📊 2026-08-06 漏洞情报日报 · 200 条 · 高危 148
每日漏洞情报汇总 · 2026-08-06
📊 2026-08-06 漏洞情报日报
📋 共 200 条
🔥 高危/严重 148 条
🚨 CISA-KEV 1 条
🐙 GitHub-Advisory 70 条 🔥19
🛡️ NVD-Latest 129 条 🔥129
🤖 今日安全态势分析
🎯 今日重点关注
- CVE-2026-71319（Nuxt DevTools RCE）：开发模式下的Vite HMR WebSocket未认证RPC通道，攻击者可达端点即任意命令执行。
- Adobe Campaign Classic 系列（CVE-2026-48331/48330/48323等）：SSRF、SQL注入、模板引擎注入多个CVSS 10.0漏洞，可致权限提升与任意代码执行。
- CVE-2026-70477（Flowise CSV智能体提示注入RCE）：版本3.1.1受影响，通过恶意CSV触发提示注入，实现远程代码执行。
- SiYuan 系列（CVE-2026-69083/69084/69085）：多个SQL注入点CVSS 10.0，未认证或低权限可操作数据库，已有PoC公开。
- rclone 三漏洞（CVE-2026-71309/54572/71312）：路径穿越、符号链接绕过、PowerShell智能引号注入，可导致文件读写、任意写入或服务端命令执行。
📈 威胁趋势
- 远程代码执行（RCE）：占比最高，涉及Nuxt、Flowise、Adobe Campaign、SiYuan等，多为未认证或低权限利用。
- SQL注入：Adobe Campaign、SiYuan、HUMANIST均存在，可致数据泄露或任意代码执行。
- 权限提升：Adobe Campaign SSRF链、Nuxt缓存投毒导致跨用户数据泄露。
- 拒绝服务（DoS）：Nuxt island未认证CPU耗尽（CVE-2026-71321）可被远程利用。
- 信息泄露：Nuxt SSR payload缓存越权读取（CVE-2026-71316）泄露其他用户数据。
🛡️ 缓解建议
- 将 Nuxt、rclone、Flowise、SiYuan、Adobe Campaign 更新至最新修复版本，并限制开发端口仅本机可访问。
- 对暴露的 /__nuxt_island/、/api/ 等端点实施身份验证与访问控制，启用WAF拦截SQL注入和路径穿越Payload。
- 禁用不必要的动态模板编译（vue.runtimeCompiler）及rclone --links/serve restic高风险特性，遵循最小权限配置。
- 监控当日PoC利用行为，重点审计HMR WebSocket、island接口及数据库异常查询日志。
🚨 CISA-KEV（1 条）
Unknown (1 条)
- CVE-2026-63077 - JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
CVE-2026-63077
CVE-2026-63077 JetBrains TeamCity Deserialization of Untrusted Data Vulnerability 产品: JetBrains TeamCity 描述: JetBrains TeamCity contains a deserialization of…
🐙 GitHub-Advisory（70 条）
Critical (2 条)
- CVE-2026-71319 - Unauthenticated Nuxt DevTools RPC allows arbitrary command execution on the deve
CVE-2026-71319Critical
Impact Nuxt DevTools (development mode only) exposes a bidirectional RPC channel over the Vite HMR WebSocket via the `nuxt:devtools:rpc` plugin. On affected… - CVE-2026-70477 - Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
CVE-2026-70477Critical
-- ABSTRACT ------------------------------------- Trend Micro's Zero Day Initiative has identified a vulnerability affecting the following products: Flowise -…
High (17 条)
- CVE-2026-71316 - Nuxt runtime payload cache discloses another user's SSR data across users and to
CVE-2026-71316High
Impact When a page is covered by `routeRules` `cache` / `swr` / `isr`, Nuxt enables runtime payload extraction and serves `/<page>/_payload.json`. On affected… - CVE-2026-71320 - Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt S
CVE-2026-71320High
## Impact Nuxt server islands accept props via the `/__nuxt_island/` endpoint. When `vue.runtimeCompiler: true` is enabled (off by default) and the application… - CVE-2026-71321 - Nuxt: Unauthenticated CPU exhaustion parsing and hashing the Nuxt island endpoin
CVE-2026-71321High
Impact The internal island renderer endpoint (`/__nuxt_island/...`) decodes and hashes attacker-controlled request input before it validates the URL-resident… - CVE-2026-71309 - rclone: Incomplete path validation allows backend root escape in serve restic
CVE-2026-71309High
## Summary `rclone serve restic` does not correctly reject URL paths beginning with `../`. On affected backends, an attacker who can access the REST endpoint… - CVE-2026-54572 - rclone: Unvalidated symlink target in local `--links` — arbitrary file write fro
CVE-2026-54572High
Summary With `-l/--links`, rclone serializes symlinks as `<name>.rclonelink` text objects whose body is the link target. When rclone writes such an object to a… - CVE-2026-71312 - rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Comma
CVE-2026-71312High
## 1. Summary rclone interpolates remote SFTP paths into PowerShell hash commands. Its quoting helper escapes only ASCII apostrophe, although PowerShell… - CVE-2026-59733 - rclone `serve restic --private-repos` authorization bypass: `..` in the URL path
CVE-2026-59733High
