📊 2026-07-20 漏洞情报日报 · 200 条 · 高危 96
每日漏洞情报汇总 · 2026-07-20
📊 2026-07-20 漏洞情报日报
📋 共 200 条
🔥 高危/严重 96 条
🐙 GitHub-Advisory 26 条 🔥12
🛡️ NVD-Latest 84 条 🔥84
⚔️ Sploitus 90 条
🤖 今日安全态势分析
🎯 今日重点关注
- CVE-2026-16117 (CVSS 10.0) - Fastify HTTP代理： @fastify/http-proxy ≤11.5.0 因未正确处理URL编码的前缀路径，导致请求路由绕过，可被用于SSRF或访问内部资源。利用条件：攻击者能够发送特制HTTP请求到代理服务。
- CVE-2026-45695 (CVSS 9.8) - Kopia备份工具： Kopia HTTP服务器以`--without-password`模式启动时，未授权攻击者可调用API访问/恢复仓库数据，导致敏感信息泄露与越权操作。利用条件：服务暴露于网络且无密码保护。
- CVE-2026-47865 (CVSS 9.8) - VMware Avi负载均衡器： Avi Controller验证绕过漏洞，允许网络攻击者无需认证直接访问控制平面，进而完全控制负载均衡策略。利用条件：攻击者需具备与Avi Controller的网络可达性。
- CVE-2026-54552 - Shell权限提升： `sh`的`_uid`选项在Linux/Unix系统上未正确丢弃辅助组，导致从高权限进程（如root）启动的低权限子进程可能继承额外组权限，造成权限维持与横向移动风险。
- CVE-2026-27771 - Gitea包源信息泄露： 因对Composer包源链接的权限校验不足，Gitea ≤1.26.1版本可能向未授权用户暴露私有/内部仓库链接。利用条件：攻击者拥有普通用户访问权限即可。
📈 威胁趋势
- 认证与授权绕过（9起）：成为今日最密集漏洞类型，涉及Kopia、VMware Avi、多个WordPress插件（AI Copilot、Aimogen、Bricksforge）及Gitea。攻击者可通过缺失绑定、验证缺陷或配置错误直接获取高权限。
- 注入与SSRF（3起）：包括meta-ads-mcp的SSRF漏洞以及Fastify HTTP代理的请求绕过。攻击者可利用不受信任的URL或编码差异攻击内部服务。
- 拒绝服务攻击（DoS/ReDoS，2起）：集中于vLLM AI推理框架，包括通过无效Token投递造成死循环和用户输入的正则表达式未设超时导致服务崩溃，凸显AI基础设施的安全脆弱性。
- 权限提升与不完整权限丢弃（3起）：涉及sh的辅助组残留、WordPress插件未经校验的字段导致权限提升。此类漏洞常作为攻击链中的横向或垂直移动环节。
- 信息泄露与硬编码密钥（3起）：包括Gitea包源泄露、clawvet API硬编码JWT密钥、HCL EPC密码泄露。关键信息通过错误配置或设计缺陷泄露。
🛡️ 缓解建议
- 立即升级受影响组件：优先更新@fastify/http-proxy至11.5.0以上版本、Kopia至0.23.0及以上版本，并评估VMware Avi Load Balancer的补丁状态。对于Gitea和Flask-Reuploaded等产品，应参照官方公告升级至修复版本。
- 强化网络访问控制：针对Kopia及VMware Avi等高危组件，确保管理接口仅暴露在受信任的内网，并启用严格的身份认证（如LDAP、证书）。检查Fastify代理的URL处理逻辑，部署WAF规则拦截编码绕过尝试。
- 审查并加固权限配置：针对Shell使用`_uid`的场景，确保使用`runuser`或`sudo`等更安全的提权工具替代。检查WordPress等应用的用户注册与表单提交流程，严格服务端验证提交参数。立即更换clawvet等项目中的默认硬编码密钥。
🐙 GitHub-Advisory（26 条）
High (12 条)
- CVE-2026-54549 - meta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrest
CVE-2026-54549High 3.1
## Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch Summary The `upload_ad_image` MCP tool in `meta-ads-mcp` v1.0.113… - CVE-2026-54567 - Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-o
CVE-2026-54567High 3.1
## 1. Header | Field | Value | |---|---| | **Title** | Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of… - CVE-2026-54234 - vLLM has Remote DoS via Invalid Recovered Token Reinjection
CVE-2026-54234High
## Summary A frontend-legal multi-request speculative workload can make vLLM produce an out-of-vocabulary recovered token equal to `vocab_size`, convert that… - CVE-2026-55574 - vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar an
CVE-2026-55574High
## Summary The `structured_outputs.regex` API parameter passes a user-supplied regex string directly to grammar compiler backends with no compilation timeout.… - CVE-2026-11400 - AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance
CVE-2026-11400High
Aurora PostgreSQL is a fully managed relational database engine that's compatible with PostgreSQL. The team has identified CVE-2026-11400, an issue in Aurora… - CVE-2026-54552 - sh _uid does not drop supplementary groups (incomplete privilege drop)
CVE-2026-54552High
Impact The `_uid` option performed an incomplete privilege drop on Linux/Unix-like systems. When `sh` was run from a process with elevated privileges, such as… - CVE-2026-54547 - meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token
CVE-2026-54547High
## X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token Summary `AuthInjectionMiddleware` in `meta-ads-mcp` rejects HTTP MCP requests only when… - CVE-2026-27771 - Gitea has insufficient permission checks for Composer package source links
CVE-2026-27771High
CVE Description Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or…
+PoC-in-GitHu - CVE-2026-53598 - Prompty: Arbitrary file read via file reference expansion
CVE-2026-53598High
## Summary Prompty loaders expanded `${file:...}` references in `.prompty` frontmatter without enforcing that the resolved path stayed within an authorized…
+NVD-Latest - CVE-2026-53597 - Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loade
CVE-2026-53597High
