📊 2026-07-13 漏洞情报日报 · 200 条 · 高危 102
每日漏洞情报汇总 · 2026-07-13
📊 2026-07-13 漏洞情报日报
📋 共 200 条
🔥 高危/严重 102 条
🐙 GitHub-Advisory 32 条 🔥21
🛡️ NVD-Latest 81 条 🔥81
⚔️ Sploitus 87 条
🤖 今日安全态势分析
🎯 今日重点关注
- CVE-2026-54089 (CVSS 9.8, File Browser): 认证绕过漏洞。当使用代理认证模式时，未授权攻击者可通过构造伪造的HTTP头直接冒充任意用户（包括管理员），无需凭证即可接管文件管理权限。
- CVE-2026-61447 (CVSS 10.0, PraisonAI): 远程代码执行。LLM生成的Python代码在`CodeAgent._execute_python()`中未经沙箱限制直接执行，攻击者可借助恶意输入实现完全控制。
- CVE-2026-15282 (CVSS 9.8, WordPress Instant Appointment): 未授权任意文件上传。插件文件类型校验缺失，允许未认证攻击者上传恶意脚本，导致服务器完全沦陷。
- CVE-2026-54067 (SiYuan): 存储型XSS转RCE。通过CSS片段中的``标签闭合，插入恶意JavaScript，在管理员查看笔记时触发任意代码执行。
- CVE-2026-54072 (Authorizer): OAuth2令牌泄露。`/authorize`端点未验证`redirect_uri`，攻击者可诱骗用户授权后将令牌重定向到恶意服务器，实现账户劫持。
📈 威胁趋势
- 远程代码执行（RCE）： 占据今日漏洞的主流。PraisonAI（CVE-2026-61447, CVE-6-61445）、Langroid框架（CVE-2026-54769）、WordPress插件（CVE-2026-15282, CVE-6-14894）以及SiYuan笔记（CVE-2026-54067）均存在严重RCE风险。攻击面涵盖LLM工具链、Web插件及数据库组件。
- 认证与授权绕过： File Browser的代理头伪造（CVE-2026-54089）与Apache IoTDB的会话过期缺陷（CVE-2026-28564）可导致完全接管权限。Authorizer的跳转校验缺失（CVE-2026-54072）则直指OAuth令牌安全。
- 供应链与恶意包： Rust生态`exploration` crate被发现包含远程下载并执行恶意载荷的后门代码，虽传播时间短，但需警惕类似投毒事件。
- 不安全反射与注入： Apache IoTDB（CVE-2026-40008）与PrestaShop模块（CVE-2026-54159）的PHP对象注入，均允许攻击者通过外部输入控制类实例化或缓存逻辑，属于典型高危利用模式。
🛡️ 缓解建议
- 立即隔离或升级受影响组件： 优先将PraisonAI升级至≥1.6.78与≥4.6.78版本；将Langroid升级至≥0.65.2；为SiYuan、File Browser、WordPress插件及PrestaShop模块安装厂商发布的最新安全补丁。
- 强化配置与网络层防护：`等标签闭合的恶意请求。
- 审查并限制LLM工具的执行权限： 对所有集成LLM自主代码执行（如CodeAgent）的应用，强制启用AST静态分析、限制导入模块白名单、并运行在最小权限的沙箱或容器中。
- 排查并移除可疑依赖： 在Rust项目中检查是否曾引入`exploration` crate（版本2026-06-02发布），若存在立即清除并审计系统异常行为。同时核对所有第三方包的来源完整性。
🐙 GitHub-Advisory（32 条）
Critical (10 条)
- CVE-2026-54088 - File Browser: Command Injection via Authentication Hook Shell Substitution (Pre
CVE-2026-54088Critical 4.0
## Overview The Hook Authentication feature in File Browser allows administrators to delegate login verification to an external shell command. User-supplied…
+PoC-in-GitHu - CVE-2026-54089 - File Browser: Authentication Bypass via Proxy Auth Header Forgery
CVE-2026-54089Critical 3.1
## Summary When FileBrowser is configured with proxy authentication (`auth.method=proxy`), any unauthenticated attacker who can reach the server directly can… - CVE-2026-54067 - SiYuan: Stored XSS to RCE via CSS-snippet <style> breakout in renderSnippet()
CVE-2026-54067Critical
Summary A CSS snippet body containing `</style>` breaks out of its surrounding `<style>` tag when `renderSnippet()` interpolates it via `insertAdjacentHTML`. A… - CVE-2026-54072 - Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attack
CVE-2026-54072Critical
## Summary The `/authorize` endpoint accepts any `redirect_uri` without validating it against `AllowedOrigins`. When `response_type=token` or… - CVE-2026-54069 - SiYuan: Unauthenticated Admin API Access via Blanket chrome-extension:// Origin
CVE-2026-54069Critical
## Summary SiYuan Note's kernel HTTP server unconditionally trusts all `chrome-extension://` origins, granting `RoleAdministrator` access to every installed… - GHSA-99j7-fhr2-xfj4 - `exploration` was removed from crates.io for malicious code Critical
A method within the `exploration` crate attempted to download and execute a payload from a remote site. The malicious crate had 1 version published on… - CVE-2026-54158 - SiYuan: Stored XSS to RCE via attribute-view cell rendering in genAVValueHTML()
