460 CVSS:8.8 Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument… - CVE-2026-14459 Improper neutralization of argument delimiters in a command ('argument injection
CVE-2026-14459High 8.8
CVE-2026-14459 CVSS:8.8 Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software…
+PoC-in-GitHu - CVE-2026-10054 In affected versions of Eclipse Theia (1.8.1 and later), the browser backend exp
CVE-2026-10054High 8.8
CVE-2026-10054 CVSS:8.8 In affected versions of Eclipse Theia (1.8.1 and later), the browser backend exposes privileged terminal RPC over WebSocket… - CVE-2026-56037 Deserialization of Untrusted Data vulnerability in Themify Themify Popup allows
CVE-2026-56037High 8.8
CVE-2026-56037 CVSS:8.8 Deserialization of Untrusted Data vulnerability in Themify Themify Popup allows Object Injection. This issue affects Themify Popup:… - CVE-2026-27414 Contributor PHP Object Injection in Werkstatt <= 4.8.3 versions.
CVE-2026-27414High 8.8
CVE-2026-27414 CVSS:8.8 Contributor PHP Object Injection in Werkstatt <= 4.8.3 versions. 产品: - CVE-2026-27060 Contributor PHP Object Injection in ARMember Premium <= 7.0 versions.
CVE-2026-27060High 8.8
CVE-2026-27060 CVSS:8.8 Contributor PHP Object Injection in ARMember Premium <= 7.0 versions. 产品: - CVE-2026-13125 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Playe
CVE-2026-13125High 8.8
CVE-2026-13125 CVSS:8.8 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed… - CVE-2026-10055 In Eclipse Theia since version 1.26.0, the backend /services/request-service RPC
CVE-2026-10055High 8.5
CVE-2026-10055 CVSS:8.5 In Eclipse Theia since version 1.26.0, the backend /services/request-service RPC accepts an attacker-controlled URL from any client… - CVE-2025-69094 Subscriber SQL Injection in Unicamp <= 2.2.2 versions.
CVE-2025-69094High 8.5
CVE-2025-69094 CVSS:8.5 Subscriber SQL Injection in Unicamp <= 2.2.2 versions. 产品: - CVE-2026-57278 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Playe
CVE-2026-57278High 8.3
CVE-2026-57278 CVSS:8.3 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed… - CVE-2026-57277 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Playe
CVE-2026-57277High 8.3
CVE-2026-57277 CVSS:8.3 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed… - CVE-2026-57276 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Playe
CVE-2026-57276High 8.3
CVE-2026-57276 CVSS:8.3 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed… - CVE-2026-57275 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Playe
CVE-2026-57275High 8.3
CVE-2026-57275 CVSS:8.3 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed… - CVE-2026-57274 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Playe
CVE-2026-57274High 8.3
CVE-2026-57274 CVSS:8.3 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed… - CVE-2026-57273 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Playe
CVE-2026-57273High 8.3
CVE-2026-57273 CVSS:8.3 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed… - CVE-2026-57272 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Playe
CVE-2026-57272High 8.3
CVE-2026-57272 CVSS:8.3 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed… - CVE-2026-57271 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Playe
CVE-2026-57271High 8.3
CVE-2026-57271 CVSS:8.3 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed… - CVE-2026-57270 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Playe
CVE-2026-57270High 8.3
CVE-2026-57270 CVSS:8.3 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed… - CVE-2026-57269 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Playe
CVE-2026-57269High 8.3
CVE-2026-57269 CVSS:8.3 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed… - CVE-2026-57268 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Playe
CVE-2026-57268High 8.3
CVE-2026-57268 CVSS:8.3 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed… - CVE-2026-57267 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Playe
CVE-2026-57267High 8.3
CVE-2026-57267 CVSS:8.3 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed… - CVE-2026-57266 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Playe
CVE-2026-57266High 8.3
CVE-2026-57266 CVSS:8.3 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed… - CVE-2026-57265 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Playe
CVE-2026-57265High 8.3
CVE-2026-57265 CVSS:8.3 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed… - CVE-2026-57264 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Playe
CVE-2026-57264High 8.3
CVE-2026-57264 CVSS:8.3 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed… - CVE-2026-13132 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Playe
CVE-2026-13132High 8.3
CVE-2026-13132 CVSS:8.3 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed… - CVE-2026-13131 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Playe
CVE-2026-13131High 8.3
CVE-2026-13131 CVSS:8.3 GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed… - CVE-2026-14336 PIA's OIDC issuer allowlist for Jenkins tokens uses a bare string-prefix check (
CVE-2026-14336High 8.2
CVE-2026-14336 CVSS:8.2 PIA's OIDC issuer allowlist for Jenkins tokens uses a bare string-prefix check (issuer.startswith(' https://ci.eclipse.org ') in… - CVE-2026-42382 Unauthenticated Local File Inclusion in Audrey <= 1.5 versions.