## Summary The TypeScript Prompty loader used `gray-matter` without overriding executable frontmatter engines. `gray-matter` supports JavaScript frontmatter… - CVE-2026-55177 - CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlle
CVE-2026-55177High
# Authenticated full-read SSRF in CloudTAK `/api/esri*` routes — user-controlled URL fetched with no IP-classification guard ## Summary Every route in the ESRI… - GHSA-8qqm-fp2q-v734 - Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA den
CVE-2026-50197High
Summary A wrong policy can be an open door. You have to check `input.attributes.request.http.truncated_body` in your policy. Description Incomplete fix for…
Medium (13 条)
- CVE-2026-34760 - vLLM: Processing differential in multi-channel audio downmixing enables hidden-i
CVE-2026-34760Medium
## Issue Description Librosa defaults to using `numpy.mean` for mono downmixing (`to_mono`), while the international standard ITU-R BS.775-4 specifies a… - CVE-2026-55646 - vLLM: Speech-to-text upload size limit is enforced after full UploadFile read
CVE-2026-55646Medium
## Summary Current-head vLLM documents `VLLM_MAX_AUDIO_CLIP_FILESIZE_MB` as the maximum audio file size accepted by the speech-to-text APIs. The default is 25… - CVE-2026-54247 - Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhausti
CVE-2026-54247Medium
## Summary The Kubernetes admission webhook handler reads the entire request body using `io.ReadAll(r.Body)` without any size limit. Any client that can reach… - CVE-2026-54503 - plone.app.textfield: Stored XSS by spoofing mime type
CVE-2026-54503Medium
Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whenever the stored mimeType equals the… - GHSA-8rqh-vxpr-x77p - plone.restapi: Stored XSS by spoofing mime type Medium
Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whenever the stored mimeType equals the… - CVE-2026-54546 - TAK-PS-Stats Web UI: Authenticated full-read SSRF in CloudTAK basemap import (PU
CVE-2026-54546Medium
Summary `PUT /api/basemap` (the basemap import endpoint) fetches an attacker-supplied URL server-side with **no SSRF protection whatsoever**. Any authenticated… - GHSA-cvpc-hccg-wmw4 - Formie: Missing authorization in administrative settings allows low-privileged C Medium
Formie contains a missing authorization vulnerability in administrative settings routes. An authenticated, non-admin Craft CMS control panel user with limited… - CVE-2026-54561 - mcp-memory-keeper: Arbitrary local file read in context_import via unvalidated f
CVE-2026-54561Medium
Impact `context_import` passed the caller-supplied `filePath` directly to `fs.readFileSync` with no path confinement. A malicious MCP client — or an LLM agent…
…另有 5 条 Medium 级漏洞（已省略）
Low (1 条)
- GHSA-rjwr-m7qx-3fjr - oapi-codegen: OpenAPI Server Description Escapes Generated Go Comment and Inject
CVE-2026-22785Low
## Summary The vulnerability in oapi-codegen seems to be similar with CVE-2026-22785, which is a generated-code injection issue where untrusted OpenAPI…
🛡️ NVD-Latest（84 条）
Critical (9 条)
- CVE-2026-16117 Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite
CVE-2026-16117Critical 10.0
CVE-2026-16117 CVSS:10.0 Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix when the prefix segment is… - CVE-2026-47865 VMware Avi Load Balancer contains an authentication bypass vulnerability. A mali
CVE-2026-47865Critical 9.8
CVE-2026-47865 CVSS:9.8 VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access… - CVE-2026-9810 The AI Copilot WordPress plugin before 1.5.4 does not bind OAuth access tokens
CVE-2026-9810Critical 9.8
CVE-2026-9810 CVSS:9.8 The AI Copilot WordPress plugin before 1.5.4 does not bind OAuth access tokens to a WordPress user, and accepts any valid token as an… - CVE-2026-15982 The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Too
CVE-2026-15982Critical 9.8
CVE-2026-15982 CVSS:9.8 The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress is vulnerable to Privilege… - CVE-2026-14956 The Bricksforge plugin for WordPress is vulnerable to Privilege Escalation in al
CVE-2026-14956Critical 9.8