CVE-2026-54158Critical
Summary The attribute-view (database) cell renderer `genAVValueHTML` interpolates cell content raw in four of its branches: `text`, `url`, `phone`, and… - CVE-2026-54159 - prestashop/ps_facetedsearch: PHP Object Injection in faceted search cache allows
CVE-2026-54159Critical
Impact A PHP Object Injection vulnerability affects the PrestaShop module `ps_facetedsearch`. The module rebuilds the selected search filters from the request… - CVE-2026-50551 - SiYuan: Stored XSS to RCE via Unsanitized Attribute View Asset Cell Content
CVE-2026-50551Critical
SiYuan v3.6.5 and earlier versions contain a stored cross-site scripting (XSS) vulnerability in the Attribute View (database) asset cell renderer that… - GHSA-g936-7jqj-mwv8 - TSDProxy: Internal proxy auth token forwarded to backend services enables manage Critical
## Description A vulnerability was discovered in TSDProxy where it forwards its internal per-process authentication token to all proxied backend services. When…
High (11 条)
- CVE-2026-49866 - libp2p: CPU DoS via oversized IHAVE and IWANT control message arrays
CVE-2026-49866High
Summary gossipsub processes IHAVE and IWANT control messages by iterating every received message ID synchronously before doing anything with the results. There… - CVE-2026-54066 - SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode ar
CVE-2026-54066High
## Summary The patch for CVE-2026-41894 ("Path Traversal via Double URL Encoding") sanitized the `/export/` route but the **identical root cause remains in the… - CVE-2026-54063 - Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Pan
CVE-2026-54063High
## Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS) Summary The `checkSheet()` function in `github.com/xuri/excelize/v2` uses an… - CVE-2026-54070 - SiYuan: Stored XSS in Bazaar marketplace via package README event handlers
CVE-2026-54070High
## Summary `renderPackageREADME` in `kernel/bazaar/readme.go` renders a Bazaar package README from Markdown to HTML with the lute engine and… - CVE-2026-54071 - BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/p
CVE-2026-54071High
## Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py Summary BabelDOC's vendored PDF parser… - GHSA-qv4m-m73m-8hj7 - NotrinosERP: Authenticated arbitrary file upload leads to remote code execution High
#### Summary An authenticated user with the HR "Manage Employees" permission (`SA_EMPLOYEE`) can upload a file with an arbitrary extension through the employee… - GHSA-xrmc-c5cg-rv7x - SafeInstall agent guard shell parsing can miss raw package execution High
## Summary SafeInstall CLI through 0.10.1 can fail to recognize some package-manager and registry-runner commands in its agent guard. Case-variant launcher… - GHSA-wm45-qh3g-v83f - mcp-atlassian: Arbitrary server-side file read via attachment upload High
Summary A client that can invoke MCP tools can read **arbitrary files from the server host** and exfiltrate them as Atlassian attachments. The… - GHSA-g5r6-gv6m-f5jv - mcp-atlassian: Arbitrary file read via missing path validation in confluence_upl High
Summary `confluence_upload_attachment` passes `file_path` directly to `open(file_path, "rb")` with no path validation. Any authenticated MCP client — or an AI… - GHSA-h4g2-xfmw-q2c9 - Clauster: Non-loopback deployments can serve the dashboard unauthenticated when High