## Summary `rclone serve restic --private-repos` exists to let one rclone instance host many users' restic backup repositories behind HTTP Basic auth while… - CVE-2026-71314 - Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in islan
CVE-2026-71314High
Impact An unauthenticated attacker can crash a Nuxt server that renders any island / server component containing a `v-for` over a prop (for example `v-for="n… - CVE-2026-71315 - Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware
CVE-2026-71315High
Impact Nuxt matches route rules case-insensitively by default (mirroring vue-router's default `sensitive: false` routing). The fix for GHSA-mm7m-92g8-7m47 /… - CVE-2026-70608 - Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenU
CVE-2026-70608High
Impact A sandboxed iframe without the `allow-popups` keyword could still open a new window (or trigger `setWindowOpenHandler`) with no user interaction,… - CVE-2026-70601 - Electron: Context isolation bypass via Function.prototype.bind hijack
CVE-2026-70601High
Impact Apps that expose Promise-returning functions to web content via `contextBridge` may be vulnerable to a context isolation bypass. Untrusted web content… - CVE-2026-70604 - Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross
CVE-2026-70604High
Impact A custom scheme registered with `supportFetchAPI: true` but without `corsEnabled: true` was not subject to CORS enforcement. A page loaded from a remote… - CVE-2026-53950 - XSS in Ghost's ActivityPub client
CVE-2026-53950High
Impact The ActivityPub client in Ghost was vulnerable to JavaScript injection on posts shared by a maliciously customised ActivityPub server. Vulnerable… - CVE-2026-70492 - Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered mes
CVE-2026-70492High
## Summary Any authenticated user can store a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. When that happens… - CVE-2026-70494 - Open WebUI: A folder write-collaborator can permanently delete the owner's chats
CVE-2026-70494High
## Summary A user granted write access to a shared chat folder could permanently delete chats and messages belonging to the folder's owner. Deleting a folder… - CVE-2026-70475 - Flowise: Missing Authorization on Execution Update Endpoint
CVE-2026-70475High
# Flowise Security Audit Report **Date**: 2026-03-17 **Researcher**: Dimpal Jadhav (jadhavdimpy@gmail.com) **GitHub**: https://github.com/Dimpyj1604… - CVE-2026-70476 - Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Ten
CVE-2026-70476High
Summary Several organization billing endpoints accept attacker-controlled Stripe identifiers (subscriptionId) without verifying that the identifier belongs to…
Medium (46 条)
- CVE-2026-71318 - Nuxt: Unauthorized Component Instantiation via Server Island Props
CVE-2026-71318Medium
## Impact Nuxt server islands accept props via the `/__nuxt_island/` endpoint. When an application has a server island component that forwards props directly… - CVE-2026-65601 - Traefik Gateway API HTTPRoute BackendRef ExtensionRef Namespace Confusion
CVE-2026-65601Medium
## Summary There is a medium-severity namespace-confusion vulnerability in Traefik's Kubernetes Gateway API provider. When resolving… - CVE-2026-65602 - Traefik CRD IngressRouteTCP ServersTransport Cross-Provider Namespace Bypass
CVE-2026-65602Medium
## Summary There is a medium-severity cross-provider reference vulnerability in Traefik's Kubernetes CRD provider. The `crossProviderNamespaces` allowlist is… - CVE-2026-71310 - rclone: Unbounded HTTP CONNECT Response Headers Can Exhaust rclone Memory
CVE-2026-71310Medium
## 1. Summary The shared HTTP CONNECT helper parses a proxy response with `http.ReadResponse` over an unrestricted buffered reader. The production helper… - GHSA-3x6r-wxxg-53vv - rclone: Infinite Scale TUS Creation Transport Error Causes a Nil-Response Panic Medium
## 1. Summary A transport failure during the initial Infinite Scale TUS creation POST can return `(nil response, non-nil error)`. Rclone dereferences the nil… - GHSA-8v25-v8p6-qf7v - rclone: Path traversal in serve s3 allows reading and overwriting root-level fi Medium
Summary rclone serve s3 allows a client to read and write files at the root of the remote which would normally be inaccessible by using dot-dot path segments… - GHSA-8mxv-9xhp-86h4 - rclone: S3 Redirect Sanitization Omits IBM IAM Bearer Tokens and SSE-C Keys Medium