CVE-2026-14956 CVSS:9.8 The Bricksforge plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.8.6. This is due… - CVE-2026-45695 Kopia is a cross-platform backup tool for Windows, macOS, and Linux with fast in
CVE-2026-45695Critical 9.8
CVE-2026-45695 CVSS:9.8 Kopia is a cross-platform backup tool for Windows, macOS, and Linux with fast incremental backups, client-side end-to-end encryption,…
+GitHub-Advis - CVE-2024-23564 HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a no
CVE-2024-23564Critical 9.1
CVE-2024-23564 CVSS:9.1 HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of the application can obtain passwords… - CVE-2026-62241 clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT
CVE-2026-62241Critical 9.1
CVE-2026-62241 CVSS:9.1 clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet-dev-secret-change-me') in auth.ts and… - CVE-2026-14890 SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socke
CVE-2026-14890Critical 9.1
CVE-2026-14890 CVSS:9.1 SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socket on a routable network interface that does not contain…
High (75 条)
- CVE-2026-11826 OpenPLC_v3 contains a heap-based buffer overflow in the getData() function in we
CVE-2026-11826High 8.8
CVE-2026-11826 CVSS:8.8 OpenPLC_v3 contains a heap-based buffer overflow in the getData() function in webserver/core/modbus_master.cpp. getData() reads… - CVE-2024-58362 SurrealDB before 1.5.5 (and 2.0.0-beta before 2.0.0-beta.3) accepts an arbitrary
CVE-2024-58362High 8.8
CVE-2024-58362 CVSS:8.8 SurrealDB before 1.5.5 (and 2.0.0-beta before 2.0.0-beta.3) accepts an arbitrary object in the signin and signup operations of the RPC… - CVE-2023-54366 SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, a
CVE-2023-54366High 8.8
CVE-2023-54366 CVSS:8.8 SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations… - CVE-2026-16097 A vulnerability was found in Shibby Tomato 1.28. This vulnerability affects the
CVE-2026-16097High 8.8
CVE-2026-16097 CVSS:8.8 A vulnerability was found in Shibby Tomato 1.28. This vulnerability affects the function sub_42537C of the component Scheduler Name… - CVE-2026-16096 A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Th
CVE-2026-16096High 8.8
CVE-2026-16096 CVSS:8.8 A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the function sub_40BB50 of the file… - CVE-2026-16095 A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by
CVE-2026-16095High 8.8
CVE-2026-16095 CVSS:8.8 A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function setup_conntrack of the file… - CVE-2026-47871 VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in
CVE-2026-47871High 8.8
CVE-2026-47871 CVSS:8.8 VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation allow malicious, authenticated… - CVE-2026-13352 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User
CVE-2026-13352High 8.8
CVE-2026-13352 CVSS:8.8 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for… - CVE-2026-62233 grav-plugin-api before 1.0.6 fails to validate super-admin status in createApiKe
CVE-2026-62233High 8.8
CVE-2026-62233 CVSS:8.8 grav-plugin-api before 1.0.6 fails to validate super-admin status in createApiKey, generate2fa, and disable2fa endpoints, allowing… - CVE-2026-62229 OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in exec
CVE-2026-62229High 8.8
CVE-2026-62229 CVSS:8.8 OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in exec allowlist glob matching that allows lower-trust callers… - CVE-2026-62228 OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node e
CVE-2026-62228High 8.8
CVE-2026-62228 CVSS:8.8 OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals that allows lower-trust callers to… - CVE-2026-62223 OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in the d
CVE-2026-62223High 8.8
CVE-2026-62223 CVSS:8.8 OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in the device-pair approval feature that allows lower-trust… - CVE-2026-62218 OpenClaw 2026.1.20 before 2026.5.27 contain an authorization bypass vulnerabilit
CVE-2026-62218High 8.8
