📊 2026-08-01 漏洞情报日报 · 200 条 · 高危 174
每日漏洞情报汇总 · 2026-08-01
📊 2026-08-01 漏洞情报日报
📋 共 200 条
🔥 高危/严重 174 条
🐙 GitHub-Advisory 53 条 🔥27
🛡️ NVD-Latest 147 条 🔥147
🤖 今日安全态势分析
🎯 今日重点关注
- CVE-2026-67429：Flyto2 Core 任意文件写入（CVSS 10.0），攻击者可通过 image.download 控制输出路径，建议立即升级至 2.26.6+。
- CVE-2026-16326：consul-mcp-server 会话状态未隔离（CVSS 10.0），导致客户端 Consul 令牌被其他客户端复用，需升级至修复版本。
- CVE-2026-54735：Prebid Server 多个 bidder 适配器存在 SSRF（CVSS 10.0），用户参数可拼入出站请求 URI，升级至 4.4.0+ 规避。
- CVE-2026-54680：Logging operator Fluentd 渲染器注入（CVSS 9.9），CRD 字符串可注入 Fluentd 配置，升级至 6.6.0。
- CVE-2026-52855：Wings 将整个守护进程配置暴露给 egg 模板引擎，导致节点凭据泄露、可能完全沦陷，请尽快更新。
📈 威胁趋势
- RCE/代码注入：Savon::Model WSDL 操作名 Ruby 注入；Logging operator Fluentd 配置注入。
- SSRF：vault-secrets-webhook 注解无校验；Prebid Server 适配器参数拼接请求。
- 信息泄露/权限提升：Wings 配置泄露；consul-mcp-server 会话串用。
- SQL 注入：NocoBase、Hospital Management System、CASAP 等多个应用受影响。
- XSS：Apostrophe SEO 存储型 XSS；Jodit Editor clean-html 绕过。
- 其他：Apostrophe 服务端原型污染；FileBrowser Quantum 路径遍历。
🛡️ 缓解建议
- 优先升级高危组件：Flyto2 Core、Prebid Server、Logging operator、consul-mcp-server、Wings 等至修复版本。
- 对 Kubernetes Webhook 及服务器出站请求实施严格白名单，校验 vault-addr 等外部地址，阻断 SSRF。
- 强化输入验证：SQL 参数化查询、路径规范化、禁止动态执行不可信 WSDL/模板内容。
- 最小化运行权限，隔离敏感配置，监控异常文件写入与出站连接行为。
🐙 GitHub-Advisory（53 条）
Critical (4 条)
- CVE-2026-53609 - Apostrophe has Server-Side Prototype Pollution in apos.util.set via patch operat
CVE-2026-53609Critical
<img width="1919" height="1046" alt="proto" src="https://github.com/user-attachments/assets/c5c69718-6448-448d-b64b-e3db41ab6ff6" /> ## Summary… - CVE-2026-52887 - NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE
CVE-2026-52887Critical
## Summary `GET /api/myInAppChannels:list` accepts a structured `filter` query parameter. The handler for the `latestMsgReceiveTimestamp` field splices the… - CVE-2026-54725 - vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL d
CVE-2026-54725Critical
## Summary The vault-secrets-webhook reads the `vault.security.banzaicloud.io/vault-addr` annotation from any ConfigMap or Secret being admitted and uses it as… - CVE-2026-52855 - Wings exposes node configuration secrets through egg configuration-file templati
CVE-2026-52855Critical
Impact **Type:** Exposure of sensitive information / insufficiently protected credentials leading to privilege escalation and full node compromise. Wings…
High (23 条)
- CVE-2026-54910 - FileBrowser Quantum's path traversal issue in subtitle handler allows any authen
CVE-2026-54910High
Summary The `subtitlesHandler` endpoint (`GET /api/media/subtitles`) accepts two user-controlled query parameters: `path` and `name`, both of which are used in…
+NVD-Latest - CVE-2026-53608 - @apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / G
CVE-2026-53608High
<img width="1919" height="1046" alt="curl" src="https://github.com/user-attachments/assets/8aa19ff1-7f4b-44ee-83d5-d0dd1a0269f6" /> <img width="1919"… - CVE-2026-58263 - Jodit Editor: Mutation XSS in jodit clean-html via a MathML/style rawtext carrie
CVE-2026-58263High
Summary jodit's built-in `clean-html` sanitizer can be bypassed by a MathML/`<style>` carrier that hides a dangerous element from the sanitizer's element walk,… - CVE-2026-53510 - Savon::Model evaluates WSDL operation names as Ruby source
CVE-2026-53510High
Impact `Savon::Model` generated SOAP operation methods by interpolating operation names into Ruby source passed to `module_eval`. An attacker who can control… - CVE-2026-53599 - Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that
CVE-2026-53599High
## Summary `rex_mediapool::isAllowedExtension` in `redaxo/src/addons/mediapool/lib/mediapool.php` accepts filenames that contain a blocked extension as a… - CVE-2026-53500 - Thumbor treats ALLOWED_SOURCES string patterns as unescaped regex, allowing host
CVE-2026-53500High
## Summary The `ALLOWED_SOURCES` configuration is meant to restrict which hosts Thumbor's HTTP loader may fetch images from. Plain-string entries in that list… - CVE-2026-53501 - Thumbor has HMAC validation bypass via multiple .replace() calls when removing U
CVE-2026-53501High
# HMAC validation bypass via multiple `.replace()` calls when removing URL signature ## Summary Thumbor’s HMAC validation can be bypassed due to the use of… - CVE-2026-53503 - Thumbor convolution filter allows divide-by-zero in C extension leading to remot
CVE-2026-53503High
Summary Thumbor's `filters:convolution(<matrix>, <columns>, <should_normalize>)` filter passes the user-controlled `<columns>` value to a C extension… - CVE-2026-53504 - Thumbor has Regex Denial of Service (ReDoS) in `convolution` filter
CVE-2026-53504High
Summary The regular expression used to parse the `convolution` filter exhibits exponential-time backtracking for certain inputs, enabling a Regular Expression… - CVE-2026-53505 - Thumbor proportion filter allows unbounded post-transform resize leading to remo
CVE-2026-53505High
Summary Thumbor's `filters:proportion(<value>)` filter does not enforce an upper bound on `<value>` and runs in the post-transform phase. An attacker can… - CVE-2026-53502 - Thumbor has path traversal via post-validation URL decoding bypass in file_loade
CVE-2026-53502High
The file_loader performs `unquote()` on the file path AFTER the `abspath() + startswith()` security check. An attacker can use percent-encoded path traversal… - CVE-2026-54737 - @phun-ky/defaults-deep Has a Prototype Pollution issue via Unsafe Recursive Prop
