🤖 今日安全态势分析

🎯 今日重点关注

• CVE-2026-59873 (Critical) - node-tar 解压拒绝服务: 影响所有使用 npm tar 库的 Node.js 应用。由于库未对解压数据总量设硬上限，攻击者可构造恶意压缩包，导致服务器磁盘空间与 CPU 资源耗尽。
• CVE-2026-63795 (CVSS 10.0) - Linux 内核 9p 文件系统漏洞: 影响所有使用 9p 协议（如虚拟化场景、容器）的 Linux 内核。由于 p9_client_walk() 错误路径存在缺陷，可能导致本地权限提升或系统崩溃。
• CVE-2026-16117 (CVSS 10.0) - @fastify/http-proxy 请求前缀重写绕过: 影响 Fastify Web 框架的 HTTP 代理组件。攻击者可通过 URL 编码的前缀绕过身份验证或访问控制列表，实现未授权访问后端服务。
• CVE-2026-47865 (CVSS 9.8) - VMware Avi Load Balancer 认证绕过: 影响 VMware Avi 负载均衡器控制平面。具有网络访问权限的恶意用户可绕过认证机制，直接接管控制台，风险极高。

📈 威胁趋势

• 拒绝服务 (DoS): 今日数量最多的漏洞类型。涉及 node-tar 解压、.NET 运行时（X509/TLS/XML 处理）及多个 Linux 内核驱动，攻击面广，利用成本低。
• 权限提升 & 释放后使用 (UAF): 集中爆发于 Linux 内核，涉及 exfat、NFS、pNFS 等组件。CVSS 评分普遍高达 9.8，表明这些漏洞极易导致内核态代码执行或信息泄露。
• 身份认证绕过: VMware Avi 负载均衡器漏洞 (CVE-2026-47865) 为严重认证绕过，可直接导致控制权丢失，属于影响业务连续性的高危风险。
• 安全功能绕过: 多个 .NET 漏洞 (CVE-2026-47304, CVE-2026-50528) 涉及 XML 加密和 TLS/SSL 功能，可能导致加密逻辑失效或数据完整性受损。

🛡️ 缓解建议

• 立即升级 node-tar 包至最新版本，并对所有上传的压缩包进行沙箱检测或限制解压配额。
• 优先为 VMware Avi Load Balancer 打补丁（参考 VMware 安全公告），并在修复完成前限制管理端口对公网的暴露。
• 建议 Linux 服务器管理员尽快更新内核至稳定版（包含上述 CVE 修复），尤其关注使用 9p/ExFAT/NFS 协议的虚拟化或存储节点。
• 针对 .NET 应用，请将运行时更新至官方最新安全补丁，并检查 System.Security.Cryptography.Xml 及 System.Net.Security 相关的自定义配置。

🐙 GitHub-Advisory（50 条）

Critical (1 条)

• CVE-2026-59873 - node-tar: Decompression/parse DoS via unlimited input CVE-2026-59873Critical
  Summary A **Decompression/parse DoS via unlimited input** vulnerability in `node-tar` allows an attacker to exhaust server resources (disk space and CPU).…
  +OSV

High (19 条)