CVE-2026-62218 CVSS:8.8 OpenClaw 2026.1.20 before 2026.5.27 contain an authorization bypass vulnerability in the device.pair.approve feature that allows… - CVE-2026-62217 OpenClaw 2026.5.14-beta.1 before 2026.5.27 contain an authorization flaw in the
CVE-2026-62217High 8.8
CVE-2026-62217 CVSS:8.8 OpenClaw 2026.5.14-beta.1 before 2026.5.27 contain an authorization flaw in the QQBot exec approvals feature. When the feature is… - CVE-2026-62207 OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability
CVE-2026-62207High 8.8
CVE-2026-62207 CVSS:8.8 OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability that allows lower-trust callers to reach admin-scoped… - CVE-2026-62203 OpenClaw versions before 2026.6.6 contain an environment variable filtering vuln
CVE-2026-62203High 8.8
CVE-2026-62203 CVSS:8.8 OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails to properly sanitize… - CVE-2026-62202 OpenClaw versions 2026.6.1 before 2026.6.9 contain a privilege escalation vulner
CVE-2026-62202High 8.8
CVE-2026-62202 CVSS:8.8 OpenClaw versions 2026.6.1 before 2026.6.9 contain a privilege escalation vulnerability in isolated cron jobs that allows lower-trust… - CVE-2026-5674 A flaw was found in PipeWire, a multimedia server. This vulnerability allows an
CVE-2026-5674High 8.8
CVE-2026-5674 CVSS:8.8 A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as… - CVE-2026-12228 A stored cross-site scripting (XSS) vulnerability exists in the `POST /api/promp
CVE-2026-12228High 8.7
CVE-2026-12228 CVSS:8.7 A stored cross-site scripting (XSS) vulnerability exists in the `POST /api/prompts/share` endpoint of parisneo/lollms (latest version).… - CVE-2026-16158 Impact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 b
CVE-2026-16158High 8.7
CVE-2026-16158 CVSS:8.7 Impact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 build the internal URL cache key by concatenating the… - CVE-2026-15631 Impact: @fastify/http-proxy versions from 9.4.0 up to and including 11.5.0 fail
CVE-2026-15631High 8.7
CVE-2026-15631 CVSS:8.7 Impact: @fastify/http-proxy versions from 9.4.0 up to and including 11.5.0 fail to validate the resolved WebSocket destination path… - CVE-2026-47869 VMware Avi Load Balancer contains a remote code execution vulnerability. A malic
CVE-2026-47869High 8.7
CVE-2026-47869 CVSS:8.7 VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authenticated user with network access may be able… - CVE-2026-47867 VMware Avi Load Balancer contains a remote code execution vulnerability. A malic
CVE-2026-47867High 8.7
CVE-2026-47867 CVSS:8.7 VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with network access may be able to access the… - CVE-2026-63306 stoatchat before 0.13.5 contains an unauthenticated server-side request forgery
CVE-2026-63306High 8.6
CVE-2026-63306 CVSS:8.6 stoatchat before 0.13.5 contains an unauthenticated server-side request forgery vulnerability in the /proxy and /embed endpoints that… - CVE-2024-58366 SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Ex
CVE-2024-58366High 8.5
CVE-2024-58366 CVSS:8.5 SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type function when scripting is enabled.… - CVE-2026-62226 OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerabilit
CVE-2026-62226High 8.5
CVE-2026-62226 CVSS:8.5 OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly… - CVE-2026-47866 VMware Avi Load Balancer contains an authorization bypass vulnerability. A malic
CVE-2026-47866High 8.3
CVE-2026-47866 CVSS:8.3 VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset… - CVE-2026-10130 QueryWeaver contains an authentication bypass vulnerability that allows unauthen
CVE-2026-10130High 8.2
CVE-2026-10130 CVSS:8.2 QueryWeaver contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid session tokens for… - CVE-2026-13410 Dancer::Plugin::Auth::Google versions through 0.07 for Perl have TLS verificatio
CVE-2026-13410High 8.2
CVE-2026-13410 CVSS:8.2 Dancer::Plugin::Auth::Google versions through 0.07 for Perl have TLS verification disabled. The default user agent is initialised with… - CVE-2026-9323 The urwid web display backend (urwid/display/web.py) generates web session ident