CVE-2026-54737High
Impact A prototype pollution vulnerability exists in @phun-ky/defaults-deep prior to version 2.0.5. The library recursively merged user-supplied objects… - GHSA-p7w7-4929-vpj5 - `@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocati High
Summary `@dynatrace-oss/dynatrace-mcp-server` v1.8.5 exposes an HTTP transport mode (`--http` flag) that performs no authentication, session validation, or… - CVE-2026-52856 - Wings: Maliciously crafted packet during SFTP connection handshake causes denial
CVE-2026-52856High
Summary A maliciously crafted packet received & parsed during the SFTP connection handshake will cause a Go panic. Impact All wings users with an open SFTP… - CVE-2026-41695 - Spring Data: Unbounded property-path cache keyed by externally-supplied path str
CVE-2026-41695High
`src/main/java/org/springframework/data/mapping/context/PersistentPropertyPathFactory.java:175` · Unbounded Resource Allocation (Algorithmic DoS) Impact When a…
+NVD-Latest - CVE-2026-12074 - Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame
CVE-2026-12074High
Summary `FramenetCorpusReader.frame(name)` interpolates a caller-supplied frame name into an XML file path that is read with the builtin `open()`, bypassing… - CVE-2026-12072 - Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arb
CVE-2026-12072High
Summary A path-traversal vulnerability in `NKJPCorpusReader` allows an attacker who can influence the `fileids` argument of its public read methods (`header`,… - CVE-2026-12061 - Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES rege
CVE-2026-12061High
Summary `ReviewsCorpusReader` extracts feature annotations of the form *label* followed by a bracketed signed digit (e.g. a label then `[+2]`) from each review… - CVE-2026-12075 - Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathse
CVE-2026-12075High
Summary `nltk.pathsec` provides an SSRF filter that NLTK documents as a security control, blocking loopback, private, link-local, and multicast ranges… - CVE-2026-56819 - Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor
CVE-2026-56819High
Summary A remote, unauthenticated peer can leak one direct `ByteBuf` per HTTP/2 `DATA` frame in applications that enable HTTP/2 content decompression via… - CVE-2026-68500 - Sylius Mollie Plugin vulnerable to payment status forgery via the payment webhoo
CVE-2026-68500High
Impact The shop payment webhook `POST /{_locale}/update-payment` (route `sylius_mollie_shop_payment_webhook`) accepts two independent, attacker-controlled… - CVE-2026-54729 - dssrf: any users using 1.1.1.1 DNS is impacted by SSRF
CVE-2026-54729High
## Summary is_url_safe can treat localhost as safe when DNS resolver 1.1.1.1 returns NXDOMAIN because dns.resolve4 yields no address and no dns.lookup fallback… - CVE-2026-55100 - hashi-vault-js has a path traversal and query parameter injection
CVE-2026-55100High
## Summary The `hashi-vault-js` library is vulnerable to path traversal and query string injection due to the lack of proper encoding of identifiers in path…
Medium (24 条)
- CVE-2026-54908 - Pion DTLS vulnerable to denial of service via panic while parsing a crafted ECDH
CVE-2026-54908Medium
Impact Remote denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message. Patches Upgrade to v3.1.4 or later. This version… - CVE-2026-53573 - core-geonetwork has an Open Redirect Bypass
CVE-2026-53573Medium
Summary GeoNetwork's post-login redirect handling can be bypassed to redirect users to an attacker-controlled external site, even though the code attempts to… - CVE-2026-54768 - WPGraphQL has deprecated `user` field on SendPasswordResetEmailPayload that leak
CVE-2026-54768Medium
## Summary The `sendPasswordResetEmail` mutation in WPGraphQL is explicitly designed to prevent user enumeration. The resolver in… - CVE-2026-54785 - gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_fi
CVE-2026-54785Medium
Summary `consult_gemini_with_files` in **inline mode** read any file path supplied in the `files` argument without confining it to the working `directory`,… - CVE-2016-1000305 - guard-livereload has a directory traversal vulnerability
CVE-2016-1000305Medium
The vulnerability allows remote attackers to read arbitrary files on the server by exploiting improper path validation in the livereload server functionality.… - CVE-2026-53606 - sanitize-html has incomplete URI scheme validation in that allows javascript: UR
CVE-2026-53606Medium
## Summary sanitize-html uses `allowedSchemesAppliedToAttributes` (default: `['href', 'src', 'cite']`) to gate the `naughtyHref()` function that blocks… - CVE-2026-54909 - Pion STUN vulnerable to remote denial of service via panic while parsing a malfo
CVE-2026-54909Medium
Impact Remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute Patches Upgrade to v3.1.5 or later. This version includes this… - CVE-2026-53551 - free5GC AUSF: null byte injection in supiOrSuci causes HTTP 500 internal service
CVE-2026-53551Medium
Summary The free5GC AUSF (Authentication Server Function) does not validate the `supiOrSuci` field in UE authentication requests. Null bytes (`\x00`) and other…
…另有 16 条 Medium 级漏洞（已省略）
Low (2 条)
- CVE-2026-53607 - @apostrophecms/file pretty-URL Vulnerable to Unauthenticated SSRF via Host heade