## 1. Summary The S3 redirect callback strips `X-Amz-Security-Token` when a redirect changes scheme or host, but it does not strip IBM IAM bearer authorization… - CVE-2026-71311 - rclone: FTP Command Arguments Permit CRLF Injection When Custom Encoding Preserv
CVE-2026-71311Medium
## 1. Summary A valid but nondefault FTP filename encoding can restore raw CR/LF immediately before an attacker-controlled path is interpolated into the…
…另有 38 条 Medium 级漏洞（已省略）
Low (5 条)
- GHSA-gx4c-2hqx-cw2r - rclone: S3 backend does not strip X-Amz-Security-Token on a same-host HTTPS->HTT Low
## Vulnerability Details **File**: `backend/s3/s3.go` **Lines**: 1359-1380 (functions `s3CheckRedirect` / `s3RedirectCrossesHost`) Root Cause Commit… - GHSA-gwfq-86j8-7qhv - rclone: Verbose Stack Trace Disclosure in RC API Error Responses Low
Summary When an RC API call triggers a panic (recovered by the job runner), the full Go stack trace is included in the JSON error response. This leaks internal… - GHSA-945v-v9p3-v5xw - rclone local `--metadata` applies attacker-controlled mode/uid - setuid binary p Low
Summary When writing an object with metadata, the local backend applies the source-supplied `mode`, `uid`, and `gid` verbatim: it parses `mode` as an octal…
…另有 2 条 Low 级漏洞（已省略）
🛡️ NVD-Latest（129 条）
Critical (42 条)
- CVE-2026-48331 Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF)
CVE-2026-48331Critical 10.0
CVE-2026-48331 CVSS:10.0 Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege… - CVE-2026-48330 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia
CVE-2026-48330Critical 10.0
CVE-2026-48330 CVSS:10.0 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')… - CVE-2026-48323 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia
CVE-2026-48323Critical 10.0
CVE-2026-48323 CVSS:10.0 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability… - CVE-2026-69085 SiYuan before v3.7.3 contains a SQL injection vulnerability in the /api/filetree
CVE-2026-69085Critical 10.0
CVE-2026-69085 CVSS:10.0 SiYuan before v3.7.3 contains a SQL injection vulnerability in the /api/filetree/searchDocs endpoint, where the caller-supplied… - CVE-2026-69084 SiYuan versions <= v3.7.2 expose the /api/search/searchEmbedBlock endpoint, whic
CVE-2026-69084Critical 10.0
CVE-2026-69084 CVSS:10.0 SiYuan versions <= v3.7.2 expose the /api/search/searchEmbedBlock endpoint, which passes a client-supplied SQL statement verbatim to… - CVE-2026-69083 SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullT
CVE-2026-69083Critical 10.0
CVE-2026-69083 CVSS:10.0 SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable by…
+PoC-in-GitHu - CVE-2026-48326 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia
CVE-2026-48326Critical 9.9
CVE-2026-48326 CVSS:9.9 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')… - CVE-2026-15721 Cleartext storage of sensitive information vulnerability in Bilin Software and I
CVE-2026-15721Critical 9.8
CVE-2026-15721 CVSS:9.8 Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human… - CVE-2026-14175 Unrestricted upload of file with dangerous type vulnerability in Bilin Software
CVE-2026-14175Critical 9.8
CVE-2026-14175 CVSS:9.8 Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human… - CVE-2026-16618 The Improve SEO WordPress plugin through 2.0.11 does not properly validate uploa
CVE-2026-16618Critical 9.8
CVE-2026-16618 CVSS:9.8 The Improve SEO WordPress plugin through 2.0.11 does not properly validate uploaded files, checking only the file content type while… - CVE-2026-18686 A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected elem