CVE-2026-9323High 8.1
CVE-2026-9323 CVSS:8.1 The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id) in Screen.start() by concatenating two… - CVE-2026-11961 The User Registration & Membership WordPress plugin before 5.2.3 does not valid
CVE-2026-11961High 8.1
CVE-2026-11961 CVSS:8.1 The User Registration & Membership WordPress plugin before 5.2.3 does not validate that the membership tier submitted during public… - CVE-2026-62234 Grav before 2.0.4 fails to restrict cURL protocols in webhook dispatch, allowing
CVE-2026-62234High 8.1
CVE-2026-62234 CVSS:8.1 Grav before 2.0.4 fails to restrict cURL protocols in webhook dispatch, allowing authenticated users with api.webhooks.write permission… - CVE-2026-62231 The Grav API plugin (getgrav/grav-plugin-api) before 1.0.6 contains an authoriza
CVE-2026-62231High 8.1
CVE-2026-62231 CVSS:8.1 The Grav API plugin (getgrav/grav-plugin-api) before 1.0.6 contains an authorization bypass: API keys can be created with a restricted… - CVE-2026-62209 OpenClaw versions 2026.5.10-beta.1 before 2026.6.5 contain an authorization bypa
CVE-2026-62209High 8.1
CVE-2026-62209 CVSS:8.1 OpenClaw versions 2026.5.10-beta.1 before 2026.6.5 contain an authorization bypass in the ClickClack agent-mode dispatch feature, which… - CVE-2026-63305 AVideo through 29.0 contains an OS command injection vulnerability in the ffmpeg
CVE-2026-63305High 8.1
CVE-2026-63305 CVSS:8.1 AVideo through 29.0 contains an OS command injection vulnerability in the ffmpeg.json.php endpoint where notifyCode and callback… - CVE-2026-63304 AVideo through 29.0 contains an OS command injection vulnerability in plugin/API
CVE-2026-63304High 8.1
CVE-2026-63304 CVSS:8.1 AVideo through 29.0 contains an OS command injection vulnerability in plugin/API/standAlone/functions.php where the… - CVE-2026-62215 OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability
CVE-2026-62215High 8.0
CVE-2026-62215 CVSS:8.0 OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability in HTTP Canvas responses that allows lower-trust… - CVE-2026-9147 uproot dynamically generates Python class source code from ROOT TStreamerInfo re
CVE-2026-9147High 7.8
CVE-2026-9147 CVSS:7.8 uproot dynamically generates Python class source code from ROOT TStreamerInfo records in a file and compiles it at runtime. Some… - CVE-2026-47868 VMware Avi Load Balancer contains a local privilege escalation vulnerability. A
CVE-2026-47868High 7.8
CVE-2026-47868 CVSS:7.8 VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user with local access may be able to… - CVE-2026-62222 OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that a
CVE-2026-62222High 7.8
CVE-2026-62222 CVSS:7.8 OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that allows loading of untrusted workspace plugins. Attackers… - CVE-2026-62227 OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulner
CVE-2026-62227High 7.7
CVE-2026-62227 CVSS:7.7 OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot routes that fail to… - CVE-2026-62201 OpenClaw versions before 2026.6.6 contain a network policy bypass vulnerability
CVE-2026-62201High 7.7
CVE-2026-62201 CVSS:7.7 OpenClaw versions before 2026.6.6 contain a network policy bypass vulnerability in the sandbox exec-server that allows lower-trust… - CVE-2026-53994 ProFTPD mod_sftp contains a heap-based buffer overflow reachable by an authentic
CVE-2026-53994High 7.5
CVE-2026-53994 CVSS:7.5 ProFTPD mod_sftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxp_packet_read() function accepts… - CVE-2024-58368 SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS header
CVE-2024-58368High 7.5
CVE-2024-58368 CVSS:7.5 SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API requests containing special… - CVE-2026-8396 Improper restriction of XML external entity reference vulnerability in Netcad So
CVE-2026-8396High 7.5
CVE-2026-8396 CVSS:7.5 Improper restriction of XML external entity reference vulnerability in Netcad Software Inc. NetGIS allows Serialized Data External… - CVE-2026-7189 Insertion of sensitive information into sent data vulnerability in Proliz Softwa