CVE-2026-53607Low
Summary When `prettyUrls: true` is enabled on `@apostrophecms/file` (a documented SEO feature for serving uploaded files at clean URLs), the public pretty-URL… - CVE-2026-54787 - sigstore-go fails to check signature timestamps against a signing key's validity
CVE-2026-54787Low
sigstore-go fails to check signature timestamps against a signing key's validity period for self-managed long-lived keys without certificates. ## Impact To…
🛡️ NVD-Latest（147 条）
Critical (53 条)
- CVE-2026-67429 Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior
CVE-2026-67429Critical 10.0
CVE-2026-67429 CVSS:10.0 Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, image.download and related file-writing…
+GitHub-Advis - CVE-2026-16326 In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate sessio
CVE-2026-16326Critical 10.0
CVE-2026-16326 CVSS:10.0 In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may allow one… - CVE-2026-54735 Prebid Server is an open-source solution for running real-time advertising aucti
CVE-2026-54735Critical 10.0
CVE-2026-54735 CVSS:10.0 Prebid Server is an open-source solution for running real-time advertising auctions in the cloud. Prior to version 4.4.0, certain…
+GitHub-Advis - CVE-2026-54680 Logging operator automates the deployment and configuration of Kubernetes loggin
CVE-2026-54680Critical 9.9
CVE-2026-54680 CVSS:9.9 Logging operator automates the deployment and configuration of Kubernetes logging pipelines. Prior to 6.6.0, the Fluentd configuration…
+GitHub-Advis - CVE-2025-69943 kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in get_d
CVE-2025-69943Critical 9.8
CVE-2025-69943 CVSS:9.8 kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in get_doctor.php via the parameters doctor and… - CVE-2025-69942 kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms
CVE-2025-69942Critical 9.8
CVE-2025-69942 CVSS:9.8 kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1. 产品: - CVE-2025-67404 Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Inject
CVE-2025-67404Critical 9.8
CVE-2025-67404 CVSS:9.8 Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in save_stud.php via the parameters fname, lname,… - CVE-2025-67403 Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Inject
CVE-2025-67403Critical 9.8
CVE-2025-67403 CVSS:9.8 Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_class.php via the parameter class_name.… - CVE-2025-65340 kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /bet
CVE-2025-65340Critical 9.8
CVE-2025-65340 CVSS:9.8 kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php. 产品: - CVE-2026-41939 Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability
CVE-2026-41939Critical 9.8
CVE-2026-41939 CVSS:9.8 Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface… - CVE-2026-67191 Xlight FTP Server before 3.9.5 contains a pre-authentication heap buffer overflo
CVE-2026-67191Critical 9.8
CVE-2026-67191 CVSS:9.8 Xlight FTP Server before 3.9.5 contains a pre-authentication heap buffer overflow vulnerability that allows remote unauthenticated… - CVE-2026-60113 AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface before 2.2.2 c
CVE-2026-60113Critical 9.8
CVE-2026-60113 CVSS:9.8 AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface before 2.2.2 contains a missing authentication vulnerability in the… - CVE-2026-60112 AMMOS Instrument Toolkit (AIT) GUI before 2.5.1 contains a missing authenticatio
CVE-2026-60112Critical 9.8
CVE-2026-60112 CVSS:9.8 AMMOS Instrument Toolkit (AIT) GUI before 2.5.1 contains a missing authentication vulnerability that allows any unauthenticated network… - CVE-2026-14900 The Cost Calculator Builder PRO plugin for WordPress is vulnerable to Remote Cod
CVE-2026-14900Critical 9.8
CVE-2026-14900 CVSS:9.8 The Cost Calculator Builder PRO plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.0.3… - CVE-2026-59243 The FAB auth manager's Azure AD OAuth login defaulted `verify_signature=False` w
CVE-2026-59243Critical 9.8
CVE-2026-59243 CVSS:9.8 The FAB auth manager's Azure AD OAuth login defaulted `verify_signature=False` when decoding the ID token, so an attacker able to…
+PoC-in-GitHu - CVE-2026-17727 Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72
CVE-2026-17727Critical 9.6
CVE-2026-17727 CVSS:9.6 Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a… - CVE-2026-17726 Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 all
CVE-2026-17726Critical 9.6
CVE-2026-17726 CVSS:9.6 Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox… - CVE-2026-17721 Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a r
CVE-2026-17721Critical 9.6
CVE-2026-17721 CVSS:9.6 Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape… - CVE-2026-17718 Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote
CVE-2026-17718Critical 9.6
CVE-2026-17718 CVSS:9.6 Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a… - CVE-2026-17717 Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remo
CVE-2026-17717Critical 9.6
CVE-2026-17717 CVSS:9.6 Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via… - CVE-2026-17713 Insufficient validation of untrusted input in Accessibility in Google Chrome on
CVE-2026-17713Critical 9.6
CVE-2026-17713 CVSS:9.6 Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote… - CVE-2026-17711 Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remot