Summary A Clauster instance bound to a **non-loopback** address (e.g. `0.0.0.0` or a LAN IP) can serve the entire dashboard and its API **without any… - CVE-2026-54174 - melange: Incomplete package integrity verification allows data section substitut
CVE-2026-54174High
Previously, Apko verified the control section hash (`.PKGINFO` etc.) against the signed `APKINDEX`, but never verified the data section hash (the actual…
Medium (10 条)
- CVE-2026-49858 - API Platform Core vulnerable to cross-user attribute leak in JSON:API and HAL it
CVE-2026-49858Medium
Impact `#[ApiProperty(security: ...)]` is evaluated per request to decide whether a property is exposed. The `componentsCache` arrays in… - CVE-2026-5078 - morgan vulnerable to Log Forging via unneutralized control characters in :remote
CVE-2026-5078Medium
Impact Morgan's `:remote-user` token extracts the Basic auth username from the `Authorization` header and writes it to the log stream without neutralizing… - CVE-2026-49865 - Kimai has Server-Side Request Forgery in Invoice PDF Rendering via Markdown Imag
CVE-2026-49865Medium
Summary Kimai 2.56.0 contains a server-side request forgery vulnerability in its invoice PDF preview and generation workflow. If an attacker can control… - CVE-2026-49977 - tarteaucitron: data-cookie attribute can be used to delete arbitrary cookies
CVE-2026-49977Medium
Summary tarteaucitron provides a list of cookies and buttons to delete them. If an attacker can write HTML with data attributes, they could create an element… - GHSA-489g-7rxv-6c8q - MCP Atlassian: DNS-rebinding TOCTOU bypass of the SSRF fix (CVE-2026-27826)
CVE-2026-27826Medium
Summary GHSA-7r34-79r5-rcc9's fix added `validate_url_for_ssrf`, which resolves the attacker-controlled `X-Atlassian-{Jira,Confluence}-Url` header host **once… - GHSA-9mqm-qcwf-5qhg - CredSweeper: Recursive archive size-limit bypass in deep scanner allows crafted Medium
Summary CredSweeper's deep scanner does not enforce `recursive_limit_size` as a hard limit. Several recursive scanners fully decompress or fully read… - CVE-2026-54068 - SiYuan: Unauthenticated SQLite Data Exfiltration via Template Injection in /api/
CVE-2026-54068Medium
Summary The `/api/icon/getDynamicIcon` endpoint is explicitly excluded from authentication in SiYuan's kernel router (`router.go`, "不需要鉴权" -- no auth needed).… - CVE-2026-54136 - Windmill: Resource-scoped API tokens can read script contents outside their allo
CVE-2026-54136Medium
Summary A resource-scoped API token can read script contents outside its allowed path scope via `GET /api/w/{workspace}/scripts/list_search`. This appears to…
…另有 2 条 Medium 级漏洞（已省略）
Low (1 条)
- CVE-2026-48598 - Tesla vulnerable to multipart part smuggling via unescaped `content-disposition`
CVE-2026-48598Low
Summary `Tesla.Multipart.part_headers_for_disposition/1` interpolates `Content-Disposition` parameter values (field name, filename, and other opts) verbatim…
🛡️ NVD-Latest（81 条）
Critical (16 条)
- CVE-2026-61447 PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAg
CVE-2026-61447Critical 10.0
CVE-2026-61447 CVSS:10.0 PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execute_python() that executes LLM-generated… - CVE-2026-54769 Langroid is a framework for building large-language-model-powered applications.