CVE-2026-42382High 8.1
CVE-2026-42382 CVSS:8.1 Unauthenticated Local File Inclusion in Audrey <= 1.5 versions. 产品: - CVE-2026-27412 Unauthenticated Local File Inclusion in Pearl - Corporate Business <= 3.4.10 ver
CVE-2026-27412High 8.1
CVE-2026-27412 CVSS:8.1 Unauthenticated Local File Inclusion in Pearl - Corporate Business <= 3.4.10 versions. 产品: - CVE-2025-58902 Unauthenticated Local File Inclusion in Lighthouse <= 1.2.12 versions.
CVE-2025-58902High 8.1
CVE-2025-58902 CVSS:8.1 Unauthenticated Local File Inclusion in Lighthouse <= 1.2.12 versions. 产品: - CVE-2026-8147 In MLflow versions prior to 3.14.0, when running with authentication enabled, th
CVE-2026-8147High 8.1
CVE-2026-8147 CVSS:8.1 In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization… - CVE-2026-5821 The Image Optimizer plugin for WordPress is vulnerable to arbitrary file deletio
CVE-2026-5821High 8.1
CVE-2026-5821 CVSS:8.1 The Image Optimizer plugin for WordPress is vulnerable to arbitrary file deletion in versions up to and including 1.7.4. This is due to… - CVE-2026-4967 In IMS, there is a possible out of bounds read due to a missing bounds check. Th
CVE-2026-4967High 7.5
CVE-2026-4967 CVSS:7.5 In IMS, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no… - CVE-2026-14352 The AR for WooCommerce plugin for WordPress is vulnerable to Directory Traversal
CVE-2026-14352High 7.5
CVE-2026-14352 CVSS:7.5 The AR for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.40 via the… - CVE-2026-14327 The AR for WordPress plugin for WordPress is vulnerable to Directory Traversal i
CVE-2026-14327High 7.5
CVE-2026-14327 CVSS:7.5 The AR for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.40 via the… - CVE-2026-39448 Unauthenticated Broken Access Control in NOWPayments for WooCommerce <= 1.4.0 ve
CVE-2026-39448High 7.5
CVE-2026-39448 CVSS:7.5 Unauthenticated Broken Access Control in NOWPayments for WooCommerce <= 1.4.0 versions. 产品: - CVE-2026-11946 An unauthenticated remote attacker can exhaust server memory via the GetEndpoint
CVE-2026-11946High 7.5
CVE-2026-11946 CVSS:7.5 An unauthenticated remote attacker can exhaust server memory via the GetEndpoints Discovery Service in open62541. The endpointUrl field… - CVE-2025-69134 Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Hel
CVE-2025-69134High 7.5
CVE-2025-69134 CVSS:7.5 Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper <= 1.1.4 versions. 产品: - CVE-2025-69133 Subscriber Local File Inclusion in Tourmaster <= 5.4.5 versions.