CVE-2026-17711Critical 9.6
CVE-2026-17711 CVSS:9.6 Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… - CVE-2026-17710 Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.792
CVE-2026-17710Critical 9.6
CVE-2026-17710 CVSS:9.6 Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the… - CVE-2026-17709 Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remot
CVE-2026-17709Critical 9.6
CVE-2026-17709 CVSS:9.6 Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… - CVE-2026-17708 Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote
CVE-2026-17708Critical 9.6
CVE-2026-17708 CVSS:9.6 Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… - CVE-2026-17704 Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote
CVE-2026-17704Critical 9.6
CVE-2026-17704 CVSS:9.6 Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… - CVE-2026-17701 Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prio
CVE-2026-17701Critical 9.6
CVE-2026-17701 CVSS:9.6 Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had… - CVE-2026-17697 Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote
CVE-2026-17697Critical 9.6
CVE-2026-17697 CVSS:9.6 Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a… - CVE-2026-17695 Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.792
CVE-2026-17695Critical 9.6
CVE-2026-17695 CVSS:9.6 Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a… - CVE-2026-17692 Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.7
CVE-2026-17692Critical 9.6
CVE-2026-17692 CVSS:9.6 Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the… - CVE-2026-17691 Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72
CVE-2026-17691Critical 9.6
CVE-2026-17691 CVSS:9.6 Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a… - CVE-2026-17688 Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote
CVE-2026-17688Critical 9.6
CVE-2026-17688 CVSS:9.6 Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… - CVE-2026-17687 Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote
CVE-2026-17687Critical 9.6
CVE-2026-17687 CVSS:9.6 Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… - CVE-2026-17684 Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on
CVE-2026-17684Critical 9.6
CVE-2026-17684 CVSS:9.6 Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker… - CVE-2026-17682 Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remo
CVE-2026-17682Critical 9.6
CVE-2026-17682 CVSS:9.6 Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… - CVE-2026-17681 Insufficient validation of untrusted input in Web Authentication in Google Chrom
CVE-2026-17681Critical 9.6
CVE-2026-17681 CVSS:9.6 Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior to 151.0.7922.72 allowed a remote… - CVE-2026-17680 Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.7
CVE-2026-17680Critical 9.6
CVE-2026-17680 CVSS:9.6 Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the… - CVE-2026-17676 Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0
CVE-2026-17676Critical 9.6
CVE-2026-17676 CVSS:9.6 Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised… - CVE-2026-17675 Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a r
CVE-2026-17675Critical 9.6
CVE-2026-17675 CVSS:9.6 Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process… - CVE-2026-17673 Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remot
CVE-2026-17673Critical 9.6
CVE-2026-17673 CVSS:9.6 Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… - CVE-2026-17672 Insufficient validation of untrusted input in Chromecast in Google Chrome prior
CVE-2026-17672Critical 9.6
CVE-2026-17672 CVSS:9.6 Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had… - CVE-2026-17671 Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 15
CVE-2026-17671Critical 9.6
CVE-2026-17671 CVSS:9.6 Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had… - CVE-2026-17670 Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote
CVE-2026-17670Critical 9.6
CVE-2026-17670 CVSS:9.6 Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… - CVE-2026-17669 Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to
CVE-2026-17669Critical 9.6
CVE-2026-17669 CVSS:9.6 Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to potentially… - CVE-2026-17656 Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote
CVE-2026-17656Critical 9.6
CVE-2026-17656 CVSS:9.6 Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a… - CVE-2026-17655 Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 15
CVE-2026-17655Critical 9.6
CVE-2026-17655 CVSS:9.6 Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially… - CVE-2026-17652 Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote
CVE-2026-17652Critical 9.6
CVE-2026-17652 CVSS:9.6 Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… - CVE-2026-17651 Insufficient validation of untrusted input in Dawn in Google Chrome on Android p
CVE-2026-17651Critical 9.6
CVE-2026-17651 CVSS:9.6 Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to… - CVE-2026-14529 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Serv
CVE-2026-14529Critical 9.4
CVE-2026-14529 CVSS:9.4 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is… - CVE-2026-67426 Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior
CVE-2026-67426Critical 9.3