CVE-2026-54769Critical 10.0
CVE-2026-54769 CVSS:10.0 Langroid is a framework for building large-language-model-powered applications. Versions prior to 0.65.2 are vulnerable to a critical…
+GitHub-Advis - CVE-2026-61445 PraisonAI before 4.6.78 contains arbitrary file write and command execution vuln
CVE-2026-61445Critical 9.9
CVE-2026-61445 CVSS:9.9 PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the AICoder component due to missing… - CVE-2026-60090 PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argume
CVE-2026-60090Critical 9.8
CVE-2026-60090 CVSS:9.8 PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store… - CVE-2026-40008 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection
CVE-2026-40008Critical 9.8
CVE-2026-40008 CVSS:9.8 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache IoTDB. The pipe processor… - CVE-2026-28564 Insufficient Session Expiration, Authentication Bypass by Capture-replay vulnera
CVE-2026-28564Critical 9.8
CVE-2026-28564 CVSS:9.8 Insufficient Session Expiration, Authentication Bypass by Capture-replay vulnerability in Apache IoTDB. REST Basic Authentication… - CVE-2026-15282 The Instant Appointment plugin for WordPress is vulnerable to arbitrary file upl
CVE-2026-15282Critical 9.8
CVE-2026-15282 CVSS:9.8 The Instant Appointment plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the…
+PoC-in-GitHu - CVE-2026-14894 The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to
CVE-2026-14894Critical 9.8
CVE-2026-14894 CVSS:9.8 The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and…
+PoC-in-GitHu - CVE-2026-12116 A vulnerability in the Xerte Online Tools allows for RCE through the antivirus b
CVE-2026-12116Critical 9.8
CVE-2026-12116 CVSS:9.8 A vulnerability in the Xerte Online Tools allows for RCE through the antivirus binary path in the tools server settings, which can be… - CVE-2026-56291 The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary
CVE-2026-56291Critical 9.8
CVE-2026-56291 CVSS:9.8 The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and…
+CISA-KEV - CVE-2026-5955 Improper neutralization of special elements used in an SQL command ('SQL injecti
CVE-2026-5955Critical 9.8
CVE-2026-5955 CVSS:9.8 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Inrove Software and Internet… - CVE-2026-15378 A flaw was found in the `guardrails-detectors` component. This vulnerability all
CVE-2026-15378Critical 9.3
CVE-2026-15378 CVSS:9.3 A flaw was found in the `guardrails-detectors` component. This vulnerability allows a remote attacker to perform a blind Server-Side… - CVE-2026-2342 Improper neutralization of input during web page generation ('cross-site scripti
CVE-2026-2342Critical 9.3
CVE-2026-2342 CVSS:9.3 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OceanicSoft Informatics Systems… - CVE-2026-40005 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v
CVE-2026-40005Critical 9.1
CVE-2026-40005 CVSS:9.1 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB. An attacker can write… - CVE-2026-15300 The GEO my WP plugin for WordPress was vulnerable to SQL Injection via the 'dist
CVE-2026-15300Critical 9.1
CVE-2026-15300 CVSS:9.1 The GEO my WP plugin for WordPress was vulnerable to SQL Injection via the 'distance', 'lat', and 'lng' parameters in versions up to,… - CVE-2026-14261 A vulnerability in the Xerte Online Tools allows for authentication bypass and r
CVE-2026-14261Critical 9.1
CVE-2026-14261 CVSS:9.1 A vulnerability in the Xerte Online Tools allows for authentication bypass and remote code execution via reinstallation through the…
High (65 条)
- CVE-2026-15484 A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected elemen
CVE-2026-15484High 8.8
CVE-2026-15484 CVSS:8.8 A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the function sub_41EC14 of the file… - CVE-2026-15483 A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impac
CVE-2026-15483High 8.8
CVE-2026-15483 CVSS:8.8 A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function sub_41EC14 of the file… - CVE-2026-15481 A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This v
CVE-2026-15481High 8.8
CVE-2026-15481 CVSS:8.8 A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This vulnerability affects the function ipoa_test of the file… - CVE-2026-15480 A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affect
CVE-2026-15480High 8.8
CVE-2026-15480 CVSS:8.8 A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start_httpd of the file /sbin/rc of the… - CVE-2026-1359 The Genolve – AI image AI video generation plugin for WordPress is vulnerable to
CVE-2026-1359High 8.8
CVE-2026-1359 CVSS:8.8 The Genolve – AI image AI video generation plugin for WordPress is vulnerable to unauthorized modification of data due to a missing… - CVE-2026-15155 The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugi
CVE-2026-15155High 8.8
CVE-2026-15155 CVSS:8.8 The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Authenticated Account… - CVE-2025-6784 The Code Engine plugin for WordPress is vulnerable to Remote Code Execution in a
CVE-2025-6784High 8.8
CVE-2025-6784 CVSS:8.8 The Code Engine plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 0.3.5 via the… - CVE-2026-2354 The Swiss Toolkit For WP plugin for WordPress is vulnerable to arbitrary file up
CVE-2026-2354High 8.8
CVE-2026-2354 CVSS:8.8 The Swiss Toolkit For WP plugin for WordPress is vulnerable to arbitrary file upload due to a flawed file type validation bypass in the… - CVE-2026-14262 The Simple JWT Login – Allows you to use JWT on REST endpoints. plugin for WordP