• CVE-2026-57108 - Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerabilit CVE-2026-57108High 3.1
  ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in the .NET runtime cryptography layer…
• CVE-2026-47302 - Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerabilit CVE-2026-47302High 3.1
  ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET XML processing…
• CVE-2026-47304 - Microsoft Security Advisory CVE-2026-47304 – .NET Security Feature Bypass Vulner CVE-2026-47304High 3.1
  ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET XML Encryption…
• CVE-2026-50524 - Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerabilit CVE-2026-50524High 3.1
  ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET TLS/SSL (System.Net.Security). This…
• CVE-2026-50648 - Microsoft Security Advisory CVE-2026-50648 – .NET Denial of Service Vulnerabilit CVE-2026-50648High 3.1
  ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET XML Encryption…
• CVE-2026-50528 - Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulner CVE-2026-50528High 3.1
  ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET TLS/SSL (System.Net.Security). This…
• CVE-2026-50525 - Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerabilit CVE-2026-50525High 3.1
  ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET XML Encryption…
• CVE-2026-50651 - Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerabilit CVE-2026-50651High 3.1
  ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET HTTP client (System.Net.Http). This…
• CVE-2026-13311 - shell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407) CVE-2026-13311High
  Summary `shell-quote`'s `parse()` finalizes its token list with a `reduce` that uses `Array.prototype.concat` as the accumulator. Each `prev.concat(arg)`…
  +NVD-Latest
• CVE-2026-59725 - Socket.IO: Engine.IO Polling Transport Connection Exhaustion CVE-2026-59725High
  Impact An unauthenticated remote attacker can cause a denial of service in affected versions of **engine.io** by opening Engine.IO polling sessions and sending…
• CVE-2026-59874 - node-tar: Negative tar entry size causes infinite loop in archive replace CVE-2026-59874High
  Summary A checksum-valid tar archive with a negative base-256 encoded entry size can make `tar.replace()` loop forever while scanning the existing archive.…
  +OSV
• CVE-2026-59731 - Astro: Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonica CVE-2026-59731High
  # Astro 6.4.7 Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch ## Summary Astro 6.4.7 appears to reintroduce a…
• CVE-2026-62685 - File Browser: Colliding username normalization gives two users the same home dir CVE-2026-62685High
  ## Summary FileBrowser confines each user to a *scope*: a home directory that acts as the boundary for everything they can read or write. When…
• GHSA-gcfj-64vw-6mp9 - Axios Node HTTP adapter can use an inherited proxy after interceptor config clon High
  ## Summary Axios’ Node.js HTTP adapter can route requests through an attacker-controlled proxy when `Object.prototype.proxy` is polluted and request…
• CVE-2026-59197 - Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflo CVE-2026-59197High
  Summary Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size. Minimal public API trigger:…
  +OSV
• CVE-2026-59199 - Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coo CVE-2026-59199High
  Summary Pillow's public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates near the signed 32-bit integer limits. In…
  +OSV
• CVE-2026-59200 - Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode() CVE-2026-59200High
  Summary `PdfParser.PdfStream.decode()` in Pillow's `PdfParser.py` calls `zlib.decompress()` with the `bufsize` parameter set to the value of the PDF stream's…
  +OSV
• CVE-2026-59204 - Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used fo CVE-2026-59204High
  Summary `src/libImaging/Jpeg2KDecode.c:853` accumulates `total_component_width` across every tile in a JPEG2000 image instead of recomputing it per tile. That…
  +OSV
• CVE-2026-59205 - Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply() CVE-2026-59205High
  Summary Pillow's public `ImageCms.ImageCmsTransform.apply(im, imOut)` API can trigger controlled native heap corruption when the caller supplies an output…
  +OSV

Medium (25 条)

• CVE-2026-50659 - Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability CVE-2026-50659Medium 3.1
  ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET SMTP client (System.Net.Mail). This…
• CVE-2026-59875 - node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records CVE-2026-59875Medium
  ## Summary `node-tar` strips trailing `NUL` bytes from long-name (`L`) and long-linkpath (`K`) GNU extended headers but does **not** apply the same…
• CVE-2026-59871 - node-tar: Process crash via PAX numeric path type confusion CVE-2026-59871Medium
  Summary A crafted 2.5KB tar archive crashes any Node.js process that extracts it. The PAX header parser coerces all-digit path values to JavaScript numbers,…
• CVE-2026-59947 - Composer: URL-embedded HTTP-Basic username leaks to verbose logs (GitHub PAT exp CVE-2026-59947Medium
  ## Summary When Composer is run with -vvv (debug verbosity), it could print a credential that was embedded directly in a repository or package URL, but not as…
• CVE-2026-59946 - Composer: Path traversal in package bin field lets dependencies chmod arbitrary CVE-2026-59946Medium
  ## Summary A Composer package declares its executables in the `bin` field of its `composer.json`. When Composer installs a package, it processes each `bin`…
• CVE-2026-59883 - Guzzle: Cookie Disclosure and Injection via IP-Address Domains CVE-2026-59883Medium
  Impact `CookieJar` does not restrict a cookie scoped to an IP address to the exact host that set it. When a stored cookie's `Domain` attribute is an IPv4…
• CVE-2026-14620 - webpack-dev-server vulnerable to cross-site request forgery via internal develop CVE-2026-14620Medium
  Impact The internal `/webpack-dev-server/open-editor` and `/webpack-dev-server/invalidate` endpoints perform state-changing actions on any `GET` request,…
• CVE-2026-14631 - webpack-dev-server vulnerable to denial of service via a malformed Host or Origi CVE-2026-14631Medium
  Impact An unauthenticated peer that can reach the `webpack-dev-server` process can terminate it by sending either a normal HTTP request with a malformed `Host`…