CVE-2026-67426 CVSS:9.3 Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, the standalone flyto-verification service in…
+GitHub-Advis - CVE-2026-17666 Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed
CVE-2026-17666Critical 9.1
CVE-2026-17666 CVSS:9.1 Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass… - CVE-2026-51992 SQL Injection vulnerability in ClickHouse Server Versions <= 26.3.9.8 allows a r
CVE-2026-51992Critical 9.1
CVE-2026-51992 CVSS:9.1 SQL Injection vulnerability in ClickHouse Server Versions <= 26.3.9.8 allows a remote attacker to execute arbitrary code via the create…
+PoC-in-GitHu - CVE-2026-14488 The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization via
CVE-2026-14488Critical 9.1
CVE-2026-14488 CVSS:9.1 The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization via the template_redirect dispatcher in the MB Frontend…
High (94 条)
- CVE-2026-17725 Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote at
CVE-2026-17725High 8.8
CVE-2026-17725 CVSS:8.8 Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a… - CVE-2026-17719 Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote
CVE-2026-17719High 8.8
CVE-2026-17719 CVSS:8.8 Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox… - CVE-2026-17712 Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote att
CVE-2026-17712High 8.8
CVE-2026-17712 CVSS:8.8 Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a… - CVE-2026-17705 Integer overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a rem
CVE-2026-17705High 8.8
CVE-2026-17705 CVSS:8.8 Integer overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox… - CVE-2026-17694 Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote a
CVE-2026-17694High 8.8
CVE-2026-17694 CVSS:8.8 Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via… - CVE-2026-17685 Use after free in Autofill in Google Chrome prior to 151.0.7922.72 allowed a rem
CVE-2026-17685High 8.8
CVE-2026-17685 CVSS:8.8 Use after free in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox… - CVE-2026-17678 Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a re
CVE-2026-17678High 8.8
CVE-2026-17678 CVSS:8.8 Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process… - CVE-2026-17677 Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0
CVE-2026-17677High 8.8
CVE-2026-17677 CVSS:8.8 Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially… - CVE-2026-17665 Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote at
CVE-2026-17665High 8.8
CVE-2026-17665 CVSS:8.8 Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a… - CVE-2026-17661 Use after free in Loader in Google Chrome prior to 151.0.7922.72 allowed a remot
CVE-2026-17661High 8.8
CVE-2026-17661 CVSS:8.8 Use after free in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox… - CVE-2026-17658 Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote at
CVE-2026-17658High 8.8
CVE-2026-17658 CVSS:8.8 Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a… - CVE-2026-5490 DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability a
CVE-2026-5490High 8.8
CVE-2026-5490 CVSS:8.8 DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on…
+GitHub-Advis+PoC-in-GitHu - CVE-2026-18022 Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a data
CVE-2026-18022High 8.8
CVE-2026-18022 CVSS:8.8 Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead… - CVE-2026-65944 Joomla Extension - rolandd.com - CSRF vectors in AJAX endpoint handlers RO CSVI
CVE-2026-65944High 8.8
CVE-2026-65944 CVSS:8.8 Joomla Extension - rolandd.com - CSRF vectors in AJAX endpoint handlers RO CSVI < 9.11.0 产品: - CVE-2026-14270 The Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCom
CVE-2026-14270High 8.8
CVE-2026-14270 CVSS:8.8 The Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) plugin for WordPress is vulnerable to Arbitrary… - CVE-2026-17699 Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local
CVE-2026-17699High 8.6
CVE-2026-17699 CVSS:8.6 Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a… - CVE-2026-67427 Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior
CVE-2026-67427High 8.6
CVE-2026-67427 CVSS:8.6 Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, the workflow engine variable resolver…
+GitHub-Advis - CVE-2026-67425 Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior
CVE-2026-67425High 8.6
CVE-2026-67425 CVSS:8.6 Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, llm.chat reads provider keys such as…
+GitHub-Advis - CVE-2026-67201 V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery
CVE-2026-67201High 8.6
CVE-2026-67201 CVSS:8.6 V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery (SSRF) bypass vulnerability that allows attackers to… - CVE-2026-16328 In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not restrict how the Consul
CVE-2026-16328High 8.6
CVE-2026-16328 CVSS:8.6 In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not restrict how the Consul backend address was supplied, allowing a connected… - CVE-2026-58182 The Apache Traffic Server ts_lua plugin mishandles initialization, transform con
CVE-2026-58182High 8.6
CVE-2026-58182 CVSS:8.6 The Apache Traffic Server ts_lua plugin mishandles initialization, transform context, and per-instance state. This issue affects Apache… - CVE-2026-6267 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.