CVE-2026-7189High 7.5
CVE-2026-7189 CVSS:7.5 Insertion of sensitive information into sent data vulnerability in Proliz Software Ltd. Co. Proliz's OBS allows Accessing Functionality… - CVE-2026-11575 The PhonePe Payment Solutions WordPress plugin before 3.1.0 does not properly ve
CVE-2026-11575High 7.5
CVE-2026-11575 CVSS:7.5 The PhonePe Payment Solutions WordPress plugin before 3.1.0 does not properly verify the authenticity of incoming payment callbacks:… - CVE-2026-13765 The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin
CVE-2026-13765High 7.5
CVE-2026-13765 CVSS:7.5 The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive Information… - CVE-2026-62386 The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 accepts JWT acc
CVE-2026-62386High 7.5
CVE-2026-62386 CVSS:7.5 The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 accepts JWT access tokens through the ?token= URL query parameter on… - CVE-2026-62230 Grav before 2.0.4 ships a default .htaccess (and reference webserver-configs/hta
CVE-2026-62230High 7.5
CVE-2026-62230 CVSS:7.5 Grav before 2.0.4 ships a default .htaccess (and reference webserver-configs/htaccess.txt) whose rules blocking access to sensitive… - CVE-2026-54340 h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to com
CVE-2026-54340High 7.5
CVE-2026-54340 CVSS:7.5 h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 9265bdd, there is an HTTP/2 state amplification… - CVE-2026-39359 Wazuh is a free and open source platform used for threat prevention, detection,
CVE-2026-39359High 7.5
CVE-2026-39359 CVSS:7.5 Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 4.0.0 through 4.10.3 and… - CVE-2026-34150 Wazuh is a free and open source platform used for threat prevention, detection,
CVE-2026-34150High 7.5
CVE-2026-34150 CVSS:7.5 Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to… - CVE-2026-53598 Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 2.0.0-bet
CVE-2026-53598High 7.5
CVE-2026-53598 CVSS:7.5 Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 2.0.0-beta.2, Prompty loaders expanded ${file:...} references in…
+GitHub-Advis - CVE-2026-59862 Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.0, Kiota's P
CVE-2026-59862High 7.5
CVE-2026-59862 CVSS:7.5 Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.0, Kiota's Python generator let attacker-controlled enum value… - CVE-2026-59861 Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.0, Kiota's R
CVE-2026-59861High 7.5
CVE-2026-59861 CVSS:7.5 Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.0, Kiota's Ruby generator embedded OpenAPI default fields, property… - CVE-2026-62232 Grav before 2.0.4 contains a two-factor authentication bypass vulnerability in t
CVE-2026-62232High 7.4
CVE-2026-62232 CVSS:7.4 Grav before 2.0.4 contains a two-factor authentication bypass vulnerability in the login plugin where the regenerate2FASecret task… - CVE-2026-16210 A vulnerability was found in newpanjing simpleui 2026.01.13. This affects the fu
CVE-2026-16210High 7.3
CVE-2026-16210 CVSS:7.3 A vulnerability was found in newpanjing simpleui 2026.01.13. This affects the function self.get_action of the file simpleui/admin.py of… - CVE-2026-16209 A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is a
CVE-2026-16209High 7.3
CVE-2026-16209 CVSS:7.3 A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file… - CVE-2026-16200 A vulnerability has been found in zevorn rt-claw up to 0.2.0. This impacts the f
CVE-2026-16200High 7.3
CVE-2026-16200 CVSS:7.3 A vulnerability has been found in zevorn rt-claw up to 0.2.0. This impacts the function claw_tool_invoke of the file… - CVE-2026-16154 A vulnerability was determined in SourceCodester Class and Exam Timetabling Syst
CVE-2026-16154High 7.3
CVE-2026-16154 CVSS:7.3 A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. Affected by this vulnerability is an… - CVE-2026-16152 A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.