…另有 17 条 Medium 级漏洞（已省略）

Low (5 条)

• CVE-2026-62684 - File Browser: Share API exposes the password hash and bypass token CVE-2026-62684Low
  ## Summary When a user creates a password-protected share or lists existing shares, the JSON response includes the full bcrypt `password_hash` and the secret…
• CVE-2026-59727 - Astro: Cross-site scripting via unescaped transition:* directive values on hydra CVE-2026-59727Low
  Summary When a `transition:persist`, `transition:scope`, or `transition:persist-props` directive is applied to a client-hydrated (`client:*`) component, Astro…
• CVE-2026-59730 - @astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-s CVE-2026-59730Low
  Impact With `trailingSlash: 'always'` configured, the `@astrojs/node` standalone server's static file handler appends a trailing slash to request paths and…

…另有 2 条 Low 级漏洞（已省略）

🛡️ NVD-Latest（84 条）

Critical (8 条)

• CVE-2026-63795 In the Linux kernel, the following vulnerability has been resolved: 9p: avoid p CVE-2026-63795Critical 10.0
  CVE-2026-63795 CVSS:10.0 In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9_client_walk() error path When…
• CVE-2026-16117 Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite CVE-2026-16117Critical 10.0
  CVE-2026-16117 CVSS:10.0 Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix when the prefix segment is…
• CVE-2026-63808 In the Linux kernel, the following vulnerability has been resolved: exfat: fix CVE-2026-63808Critical 9.8
  CVE-2026-63808 CVSS:9.8 In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-free in exfat_find_dir_entry() In…
• CVE-2026-63800 In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix u CVE-2026-63800Critical 9.8
  CVE-2026-63800 CVSS:9.8 In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix use-after-free in pnfs_update_layout() When hitting the…
• CVE-2026-53399 In the Linux kernel, the following vulnerability has been resolved: nfsd: relea CVE-2026-53399Critical 9.8
  CVE-2026-53399 CVSS:9.8 In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4_alloc_stid()…
• CVE-2026-53398 In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix S CVE-2026-53398Critical 9.8
  CVE-2026-53398 CVSS:9.8 In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFO_NO_NAME decode error cleanup…
• CVE-2026-53384 In the Linux kernel, the following vulnerability has been resolved: serial: 825 CVE-2026-53384Critical 9.8
  CVE-2026-53384 CVSS:9.8 In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 8250 port if clk_notifier_register()…
• CVE-2026-47865 VMware Avi Load Balancer contains an authentication bypass vulnerability. A mali CVE-2026-47865Critical 9.8
  CVE-2026-47865 CVSS:9.8 VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access…

High (76 条)