CVE-2026-6267High 8.5
CVE-2026-6267 CVSS:8.5 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before… - CVE-2026-67428 Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior
CVE-2026-67428High 8.5
CVE-2026-67428 CVSS:8.5 Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, HTTP-emitting modules including…
+GitHub-Advis - CVE-2026-67424 Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior
CVE-2026-67424High 8.5
CVE-2026-67424 CVSS:8.5 Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, the HTTP modules http.get, http.request, and…
+GitHub-Advis - CVE-2026-17716 Use after free in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed
CVE-2026-17716High 8.4
CVE-2026-17716 CVSS:8.4 Use after free in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via… - CVE-2026-12436 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0
CVE-2026-12436High 8.4
CVE-2026-12436 CVSS:8.4 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before… - CVE-2026-17723 Use after free in Media in Google Chrome on Windows prior to 151.0.7922.72 allow
CVE-2026-17723High 8.3
CVE-2026-17723 CVSS:8.3 Use after free in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer… - CVE-2026-17722 Object lifecycle issue in WebView in Google Chrome on Android prior to 151.0.792
CVE-2026-17722High 8.3
CVE-2026-17722 CVSS:8.3 Object lifecycle issue in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the… - CVE-2026-17663 Insufficient validation of untrusted input in GPU in Google Chrome on Android pr
CVE-2026-17663High 8.3
CVE-2026-17663 CVSS:8.3 Insufficient validation of untrusted input in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had… - CVE-2026-17660 Insufficient validation of untrusted input in Network in Google Chrome prior to
CVE-2026-17660High 8.3
CVE-2026-17660 CVSS:8.3 Insufficient validation of untrusted input in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had… - CVE-2026-17657 Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a r
CVE-2026-17657High 8.3
CVE-2026-17657 CVSS:8.3 Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process… - CVE-2026-17653 Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote
CVE-2026-17653High 8.3
CVE-2026-17653 CVSS:8.3 Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… - CVE-2026-17650 Use after free in Compositing in Google Chrome prior to 151.0.7922.72 allowed a
CVE-2026-17650High 8.3
CVE-2026-17650 CVSS:8.3 Use after free in Compositing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer… - CVE-2026-54666 swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI
CVE-2026-54666High 8.3
CVE-2026-54666 CVSS:8.3 swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2,…
+GitHub-Advis - CVE-2026-54664 swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI
CVE-2026-54664High 8.3
CVE-2026-54664 CVSS:8.3 swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2,…
+GitHub-Advis - CVE-2026-54662 swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI spe
CVE-2026-54662High 8.3
CVE-2026-54662 CVSS:8.3 swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/code-gen-process.ts…
+GitHub-Advis - CVE-2026-54661 swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI
CVE-2026-54661High 8.3
CVE-2026-54661 CVSS:8.3 swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2,…
+GitHub-Advis - CVE-2026-54727 proot-distro is a utility for managing proot containers. Prior to version 5.1.6,
CVE-2026-54727High 8.2
CVE-2026-54727 CVSS:8.2 proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose…
+GitHub-Advis - CVE-2026-54574 proot-distro is a utility for managing proot containers. Prior to version 5.1.5,
CVE-2026-54574High 8.2
CVE-2026-54574 CVSS:8.2 proot-distro is a utility for managing proot containers. Prior to version 5.1.5, proot-distro install extracted plain tarball root…
+GitHub-Advis - CVE-2026-58188 Several Apache Traffic Server experimental plugins have memory-safety and limit
CVE-2026-58188High 8.2
CVE-2026-58188 CVSS:8.2 Several Apache Traffic Server experimental plugins have memory-safety and limit-bypass errors. This issue affects Apache Traffic… - CVE-2026-58184 The Apache Traffic Server header_rewrite plugin can crash or corrupt memory duri
CVE-2026-58184High 8.2
CVE-2026-58184 CVSS:8.2 The Apache Traffic Server header_rewrite plugin can crash or corrupt memory during cookie operations and CIDR condition matching. This… - CVE-2026-17686 Insufficient validation of untrusted input in Passwords in Google Chrome prior t
CVE-2026-17686High 8.1
CVE-2026-17686 CVSS:8.1 Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had… - CVE-2026-67595 VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript p
CVE-2026-67595High 8.1
CVE-2026-67595 CVSS:8.1 VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in the Blade template responsible for… - CVE-2026-13308 Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Executi
CVE-2026-13308High 8.1