CVE-2026-14262High 8.8
CVE-2026-14262 CVSS:8.8 The Simple JWT Login – Allows you to use JWT on REST endpoints. plugin for WordPress is vulnerable to Authentication Bypass to… - CVE-2026-13353 The WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel pl
CVE-2026-13353High 8.8
CVE-2026-13353 CVSS:8.8 The WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel plugin for WordPress is vulnerable to Remote Code… - CVE-2026-13756 The WP Grid Builder plugin for WordPress is vulnerable to Privilege Escalation i
CVE-2026-13756High 8.8
CVE-2026-13756 CVSS:8.8 The WP Grid Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.3.3. This is due… - CVE-2026-15070 The Salon Booking System – Free Version plugin for WordPress is vulnerable to Cr
CVE-2026-15070High 8.8
CVE-2026-15070 CVSS:8.8 The Salon Booking System – Free Version plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and… - CVE-2026-4275 The Divi Torque Lite – Divi Theme, Divi Builder & Extra Theme plugin for WordPre
CVE-2026-4275High 8.8
CVE-2026-4275 CVSS:8.8 The Divi Torque Lite – Divi Theme, Divi Builder & Extra Theme plugin for WordPress is vulnerable to Cross-Site Request Forgery in all… - CVE-2026-61426 PraisonAI before 1.7.3 contains an insecure default configuration that binds to
CVE-2026-61426High 8.6
CVE-2026-61426 CVSS:8.6 PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key requirement and wildcard… - CVE-2026-61429 PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerabi
CVE-2026-61429High 8.5
CVE-2026-61429 CVSS:8.5 PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI/Chromium backend that allows… - CVE-2026-58281 Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an u
CVE-2026-58281High 8.3
CVE-2026-58281 CVSS:8.3 Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. 产品: - CVE-2026-54423 In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nod
CVE-2026-54423High 8.2
CVE-2026-54423 CVSS:8.2 In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously… - CVE-2026-4256 Improper neutralization of special elements used in an LDAP query ('LDAP injecti
CVE-2026-4256High 8.2
CVE-2026-4256 CVSS:8.2 Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in PEAKUP Technology Inc. PassGate…
+GitHub-Advis+PoC-in-GitHu - CVE-2026-7655 The SureCart plugin for WordPress is vulnerable to privilege escalation via acco
CVE-2026-7655High 8.1
CVE-2026-7655 CVSS:8.1 The SureCart plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 4.2.3.… - CVE-2026-54771 Langroid is a framework for building large-language-model-powered applications.
CVE-2026-54771High 8.1
CVE-2026-54771 CVSS:8.1 Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.3, a Langroid application…
+GitHub-Advis - CVE-2026-12598 The LoginPress Pro plugin for WordPress is vulnerable to authentication bypass i
CVE-2026-12598High 8.1
CVE-2026-12598 CVSS:8.1 The LoginPress Pro plugin for WordPress is vulnerable to authentication bypass in versions up to and including 6.2.3 via the Spotify… - CVE-2026-12597 The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass v
CVE-2026-12597High 8.1
CVE-2026-12597 CVSS:8.1 The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via the GitHub OAuth callback in versions up to, and… - CVE-2026-12595 The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass v
CVE-2026-12595High 8.1
CVE-2026-12595 CVSS:8.1 The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via Unverified OAuth Email in all versions up to and… - CVE-2026-15293 The WP Business Intelligence Lite plugin for WordPress is vulnerable to authoriz
CVE-2026-15293High 8.0
CVE-2026-15293 CVSS:8.0 The WP Business Intelligence Lite plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including,… - CVE-2026-61439 PraisonAI versions before 4.6.78 contain a prompt injection defense misconfigura
CVE-2026-61439High 7.5
CVE-2026-61439 CVSS:7.5 PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold defaults to CRITICAL… - CVE-2026-56303 Capgo before 12.128.2 contains an information disclosure vulnerability in the fi
CVE-2026-56303High 7.5
CVE-2026-56303 CVSS:7.5 Capgo before 12.128.2 contains an information disclosure vulnerability in the find_apikey_by_value PostgreSQL function marked SECURITY… - CVE-2026-9282 The W3 Total Cache plugin for WordPress is vulnerable to Directory Traversal in
CVE-2026-9282High 7.5
CVE-2026-9282 CVSS:7.5 The W3 Total Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.4 via the… - CVE-2026-4661 The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPr
CVE-2026-4661High 7.5
CVE-2026-4661 CVSS:7.5 The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable to time-based blind SQL Injection via…
+GitHub-Advis - CVE-2026-15335 The Booking Package plugin for WordPress is vulnerable to generic SQL Injection
CVE-2026-15335High 7.5
CVE-2026-15335 CVSS:7.5 The Booking Package plugin for WordPress is vulnerable to generic SQL Injection via 'email' Form Parameter (form<N>) in all versions up… - CVE-2026-15338 The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Lo
CVE-2026-15338High 7.5
CVE-2026-15338 CVSS:7.5 The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and… - CVE-2026-40454 Out-of-bounds Read, Improper Input Validation vulnerability in Apache IoTDB C++
CVE-2026-40454High 7.5
CVE-2026-40454 CVSS:7.5 Out-of-bounds Read, Improper Input Validation vulnerability in Apache IoTDB C++ client. Out-of-bounds reads in IoTDB C++ client TsBlock… - CVE-2026-40452 Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB.