CVE-2025-69133High 7.5
CVE-2025-69133 CVSS:7.5 Subscriber Local File Inclusion in Tourmaster <= 5.4.5 versions. 产品: - CVE-2026-8441 The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via
CVE-2026-8441High 7.5
CVE-2026-8441 CVSS:7.5 The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'notinstring' parameter of the wprp_load_more_revs… - CVE-2026-13369 The Ninja Forms - File Uploads plugin for WordPress is vulnerable to Arbitrary F
CVE-2026-13369High 7.5
CVE-2026-13369 CVSS:7.5 The Ninja Forms - File Uploads plugin for WordPress is vulnerable to Arbitrary File Read via the attach_files() function in versions up… - CVE-2026-13251 The Perfmatters plugin for WordPress is vulnerable to Directory Traversal in all
CVE-2026-13251High 7.5
CVE-2026-13251 CVSS:7.5 The Perfmatters plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.6.4 via the 's'… - CVE-2026-9563 In Eclipse Parsson published Maven Central artifacts before version 1.1.8, the J
CVE-2026-9563High 7.5
CVE-2026-9563 CVSS:7.5 In Eclipse Parsson published Maven Central artifacts before version 1.1.8, the JSON parser did not enforce a default maximum on the… - CVE-2026-33592 An unauthenticated remote attacker can exhaust server memory via the FindServers
CVE-2026-33592High 7.5
CVE-2026-33592 CVSS:7.5 An unauthenticated remote attacker can exhaust server memory via the FindServers Discovery Service in open62541. The serverUris field… - CVE-2026-14249 The Request a Quote plugin for WordPress is vulnerable to Code Injection in vers
CVE-2026-14249High 7.5
CVE-2026-14249 CVSS:7.5 The Request a Quote plugin for WordPress is vulnerable to Code Injection in versions up to, and including, 2.5.5 via the… - CVE-2026-13341 A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server p
CVE-2026-13341High 7.4
CVE-2026-13341 CVSS:7.4 A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow a remote… - CVE-2026-53478 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release ver
CVE-2026-53478High 7.2
CVE-2026-53478 CVSS:7.2 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version… - CVE-2026-49815 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release ver
CVE-2026-49815High 7.2
CVE-2026-49815 CVSS:7.2 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version… - CVE-2026-49814 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release ver
CVE-2026-49814High 7.2
CVE-2026-49814 CVSS:7.2 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version… - CVE-2026-9148 The Comments – wpDiscuz plugin for WordPress is vulnerable to Stored Cross-Site
CVE-2026-9148High 7.2
CVE-2026-9148 CVSS:7.2 The Comments – wpDiscuz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the guest commenter 'Website' field in… - CVE-2026-13040 The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vuln
CVE-2026-13040High 7.2
CVE-2026-13040 CVSS:7.2 The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… - CVE-2026-57348 Unauthenticated Server Side Request Forgery (SSRF) in Paid Member Subscriptions
CVE-2026-57348High 7.2
CVE-2026-57348 CVSS:7.2 Unauthenticated Server Side Request Forgery (SSRF) in Paid Member Subscriptions <= 3.0.4 versions. 产品: - CVE-2026-9834 The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plug
CVE-2026-9834High 7.2
CVE-2026-9834 CVSS:7.2 The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to OS Command Injection… - CVE-2026-57356 Unauthenticated Cross Site Scripting (XSS) in MC Woocommerce Wishlist <= 1.9.19
CVE-2026-57356High 7.1
CVE-2026-57356 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in MC Woocommerce Wishlist <= 1.9.19 versions. 产品: - CVE-2026-57351 Unauthenticated Cross Site Scripting (XSS) in HandL UTM Grabber <= 2.9.2 version
CVE-2026-57351High 7.1
CVE-2026-57351 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in HandL UTM Grabber <= 2.9.2 versions. 产品: - CVE-2026-57350 Unauthenticated Cross Site Scripting (XSS) in WP Debugging <= 2.12.2 versions.
CVE-2026-57350High 7.1
CVE-2026-57350 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in WP Debugging <= 2.12.2 versions. 产品: - CVE-2026-57349 Unauthenticated Cross Site Scripting (XSS) in WPeMatico RSS Feed Fetcher <= 2.8.