CVE-2026-18686Critical 9.8
CVE-2026-18686 CVSS:9.8 A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function nas-web.add_user of the file… - CVE-2026-18685 A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Imp
CVE-2026-18685Critical 9.8
CVE-2026-18685 CVSS:9.8 A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function set_upgrade of the file… - CVE-2026-48333 Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerabi
CVE-2026-48333Critical 9.8
CVE-2026-48333 CVSS:9.8 Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An… - CVE-2026-18684 A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. This issue affe
CVE-2026-18684Critical 9.8
CVE-2026-18684 CVSS:9.8 A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. This issue affects the function remove_profile of the file… - CVE-2026-69240 Sequelize is a Node.js ORM tool. Prior to 6.37.4, SQL injection is possible with
CVE-2026-69240Critical 9.8
CVE-2026-69240 CVSS:9.8 Sequelize is a Node.js ORM tool. Prior to 6.37.4, SQL injection is possible with strings only if dialect is set to oracle. The escape…
+GitHub-Advis - CVE-2026-68979 Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API me
CVE-2026-68979Critical 9.8
CVE-2026-68979 CVSS:9.8 Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce authorization checking on… - CVE-2026-38447 osTicket 1.18.3 generates API keys using a predictable construction based on MD5
CVE-2026-38447Critical 9.8
CVE-2026-38447 CVSS:9.8 osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with predictable… - CVE-2026-18616 A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted el
CVE-2026-18616Critical 9.8
CVE-2026-18616 CVSS:9.8 A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted element is the function server.set_peer of the file… - CVE-2026-18615 A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5. The affected el
CVE-2026-18615Critical 9.8
CVE-2026-18615 CVSS:9.8 A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5. The affected element is the function wg-server.generate_publickey of… - CVE-2026-18614 A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5. Impacted is the func
CVE-2026-18614Critical 9.8
CVE-2026-18614 CVSS:9.8 A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5. Impacted is the function s2s.enable_echo_server of the file /cgi-bin/glc of… - CVE-2026-18613 A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue affe
CVE-2026-18613Critical 9.8
CVE-2026-18613 CVSS:9.8 A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue affects the function plugins.set_config of the file… - CVE-2026-18612 A flaw has been found in GL-iNet GL-MT3000 up to 4.4.5. This vulnerability affec
CVE-2026-18612Critical 9.8
CVE-2026-18612 CVSS:9.8 A flaw has been found in GL-iNet GL-MT3000 up to 4.4.5. This vulnerability affects the function… - CVE-2026-41452 Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installe
CVE-2026-41452Critical 9.8
CVE-2026-41452 CVSS:9.8 Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote… - CVE-2026-18602 A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5. Affected is the
CVE-2026-18602Critical 9.8
CVE-2026-18602 CVSS:9.8 A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function ovpn-client.get_recommend_config of the file… - CVE-2026-64827 Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x
CVE-2026-64827Critical 9.8
CVE-2026-64827 CVSS:9.8 Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authentication bypass… - CVE-2026-18601 A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5. This impacts the fun
CVE-2026-18601Critical 9.8
CVE-2026-18601 CVSS:9.8 A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5. This impacts the function ovpn-client.check_config of the file /cgi-bin/glc… - CVE-2026-18108 Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _ve
CVE-2026-18108Critical 9.8