CVE-2026-40452High 7.5
CVE-2026-40452 CVSS:7.5 Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB. Authorization bypass in /rest/v2/fastLastQuery exposes… - CVE-2026-40007 Uncontrolled Recursion, Uncontrolled Resource Consumption vulnerability in Apach
CVE-2026-40007High 7.5
CVE-2026-40007 CVSS:7.5 Uncontrolled Recursion, Uncontrolled Resource Consumption vulnerability in Apache IoTDB. When pipe_air_gap_receiver_enabled=true, the… - CVE-2026-40006 Memory Allocation with Excessive Size Value, Allocation of Resources Without Lim
CVE-2026-40006High 7.5
CVE-2026-40006 CVSS:7.5 Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits or Throttling, Missing Authentication for Critical… - CVE-2026-13347 The Hide My WP Lite plugin for WordPress is vulnerable to Arbitrary File Read in
CVE-2026-13347High 7.5
CVE-2026-13347 CVSS:7.5 The Hide My WP Lite plugin for WordPress is vulnerable to Arbitrary File Read in versions up to and including 1.3 via the he_wrapper_js… - CVE-2026-12685 The EscortWP escortwp WordPress theme through 3.6.2 was distributed with a vendo
CVE-2026-12685High 7.5
CVE-2026-12685 CVSS:7.5 The EscortWP escortwp WordPress theme through 3.6.2 was distributed with a vendor-authored, obfuscated backdoor that lets an… - CVE-2026-15291 The Chat Help – Click to Chat Button & Form plugin for WordPress is vulnerable t
CVE-2026-15291High 7.5
CVE-2026-15291 CVSS:7.5 The Chat Help – Click to Chat Button & Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,… - CVE-2026-15290 The Ultimate Member – User Profile, Registration, Login, Member Directory, Conte
CVE-2026-15290High 7.5
CVE-2026-15290 CVSS:7.5 The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress… - CVE-2026-15288 The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is
CVE-2026-15288High 7.5
CVE-2026-15288 CVSS:7.5 The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Improper Input Validation in all… - CVE-2026-60109 Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerbe
CVE-2026-60109High 7.5
CVE-2026-60109 CVSS:7.5 Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that allows unauthenticated… - CVE-2026-60108 Zeek before 8.0.9 contains an uncontrolled memory consumption vulnerability in t
CVE-2026-60108High 7.5
CVE-2026-60108 CVSS:7.5 Zeek before 8.0.9 contains an uncontrolled memory consumption vulnerability in the FTP analyzer that allows unauthenticated remote… - CVE-2026-56292 A SQLi vulnerability in AcyMailing component < 10.11.1 for Joomla was discovered
CVE-2026-56292High 7.5
CVE-2026-56292 CVSS:7.5 A SQLi vulnerability in AcyMailing component < 10.11.1 for Joomla was discovered. Exploiting this flaw can lead to unauthorized… - CVE-2026-59692 A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. Duri
CVE-2026-59692High 7.5
CVE-2026-59692 CVSS:7.5 A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject… - CVE-2026-15491 A weakness has been identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0
CVE-2026-15491High 7.3
CVE-2026-15491 CVSS:7.3 A weakness has been identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. This affects an unknown… - CVE-2026-15490 A security flaw has been discovered in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587
CVE-2026-15490High 7.3
CVE-2026-15490 CVSS:7.3 A security flaw has been discovered in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected by this issue… - CVE-2026-15489 A vulnerability was identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0
CVE-2026-15489High 7.3
CVE-2026-15489 CVSS:7.3 A vulnerability was identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected by this… - CVE-2026-15488 A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is
CVE-2026-15488High 7.3
CVE-2026-15488 CVSS:7.3 A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileController::upload of the file… - CVE-2026-15482 A weakness has been identified in Aster Telecom Azcall 10/11. This issue affects
CVE-2026-15482High 7.3
CVE-2026-15482 CVSS:7.3 A weakness has been identified in Aster Telecom Azcall 10/11. This issue affects some unknown processing of the file… - CVE-2026-15479 A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability i