CVE-2026-57349High 7.1
CVE-2026-57349 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in WPeMatico RSS Feed Fetcher <= 2.8.17 versions. 产品: - CVE-2026-57345 Unauthenticated Cross Site Scripting (XSS) in Internal Links Manager <= 3.0.3 ve
CVE-2026-57345High 7.1
CVE-2026-57345 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Internal Links Manager <= 3.0.3 versions. 产品: - CVE-2026-57344 Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.4.2 versio
CVE-2026-57344High 7.1
CVE-2026-57344 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.4.2 versions. 产品: - CVE-2026-57343 Unauthenticated Cross Site Scripting (XSS) in Real Estate 7 <= 3.5.9 versions.
CVE-2026-57343High 7.1
CVE-2026-57343 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Real Estate 7 <= 3.5.9 versions. 产品: - CVE-2026-27430 Unauthenticated Cross Site Scripting (XSS) in TheFox <= 3.9.76 versions.
CVE-2026-27430High 7.1
CVE-2026-27430 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in TheFox <= 3.9.76 versions. 产品: - CVE-2026-27426 Unauthenticated Cross Site Scripting (XSS) in Automotive Car Dealership Business
CVE-2026-27426High 7.1
CVE-2026-27426 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Automotive Car Dealership Business <= 13.3.3 versions. 产品: - CVE-2026-27425 Unauthenticated Cross Site Scripting (XSS) in Automotive Listings <= 18.6 versio
CVE-2026-27425High 7.1
CVE-2026-27425 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Automotive Listings <= 18.6 versions. 产品: - CVE-2026-27408 Unauthenticated Cross Site Scripting (XSS) in NativeChurch <= 4.8.8.2 versions.
CVE-2026-27408High 7.1
CVE-2026-27408 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in NativeChurch <= 4.8.8.2 versions. 产品: - CVE-2026-27404 Unauthenticated Cross Site Scripting (XSS) in LMS <= 9.7 versions.
CVE-2026-27404High 7.1
CVE-2026-27404 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in LMS <= 9.7 versions. 产品: - CVE-2026-27402 Unauthenticated Cross Site Scripting (XSS) in Kids Life | Children School WordPr
CVE-2026-27402High 7.1
CVE-2026-27402 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Kids Life | Children School WordPress <= 5.2 versions. 产品: - CVE-2025-69156 Unauthenticated Cross Site Scripting (XSS) in Kids Zone - Children WordPress The
CVE-2025-69156High 7.1
CVE-2025-69156 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Kids Zone - Children WordPress Theme <= 5.4 versions. 产品: - CVE-2025-69155 Unauthenticated Cross Site Scripting (XSS) in Fitness Zone WordPress Theme <= 5.
CVE-2025-69155High 7.1
CVE-2025-69155 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Fitness Zone WordPress Theme <= 5.7 versions. 产品: - CVE-2025-69154 Unauthenticated Cross Site Scripting (XSS) in SpaLab | Beauty Salon WordPress Th
CVE-2025-69154High 7.1
CVE-2025-69154 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in SpaLab | Beauty Salon WordPress Theme <= 6.7 versions. 产品: - CVE-2025-69153 Unauthenticated Cross Site Scripting (XSS) in Trendy Travel <= 6.7 versions.
CVE-2025-69153High 7.1
CVE-2025-69153 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Trendy Travel <= 6.7 versions. 产品: - CVE-2025-69152 Unauthenticated Cross Site Scripting (XSS) in Artale | Wedding Photography WordP
CVE-2025-69152High 7.1
CVE-2025-69152 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Artale | Wedding Photography WordPress <= 2.2.2 versions. 产品:
⚔️ Sploitus（81 条）
Unknown (81 条)
- Exploit for CVE-2026-54998 exploit
CVE-2026-54998
Exploit for CVE-2026-54998 exploit - OIBSIP_Cybersecurity_Task9 exploit
OIBSIP_Cybersecurity_Task9 exploit
…另有 79 条 Unknown 级漏洞（已省略）
🤖 漏洞情报自动汇总 · 2026-07-05 · 数据来源: NVD / GitHub Advisory / Sploitus / CISA-KEV