CVE-2026-18108 CVSS:9.8 Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an EncryptedAssertion… - CVE-2026-2346 Authorization bypass through User-Controlled key vulnerability in Menulux Softwa
CVE-2026-2346Critical 9.8
CVE-2026-2346 CVSS:9.8 Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc. Mobile App allows Software Integrity Attack.… - CVE-2026-18589 A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the
CVE-2026-18589Critical 9.8
CVE-2026-18589 CVSS:9.8 A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function change_password of the file nas.cgi. The… - CVE-2026-18588 A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affect
CVE-2026-18588Critical 9.8
CVE-2026-18588 CVSS:9.8 A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the file nas.cgi. The… - CVE-2026-48317 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Direct
CVE-2026-48317Critical 9.6
CVE-2026-48317 CVSS:9.6 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')… - CVE-2026-18667 A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code
CVE-2026-18667Critical 9.6
CVE-2026-18667 CVSS:9.6 A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an operator to… - CVE-2026-15958 The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform
CVE-2026-15958Critical 9.3
CVE-2026-15958 CVSS:9.3 The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management… - CVE-2026-14804 Use of hard-coded cryptographic key vulnerability in Bilin Software and Informat
CVE-2026-14804Critical 9.1
CVE-2026-14804 CVSS:9.1 Use of hard-coded cryptographic key vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources… - CVE-2026-18754 The product firmware contains an embedded, static RSA private key utilized by th
CVE-2026-18754Critical 9.1
CVE-2026-18754 CVSS:9.1 The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of… - CVE-2026-18753 The product firmware contains an embedded, static RSA private key utilized by th
CVE-2026-18753Critical 9.1
CVE-2026-18753 CVSS:9.1 The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of… - CVE-2026-68980 Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets
CVE-2026-68980Critical 9.1
CVE-2026-68980 CVSS:9.1 Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Contexts through the REST… - CVE-2026-48031 go-base is a Go RESTful API Boilerplate template with JWT Authentication, backed
CVE-2026-48031Critical 9.1
CVE-2026-48031 CVSS:9.1 go-base is a Go RESTful API Boilerplate template with JWT Authentication, backed by PostgreSQL. In versions prior to 2026-05-18, the…
+GitHub-Advis - CVE-2026-39932 OpenEMR through 8.2.0 contains a remote code execution vulnerability in the docu
CVE-2026-39932Critical 9.1
CVE-2026-39932 CVSS:9.1 OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component… - CVE-2026-18248 @fastify/aws-lambda version 6.4.0 decorates each Fastify request with request.aw
CVE-2026-18248Critical 9.1
CVE-2026-18248 CVSS:9.1 @fastify/aws-lambda version 6.4.0 decorates each Fastify request with request.awsLambda.event and request.awsLambda.context, values… - CVE-2026-9487 XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID
CVE-2026-9487Critical 9.1
CVE-2026-9487 CVSS:9.1 XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID. _get_signed_xml() in lib/XML/Sig.pm, called from… - CVE-2026-9390 XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup. veri
CVE-2026-9390Critical 9.1
CVE-2026-9390 CVSS:9.1 XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup. verify() and _get_signed_xml() in lib/XML/Sig.pm build XPath…
High (87 条)
- CVE-2026-70371 Koha's reports/issues_avg_stats.pl builds dynamic SQL in sub calculate by concat
CVE-2026-70371High 8.8
CVE-2026-70371 CVSS:8.8 Koha's reports/issues_avg_stats.pl builds dynamic SQL in sub calculate by concatenating several user-controlled request parameters… - CVE-2026-70370 Koha's reports/catalogue_stats.pl builds dynamic SQL in sub calculate by interpo
CVE-2026-70370High 8.8