• CVE-2026-63807 In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mm CVE-2026-63807High 8.8
  CVE-2026-63807 CVSS:8.8 In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Ensure hugepage is in by slot before checking max…
• CVE-2026-63801 In the Linux kernel, the following vulnerability has been resolved: tipc: fix s CVE-2026-63801High 8.8
  CVE-2026-63801 CVSS:8.8 In the Linux kernel, the following vulnerability has been resolved: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done…
• CVE-2026-63796 In the Linux kernel, the following vulnerability has been resolved: ocfs2: reje CVE-2026-63796High 8.8
  CVE-2026-63796 CVSS:8.8 In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject oversized group bitmap descriptors…
• CVE-2026-53375 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ CVE-2026-53375High 8.8
  CVE-2026-53375 CVSS:8.8 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that…
• CVE-2026-53374 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: CVE-2026-53374High 8.8
  CVE-2026-53374 CVSS:8.8 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: zero-initialize GART table on allocation GART TLB is…
• CVE-2026-11826 OpenPLC_v3 contains a heap-based buffer overflow in the getData() function in we CVE-2026-11826High 8.8
  CVE-2026-11826 CVSS:8.8 OpenPLC_v3 contains a heap-based buffer overflow in the getData() function in webserver/core/modbus_master.cpp. getData() reads…
• CVE-2024-58362 SurrealDB before 1.5.5 (and 2.0.0-beta before 2.0.0-beta.3) accepts an arbitrary CVE-2024-58362High 8.8
  CVE-2024-58362 CVSS:8.8 SurrealDB before 1.5.5 (and 2.0.0-beta before 2.0.0-beta.3) accepts an arbitrary object in the signin and signup operations of the RPC…
• CVE-2023-54366 SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, a CVE-2023-54366High 8.8
  CVE-2023-54366 CVSS:8.8 SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations…
• CVE-2026-16097 A vulnerability was found in Shibby Tomato 1.28. This vulnerability affects the CVE-2026-16097High 8.8
  CVE-2026-16097 CVSS:8.8 A vulnerability was found in Shibby Tomato 1.28. This vulnerability affects the function sub_42537C of the component Scheduler Name…
• CVE-2026-16096 A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Th CVE-2026-16096High 8.8
  CVE-2026-16096 CVSS:8.8 A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the function sub_40BB50 of the file…
• CVE-2026-16095 A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by CVE-2026-16095High 8.8
  CVE-2026-16095 CVSS:8.8 A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function setup_conntrack of the file…
• CVE-2026-47871 VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in CVE-2026-47871High 8.8
  CVE-2026-47871 CVSS:8.8 VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation allow malicious, authenticated…
• CVE-2026-12228 A stored cross-site scripting (XSS) vulnerability exists in the `POST /api/promp CVE-2026-12228High 8.7
  CVE-2026-12228 CVSS:8.7 A stored cross-site scripting (XSS) vulnerability exists in the `POST /api/prompts/share` endpoint of parisneo/lollms (latest version).…
• CVE-2026-16158 Impact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 b CVE-2026-16158High 8.7
  CVE-2026-16158 CVSS:8.7 Impact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 build the internal URL cache key by concatenating the…
• CVE-2026-15631 Impact: @fastify/http-proxy versions from 9.4.0 up to and including 11.5.0 fail CVE-2026-15631High 8.7
  CVE-2026-15631 CVSS:8.7 Impact: @fastify/http-proxy versions from 9.4.0 up to and including 11.5.0 fail to validate the resolved WebSocket destination path…
• CVE-2026-47869 VMware Avi Load Balancer contains a remote code execution vulnerability. A malic CVE-2026-47869High 8.7
  CVE-2026-47869 CVSS:8.7 VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authenticated user with network access may be able…
• CVE-2026-47867 VMware Avi Load Balancer contains a remote code execution vulnerability. A malic CVE-2026-47867High 8.7
  CVE-2026-47867 CVSS:8.7 VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with network access may be able to access the…
• CVE-2024-58366 SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Ex CVE-2024-58366High 8.5
  CVE-2024-58366 CVSS:8.5 SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type function when scripting is enabled.…
• CVE-2026-63818 In the Linux kernel, the following vulnerability has been resolved: f2fs: valid CVE-2026-63818High 8.4