CVE-2026-13308 CVSS:8.1 Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote… - CVE-2026-67192 Xlight FTP Server before 3.9.5 contains a pre-authentication stack buffer overfl
CVE-2026-67192High 8.1
CVE-2026-67192 CVSS:8.1 Xlight FTP Server before 3.9.5 contains a pre-authentication stack buffer overflow vulnerability that allows unauthenticated attackers… - CVE-2026-58179 The Apache Traffic Server regex_remap plugin overflows the stack and integers fr
CVE-2026-58179High 8.1
CVE-2026-58179 CVSS:8.1 The Apache Traffic Server regex_remap plugin overflows the stack and integers from substitution input. This issue affects Apache… - CVE-2026-58177 The Apache Traffic Server Cripts framework has out-of-bounds writes, path traver
CVE-2026-58177High 8.1
CVE-2026-58177 CVSS:8.1 The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects… - CVE-2026-12703 TeamViewer Full Client and Host for macOS before version 15.80 contain a busines
CVE-2026-12703High 8.0
CVE-2026-12703 CVSS:8.0 TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker… - CVE-2026-17654 Race in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local a
CVE-2026-17654High 7.8
CVE-2026-17654 CVSS:7.8 Race in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a… - CVE-2026-6102 MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulner
CVE-2026-6102High 7.8
CVE-2026-6102 CVSS:7.8 MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to… - CVE-2026-5056 GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerabilit
CVE-2026-5056High 7.8
CVE-2026-5056 CVSS:7.8 GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
+GitHub-Advis - CVE-2026-13268 G DATA Total Security Backup Service Link Following Local Privilege Escalation V
CVE-2026-13268High 7.8
CVE-2026-13268 CVSS:7.8 G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers… - CVE-2026-64560 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-t
CVE-2026-64560High 7.8
CVE-2026-64560 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec() race… - CVE-2026-64559 In the Linux kernel, the following vulnerability has been resolved: s390/pkey:
CVE-2026-64559High 7.8
CVE-2026-64559 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in PKEY_VERIFYPROTK ioctl Explicitly check… - CVE-2026-64558 In the Linux kernel, the following vulnerability has been resolved: s390/pkey:
CVE-2026-64558High 7.8
CVE-2026-64558 CVSS:7.8 In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in pkey_pckmo handler implementation… - CVE-2026-16463 A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force
CVE-2026-16463High 7.8
CVE-2026-16463 CVSS:7.8 A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor… - CVE-2026-18220 An out-of-bounds write vulnerability was found in the BFD library's DLX ELF back
CVE-2026-18220High 7.8
CVE-2026-18220 CVSS:7.8 An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend (bfd/elf32-dlx.c) in GNU binutils. The…
+PoC-in-GitHu - CVE-2026-17698 Insufficient validation of untrusted input in UI in Google Chrome on Android pri
CVE-2026-17698High 7.5
CVE-2026-17698 CVSS:7.5 Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak… - CVE-2026-67437 OliveTin gives access to predefined shell commands from a web interface. From 30
CVE-2026-67437High 7.5
CVE-2026-67437 CVSS:7.5 OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the…
+GitHub-Advis - CVE-2026-50782 Jinher OA C6 contains an XML External Entity (XXE) injection vulnerability in th
CVE-2026-50782High 7.5
CVE-2026-50782 CVSS:7.5 Jinher OA C6 contains an XML External Entity (XXE) injection vulnerability in the… - CVE-2026-67432 MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and cli
CVE-2026-67432High 7.5
CVE-2026-67432 CVSS:7.5 MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0,…
+GitHub-Advis - CVE-2026-5491 DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnera
CVE-2026-5491High 7.5
CVE-2026-5491 CVSS:7.5 DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive…
+GitHub-Advis - CVE-2026-5487 DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnera
CVE-2026-5487High 7.5
CVE-2026-5487 CVSS:7.5 DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive… - CVE-2026-5057 ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability.
CVE-2026-5057High 7.5
CVE-2026-5057 CVSS:7.5 ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a…
+GitHub-Advis - CVE-2026-15975 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.8
CVE-2026-15975High 7.5
CVE-2026-15975 CVSS:7.5 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before… - CVE-2025-60931 An Insecure Direct Object Reference (IDOR) in the Employee Compensation View fun
CVE-2025-60931High 7.5
CVE-2025-60931 CVSS:7.5 An Insecure Direct Object Reference (IDOR) in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows… - CVE-2026-67215 cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack ex
CVE-2026-67215High 7.5
CVE-2026-67215 CVSS:7.5 cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is… - CVE-2026-65943 Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI < 9.