CVE-2026-16152High 7.3
CVE-2026-16152 CVSS:7.3 A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file… - CVE-2026-16128 A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This impacts
CVE-2026-16128High 7.3
CVE-2026-16128 CVSS:7.3 A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This impacts the function receiver_thread of the file… - CVE-2026-16127 A vulnerability was identified in zevorn rt-claw up to 0.2.0. This affects the f
CVE-2026-16127High 7.3
CVE-2026-16127 CVSS:7.3 A vulnerability was identified in zevorn rt-claw up to 0.2.0. This affects the function claw_net_get/claw_net_post of the file… - CVE-2026-16126 A vulnerability was determined in zevorn rt-claw up to 0.2.0. The impacted eleme
CVE-2026-16126High 7.3
CVE-2026-16126 CVSS:7.3 A vulnerability was determined in zevorn rt-claw up to 0.2.0. The impacted element is the function handle_rpc_request of the file… - CVE-2026-16125 A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is
CVE-2026-16125High 7.3
CVE-2026-16125 CVSS:7.3 A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is the function claw_net_get/claw_net_post of the file… - CVE-2026-16084 A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the
CVE-2026-16084High 7.3
CVE-2026-16084 CVSS:7.3 A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the function web_fetch of the file… - CVE-2026-16014 A vulnerability was found in code-projects Hospital Bed Management System 1.0. T
CVE-2026-16014High 7.3
CVE-2026-16014 CVSS:7.3 A vulnerability was found in code-projects Hospital Bed Management System 1.0. This affects an unknown part of the component Login… - CVE-2026-15395 The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vu
CVE-2026-15395High 7.2
CVE-2026-15395 CVSS:7.2 The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… - CVE-2026-47870 VMware Avi Load Balancer contains a privilege escalation vulnerability. A malici
CVE-2026-47870High 7.1
CVE-2026-47870 CVSS:7.1 VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious authenticated user with network access may be able… - CVE-2026-62387 The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 shipped Access
CVE-2026-62387High 7.1
CVE-2026-62387 CVSS:7.1 The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 shipped Access-Control-Allow-Origin: * as its default CORS… - CVE-2026-62219 OpenClaw 2026.2.12 before 2026.5.26 contain an authorization bypass vulnerabilit
CVE-2026-62219High 7.1
CVE-2026-62219 CVSS:7.1 OpenClaw 2026.2.12 before 2026.5.26 contain an authorization bypass vulnerability in the hooks allowedAgentIds validation. A… - CVE-2026-62212 OpenClaw before 2026.5.28 contains a race condition in the MS Teams safeFetch DN
CVE-2026-62212High 7.1
CVE-2026-62212 CVSS:7.1 OpenClaw before 2026.5.28 contains a race condition in the MS Teams safeFetch DNS rebinding check. When the affected feature is enabled… - CVE-2026-62206 OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability
CVE-2026-62206High 7.1
CVE-2026-62206 CVSS:7.1 OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord moderation actions. In affected versions, a… - CVE-2026-62205 OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorizati
CVE-2026-62205High 7.1
CVE-2026-62205 CVSS:7.1 OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability in the MS Teams message actions…
⚔️ Sploitus（90 条）
Unknown (90 条)
- TP-Link-TL-WR841ND-Security-Audit exploit
TP-Link-TL-WR841ND-Security-Audit exploit - Exploit for CVE-2026-63030 exploit
CVE-2026-63030
Exploit for CVE-2026-63030 exploit
…另有 88 条 Unknown 级漏洞（已省略）
🤖 漏洞情报自动汇总 · 2026-07-20 · 数据来源: NVD / GitHub Advisory / Sploitus / CISA-KEV