  CVE-2026-63818 CVSS:8.4 In the Linux kernel, the following vulnerability has been resolved: f2fs: validate orphan inode entry count…
• CVE-2026-63815 In the Linux kernel, the following vulnerability has been resolved: f2fs: bound CVE-2026-63815High 8.4
  CVE-2026-63815 CVSS:8.4 In the Linux kernel, the following vulnerability has been resolved: f2fs: bound i_inline_xattr_size for non-inline-xattr inodes When…
• CVE-2026-63797 In the Linux kernel, the following vulnerability has been resolved: rpmsg: char CVE-2026-63797High 8.4
  CVE-2026-63797 CVSS:8.4 In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix use-after-free on probe error path…
• CVE-2026-53369 In the Linux kernel, the following vulnerability has been resolved: udf: reject CVE-2026-53369High 8.4
  CVE-2026-53369 CVSS:8.4 In the Linux kernel, the following vulnerability has been resolved: udf: reject descriptors with oversized CRC length udf_read_tagged()…
• CVE-2026-47866 VMware Avi Load Balancer contains an authorization bypass vulnerability. A malic CVE-2026-47866High 8.3
  CVE-2026-47866 CVSS:8.3 VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset…
• CVE-2026-10130 QueryWeaver contains an authentication bypass vulnerability that allows unauthen CVE-2026-10130High 8.2
  CVE-2026-10130 CVSS:8.2 QueryWeaver contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid session tokens for…
• CVE-2026-53390 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix CVE-2026-53390High 8.1
  CVE-2026-53390 CVSS:8.1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds read in smb_check_perm_dacl() The…
• CVE-2026-9323 The urwid web display backend (urwid/display/web.py) generates web session ident CVE-2026-9323High 8.1
  CVE-2026-9323 CVSS:8.1 The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id) in Screen.start() by concatenating two…
• CVE-2026-63824 In the Linux kernel, the following vulnerability has been resolved: KEYS: fix o CVE-2026-63824High 7.8
  CVE-2026-63824 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctl_pkey_params_get_2() The length for the…
• CVE-2026-63823 In the Linux kernel, the following vulnerability has been resolved: keys: Pin r CVE-2026-63823High 7.8
  CVE-2026-63823 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: keys: Pin request_key_auth payload in instantiate paths A:…
• CVE-2026-63819 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix t CVE-2026-63819High 7.8
  CVE-2026-63819 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on f2fs_get_node_folio_ra() kernel BUG…
• CVE-2026-63817 In the Linux kernel, the following vulnerability has been resolved: f2fs: valid CVE-2026-63817High 7.8
  CVE-2026-63817 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: f2fs: validate compress cache inode only when enabled…
• CVE-2026-63816 In the Linux kernel, the following vulnerability has been resolved: f2fs: atomi CVE-2026-63816High 7.8
  CVE-2026-63816 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode -…
• CVE-2026-63814 In the Linux kernel, the following vulnerability has been resolved: f2fs: valid CVE-2026-63814High 7.8
  CVE-2026-63814 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: f2fs: validate ACL entry sizes in f2fs_acl_from_disk()…
• CVE-2026-63813 In the Linux kernel, the following vulnerability has been resolved: Revert "f2f CVE-2026-63813High 7.8
  CVE-2026-63813 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: Revert "f2fs: remove non-uptodate folio from the page cache in…
• CVE-2026-63812 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix i CVE-2026-63812High 7.8
  CVE-2026-63812 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix incorrect FI_NO_EXTENT handling in…
• CVE-2026-63809 In the Linux kernel, the following vulnerability has been resolved: bpf: use kv CVE-2026-63809High 7.8
  CVE-2026-63809 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: bpf: use kvfree() for replaced sysctl write buffer…
• CVE-2026-63805 In the Linux kernel, the following vulnerability has been resolved: crypto: nx CVE-2026-63805High 7.8
  CVE-2026-63805 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: crypto: nx - fix nx_crypto_ctx_exit argument…
• CVE-2026-63803 In the Linux kernel, the following vulnerability has been resolved: hdlc_ppp: s CVE-2026-63803High 7.8
  CVE-2026-63803 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: hdlc_ppp: sync per-proto timers before freeing hdlc state Each PPP…
• CVE-2026-63802 In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: CVE-2026-63802High 7.8