CVE-2026-65943High 7.5
CVE-2026-65943 CVSS:7.5 Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI < 9.11.0 产品: - CVE-2026-58189 Apache Traffic Server allows redirect-limit bypass when plugins reset the retry
CVE-2026-58189High 7.5
CVE-2026-58189 CVSS:7.5 Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SSRF amplification. This issue… - CVE-2026-58186 The Apache Traffic Server webp_transform plugin can decode unsafely and serve mi
CVE-2026-58186High 7.5
CVE-2026-58186 CVSS:7.5 The Apache Traffic Server webp_transform plugin can decode unsafely and serve mislabeled, cacheable responses. This issue affects… - CVE-2026-58181 The Apache Traffic Server uri_signing and url_sig plugins can exhaust the stack
CVE-2026-58181High 7.5
CVE-2026-58181 CVSS:7.5 The Apache Traffic Server uri_signing and url_sig plugins can exhaust the stack or crash on attacker input. This issue affects Apache… - CVE-2026-58180 The Apache Traffic Server txn_box plugin overflows the stack from attacker-contr
CVE-2026-58180High 7.5
CVE-2026-58180 CVSS:7.5 The Apache Traffic Server txn_box plugin overflows the stack from attacker-controlled input. This issue affects Apache Traffic Server:… - CVE-2026-58178 The Apache Traffic Server ESI plugin can recurse without bound and fetch attacke
CVE-2026-58178High 7.5
CVE-2026-58178 CVSS:7.5 The Apache Traffic Server ESI plugin can recurse without bound and fetch attacker-controlled URLs. This issue affects Apache Traffic… - CVE-2026-58175 Apache Traffic Server leaks memory when handling HostDB SRV records. This issue
CVE-2026-58175High 7.5
CVE-2026-58175 CVSS:7.5 Apache Traffic Server leaks memory when handling HostDB SRV records. This issue affects Apache Traffic Server: from 8.0.0 through… - CVE-2026-58164 Apache Traffic Server has use-after-free and time-of-check/time-of-use errors in
CVE-2026-58164High 7.5
CVE-2026-58164 CVSS:7.5 Apache Traffic Server has use-after-free and time-of-check/time-of-use errors in remap configuration handling. This issue affects… - CVE-2026-8497 Improper certificate validation in the Devolutions Server connection handling in
CVE-2026-8497High 7.4
CVE-2026-8497 CVSS:7.4 Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on… - CVE-2026-13697 undici's cache interceptor mishandles malformed Cache-Control private directives
CVE-2026-13697High 7.4
CVE-2026-13697 CVSS:7.4 undici's cache interceptor mishandles malformed Cache-Control private directives. In undici 7.0.0 up to before 7.29.0 and 8.0.0 up to… - CVE-2026-54660 swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI spe
CVE-2026-54660High 7.4
CVE-2026-54660 CVSS:7.4 swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2,…
+GitHub-Advis - CVE-2025-69949 kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in chec
CVE-2025-69949High 7.3
CVE-2025-69949 CVSS:7.3 kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in check_availability.php via the parameters emailid and… - CVE-2025-69945 kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doc
CVE-2025-69945High 7.3
CVE-2025-69945 CVSS:7.3 kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1. 产品: - CVE-2025-67408 Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Inject
CVE-2025-67408High 7.3
CVE-2025-67408 CVSS:7.3 Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /save_user.php via the parameter status. 产品: - CVE-2025-67407 Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Inject
CVE-2025-67407High 7.3
CVE-2025-67407 CVSS:7.3 Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_student.php via parameters fname and… - CVE-2025-67406 https://www.sourcecodester.com Advocate office management system 1.0 is affected
CVE-2025-67406High 7.3
CVE-2025-67406 CVSS:7.3 https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary… - CVE-2025-67405 Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Inject
CVE-2025-67405High 7.3
CVE-2025-67405 CVSS:7.3 Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_password.php via the parameter… - CVE-2026-15144 @fastify/rate-limit before 11.2.0 keys rate-limit buckets by the verbatim client
CVE-2026-15144High 7.3
CVE-2026-15144 CVSS:7.3 @fastify/rate-limit before 11.2.0 keys rate-limit buckets by the verbatim client IP string returned from request.ip. Because a single… - CVE-2026-65947 Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in
CVE-2026-65947High 7.3
CVE-2026-65947 CVSS:7.3 Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2 产品: - CVE-2026-12357 Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Exec
CVE-2026-12357High 7.2
CVE-2026-12357 CVSS:7.2 Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability. This vulnerability allows remote… - CVE-2026-18255 A flaw was found in Quay. A user configured in GLOBAL_READONLY_SUPER_USERS is ab
CVE-2026-18255High 7.2
CVE-2026-18255 CVSS:7.2 A flaw was found in Quay. A user configured in GLOBAL_READONLY_SUPER_USERS is able to view robot account tokens for repositories they… - CVE-2026-16655 The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Fo
CVE-2026-16655High 7.2
CVE-2026-16655 CVSS:7.2 The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Stored… - CVE-2026-16597 The GTM4WP – A Google Tag Manager (GTM) plugin for WordPress plugin for WordPres
CVE-2026-16597High 7.2
CVE-2026-16597 CVSS:7.2 The GTM4WP – A Google Tag Manager (GTM) plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… - CVE-2026-17744 Inappropriate implementation in File Input in Google Chrome on Linux prior to 15
CVE-2026-17744High 7.1
CVE-2026-17744 CVSS:7.1 Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially… - CVE-2026-17741 Insufficient validation of untrusted input in WebView in Google Chrome on Androi
CVE-2026-17741High 7.1
CVE-2026-17741 CVSS:7.1 Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to… - CVE-2026-40272 Improper Input Validation in the decode() function of the traceparser library co
CVE-2026-40272High 7.0
CVE-2026-40272 CVSS:7.0 Improper Input Validation in the decode() function of the traceparser library could allow an attacker with a corrupted kernel trace… - CVE-2026-14266 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerab
CVE-2026-14266High 7.0
CVE-2026-14266 CVSS:7.0 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to…
+PoC-in-GitHu
🤖 漏洞情报自动汇总 · 2026-08-01 · 数据来源: NVD / GitHub Advisory / Sploitus / CISA-KEV