CVE-2026-15479High 7.3
CVE-2026-15479 CVSS:7.3 A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function change_passwd of the file… - CVE-2026-61428 PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhoo
CVE-2026-61428High 7.3
CVE-2026-61428 CVSS:7.3 PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing unauthenticated attackers to inject… - CVE-2026-15330 A vulnerability was determined in zhayujie CowAgent up to 2.1.1. Impacted is the
CVE-2026-15330High 7.3
CVE-2026-15330 CVSS:7.3 A vulnerability was determined in zhayujie CowAgent up to 2.1.1. Impacted is the function _build_image_content/_download_to_data_url of… - CVE-2026-15319 A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This
CVE-2026-15319High 7.3
CVE-2026-15319 CVSS:7.3 A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function IPAllowlist of the file… - CVE-2026-6939 The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to
CVE-2026-6939High 7.2
CVE-2026-6939 CVSS:7.2 The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'approval_code'… - CVE-2026-13378 The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable t
CVE-2026-13378High 7.2
CVE-2026-13378 CVSS:7.2 The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form 7 Form… - CVE-2026-3576 The Planyo Online Reservation System plugin for WordPress is vulnerable to Serve
CVE-2026-3576High 7.2
CVE-2026-3576 CVSS:7.2 The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request Forgery leading to Local File Inclusion… - CVE-2026-13114 The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is
CVE-2026-13114High 7.2
CVE-2026-13114 CVSS:7.2 The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment… - CVE-2026-15298 The TelSender plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripti
CVE-2026-15298High 7.2
CVE-2026-15298 CVSS:7.2 The TelSender plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting in all versions up to, and including, 1.14.14. This… - CVE-2026-13430 The Post Export Import with Media plugin for WordPress is vulnerable to Arbitrar
CVE-2026-13430High 7.2
CVE-2026-13430 CVSS:7.2 The Post Export Import with Media plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including,… - CVE-2026-54801 A vulnerability has been identified in CPCI85 Central Processing/Communication (
CVE-2026-54801High 7.2
CVE-2026-54801 CVSS:7.2 A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All… - CVE-2026-9253 The WP Cost Estimation & Payment Forms Builder (E&P Forms) plugin for WordPress
CVE-2026-9253High 7.2
CVE-2026-9253 CVSS:7.2 The WP Cost Estimation & Payment Forms Builder (E&P Forms) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… - CVE-2026-13441 The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is v
CVE-2026-13441High 7.2
CVE-2026-13441 CVSS:7.2 The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… - CVE-2026-61442 PraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admi
CVE-2026-61442High 7.1
CVE-2026-61442 CVSS:7.1 PraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admin authorization on the PATCH routes for projects,… - CVE-2026-50181 Langroid is a framework for building large-language-model-powered applications.
CVE-2026-50181High 7.1
CVE-2026-50181 CVSS:7.1 Langroid is a framework for building large-language-model-powered applications. Prior to version 0.64.0, Langroid's `ReadFileTool` and…
+PoC-in-GitHu - CVE-2026-59691 A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. Whe
CVE-2026-59691High 7.1
CVE-2026-59691 CVSS:7.1 A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that… - CVE-2026-14372 The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custo
CVE-2026-14372High 7.1
CVE-2026-14372 CVSS:7.1 The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is vulnerable to…
⚔️ Sploitus（87 条）
Unknown (87 条)
- mcp-server exploit
mcp-server exploit - Exploit for CVE-2026-13753 exploit
CVE-2026-13753
Exploit for CVE-2026-13753 exploit
…另有 85 条 Unknown 级漏洞（已省略）
🤖 漏洞情报自动汇总 · 2026-07-13 · 数据来源: NVD / GitHub Advisory / Sploitus / CISA-KEV