  CVE-2026-63802 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF in __blkcg_rstat_flush() When multiple blkgs in…
• CVE-2026-63799 In the Linux kernel, the following vulnerability has been resolved: sched/mmcid CVE-2026-63799High 7.8
  CVE-2026-63799 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in fixup…
• CVE-2026-63793 In the Linux kernel, the following vulnerability has been resolved: ntfs: seria CVE-2026-63793High 7.8
  CVE-2026-63793 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label accesses Protect vol->volume_label…
• CVE-2026-53401 In the Linux kernel, the following vulnerability has been resolved: fbdev: omap CVE-2026-53401High 7.8
  CVE-2026-53401 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: fbdev: omap2: fix use-after-free in omapfb_mmap omapfb_mmap() has a…
• CVE-2026-53400 In the Linux kernel, the following vulnerability has been resolved: i2c: core: CVE-2026-53400High 7.8
  CVE-2026-53400 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter registration race Adapters can be looked up…
• CVE-2026-53389 In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: CVE-2026-53389High 7.8
  CVE-2026-53389 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in del_async path In…
• CVE-2026-53388 In the Linux kernel, the following vulnerability has been resolved: fuse: re-lo CVE-2026-53388High 7.8
  CVE-2026-53388 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio…
• CVE-2026-53386 In the Linux kernel, the following vulnerability has been resolved: iio: adc: t CVE-2026-53386High 7.8
  CVE-2026-53386 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pga_settings index…
• CVE-2026-53381 In the Linux kernel, the following vulnerability has been resolved: virtiofs: f CVE-2026-53381High 7.8
  CVE-2026-53381 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput() called from…
• CVE-2026-53380 In the Linux kernel, the following vulnerability has been resolved: media: rzv2 CVE-2026-53380High 7.8
  CVE-2026-53380 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: media: rzv2h-ivc: Fix concurrent buffer list access The list of…
• CVE-2026-53373 In the Linux kernel, the following vulnerability has been resolved: mm/vma: do CVE-2026-53373High 7.8
  CVE-2026-53373 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from…
• CVE-2026-9147 uproot dynamically generates Python class source code from ROOT TStreamerInfo re CVE-2026-9147High 7.8
  CVE-2026-9147 CVSS:7.8 uproot dynamically generates Python class source code from ROOT TStreamerInfo records in a file and compiles it at runtime. Some…
• CVE-2026-47868 VMware Avi Load Balancer contains a local privilege escalation vulnerability. A CVE-2026-47868High 7.8
  CVE-2026-47868 CVSS:7.8 VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user with local access may be able to…
• CVE-2026-53397 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix p CVE-2026-53397High 7.5
  CVE-2026-53397 CVSS:7.5 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak on SETACL decode failure…
• CVE-2026-53395 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix d CVE-2026-53395High 7.5
  CVE-2026-53395 CVSS:7.5 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dead ACL conflict guard in nfsd4_create nfsd4_create()…
• CVE-2026-53394 In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid CVE-2026-53394High 7.5
  CVE-2026-53394 CVSS:7.5 In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry…
• CVE-2026-53392 In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexf CVE-2026-53392High 7.5
  CVE-2026-53392 CVSS:7.5 In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count…
• CVE-2026-53391 In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: CVE-2026-53391High 7.5
  CVE-2026-53391 CVSS:7.5 In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr…
• CVE-2026-53383 In the Linux kernel, the following vulnerability has been resolved: ksmbd: reje CVE-2026-53383High 7.5
  CVE-2026-53383 CVSS:7.5 In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject non-VALID session in compound request branch…
• CVE-2026-53994 ProFTPD mod_sftp contains a heap-based buffer overflow reachable by an authentic CVE-2026-53994High 7.5
  CVE-2026-53994 CVSS:7.5 ProFTPD mod_sftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxp_packet_read() function accepts…
• CVE-2024-58368 SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS header CVE-2024-58368High 7.5
  CVE-2024-58368 CVSS:7.5 SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API requests containing special…
• CVE-2026-16228 A vulnerability was detected in SourceCodester Class and Exam Timetabling System CVE-2026-16228High 7.3
  CVE-2026-16228 CVSS:7.3 A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file…
• CVE-2026-16227 A security vulnerability has been detected in SourceCodester Class and Exam Time CVE-2026-16227High 7.3
  CVE-2026-16227 CVSS:7.3 A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of…
• CVE-2026-16210 A vulnerability was found in newpanjing simpleui 2026.01.13. This affects the fu CVE-2026-16210High 7.3
  CVE-2026-16210 CVSS:7.3 A vulnerability was found in newpanjing simpleui 2026.01.13. This affects the function self.get_action of the file simpleui/admin.py of…
• CVE-2026-16209 A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is a CVE-2026-16209High 7.3
  CVE-2026-16209 CVSS:7.3 A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file…
• CVE-2026-16200 A vulnerability has been found in zevorn rt-claw up to 0.2.0. This impacts the f CVE-2026-16200High 7.3
  CVE-2026-16200 CVSS:7.3 A vulnerability has been found in zevorn rt-claw up to 0.2.0. This impacts the function claw_tool_invoke of the file…
• CVE-2026-16154 A vulnerability was determined in SourceCodester Class and Exam Timetabling Syst CVE-2026-16154High 7.3
  CVE-2026-16154 CVSS:7.3 A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. Affected by this vulnerability is an…
• CVE-2026-16152 A vulnerability was found in SourceCodester Class and Exam Timetabling System 1. CVE-2026-16152High 7.3
  CVE-2026-16152 CVSS:7.3 A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file…
• CVE-2026-16128 A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This impacts CVE-2026-16128High 7.3
  CVE-2026-16128 CVSS:7.3 A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This impacts the function receiver_thread of the file…
• CVE-2026-16127 A vulnerability was identified in zevorn rt-claw up to 0.2.0. This affects the f CVE-2026-16127High 7.3
  CVE-2026-16127 CVSS:7.3 A vulnerability was identified in zevorn rt-claw up to 0.2.0. This affects the function claw_net_get/claw_net_post of the file…
• CVE-2026-16126 A vulnerability was determined in zevorn rt-claw up to 0.2.0. The impacted eleme CVE-2026-16126High 7.3
  CVE-2026-16126 CVSS:7.3 A vulnerability was determined in zevorn rt-claw up to 0.2.0. The impacted element is the function handle_rpc_request of the file…
• CVE-2026-16125 A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is CVE-2026-16125High 7.3
  CVE-2026-16125 CVSS:7.3 A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is the function claw_net_get/claw_net_post of the file…
• CVE-2026-16084 A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the CVE-2026-16084High 7.3
  CVE-2026-16084 CVSS:7.3 A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the function web_fetch of the file…
• CVE-2026-63806 In the Linux kernel, the following vulnerability has been resolved: KVM: Replac CVE-2026-63806High 7.1
  CVE-2026-63806 CVSS:7.1 In the Linux kernel, the following vulnerability has been resolved: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with…
• CVE-2026-53402 In the Linux kernel, the following vulnerability has been resolved: fbdev: fbco CVE-2026-53402High 7.1
  CVE-2026-53402 CVSS:7.1 In the Linux kernel, the following vulnerability has been resolved: fbdev: fbcon: fix out-of-bounds read in err_out of…
• CVE-2026-53396 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix p CVE-2026-53396High 7.1
  CVE-2026-53396 CVSS:7.1 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak and ignored error in nfsd4_create_file…
• CVE-2026-53387 In the Linux kernel, the following vulnerability has been resolved: iio: light: CVE-2026-53387High 7.1
  CVE-2026-53387 CVSS:7.1 In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml6075_it_ms index…
• CVE-2026-53368 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix f CVE-2026-53368High 7.1
  CVE-2026-53368 CVSS:7.1 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by incorrect nat_entry flag…
• CVE-2026-47870 VMware Avi Load Balancer contains a privilege escalation vulnerability. A malici CVE-2026-47870High 7.1
  CVE-2026-47870 CVSS:7.1 VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious authenticated user with network access may be able…

⚔️ Sploitus（66 条）

Unknown (66 条)

• fastjson-1.2.83-poc exploit
  fastjson-1.2.83-poc exploit
• llm-redteam-helixpay exploit
  llm-redteam-helixpay exploit

…另有 64 条 Unknown 级漏洞（已省略）

🤖 漏洞情报自动汇总 · 2026-07-21 · 数据来源: NVD / GitHub Advisory / Sploitus / CISA-KEV