CVE-2026-70370 CVSS:8.8 Koha's reports/catalogue_stats.pl builds dynamic SQL in sub calculate by interpolating the user-controlled Line and Column request… - CVE-2026-70369 Koha's reports/acquisitions_stats.pl builds its per-cell statistics query in sub
CVE-2026-70369High 8.8
CVE-2026-70369 CVSS:8.8 Koha's reports/acquisitions_stats.pl builds its per-cell statistics query in sub calculate by interpolating the user-controlled Filter… - CVE-2026-62870 Use after free in Microsoft Office Excel allows an unauthorized attacker to exec
CVE-2026-62870High 8.8
CVE-2026-62870 CVSS:8.8 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 产品: - CVE-2026-18733 A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tool
CVE-2026-18733High 8.8
CVE-2026-18733 CVSS:8.8 A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote actors to execute… - CVE-2026-41453 Krayin CRM before 2.2.4 contains a blind SQL injection vulnerability in the lead
CVE-2026-41453High 8.8
CVE-2026-41453 CVSS:8.8 Krayin CRM before 2.2.4 contains a blind SQL injection vulnerability in the leads DataGrid that allows authenticated users with leads… - CVE-2026-18607 A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN52
CVE-2026-18607High 8.8
CVE-2026-18607 CVSS:8.8 A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531,… - CVE-2026-69096 OpenWrt luci-app-dockerman (LuCI master and openwrt-25.12 snapshots containing t
CVE-2026-69096High 8.8
CVE-2026-69096 CVSS:8.8 OpenWrt luci-app-dockerman (LuCI master and openwrt-25.12 snapshots containing the ucode docker_rpc.uc RPC backend after the JS/ucode… - CVE-2026-18600 A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects th
CVE-2026-18600High 8.8
CVE-2026-18600 CVSS:8.8 A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switch_info/network.switch_status of… - CVE-2026-18598 A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected elem
CVE-2026-18598High 8.8
CVE-2026-18598 CVSS:8.8 A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function logread.get_system_log of the file… - CVE-2026-68587 SiYuan versions before v3.7.3 contain an information disclosure vulnerability in
CVE-2026-68587High 8.6
CVE-2026-68587 CVSS:8.6 SiYuan versions before v3.7.3 contain an information disclosure vulnerability in the getHeadingDeleteTransaction,… - CVE-2026-68586 SiYuan before v3.7.3 fails to apply publish-access filters to the getBacklinkDoc
CVE-2026-68586High 8.6
CVE-2026-68586 CVSS:8.6 SiYuan before v3.7.3 fails to apply publish-access filters to the getBacklinkDoc and getBackmentionDoc content endpoints… - CVE-2026-68584 SiYuan versions before v3.7.3 contain an authentication bypass vulnerability in
CVE-2026-68584High 8.6
CVE-2026-68584 CVSS:8.6 SiYuan versions before v3.7.3 contain an authentication bypass vulnerability in publish mode where content-returning endpoints… - CVE-2026-16572 The LogMyTrip WordPress plugin through 1.9 does not sanitize and escape a value
CVE-2026-16572High 8.6
CVE-2026-16572 CVSS:8.6 The LogMyTrip WordPress plugin through 1.9 does not sanitize and escape a value taken from a cookie before using it in a SQL query,… - CVE-2026-58080 In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails t
CVE-2026-58080High 8.2
CVE-2026-58080 CVSS:8.2 In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve a configured `RoleMapper`. On servers that… - CVE-2026-10849 The hawkBit device management client in subsys/mgmt/hawkbit accumulates the body
CVE-2026-10849High 8.2
CVE-2026-10849 CVSS:8.2 The hawkBit device management client in subsys/mgmt/hawkbit accumulates the body of an HTTP response from the update server into a heap… - CVE-2026-52521 A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers
CVE-2026-52521High 8.1
CVE-2026-52521 CVSS:8.1 A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter… - CVE-2026-66318 Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorize
CVE-2026-66318High 8.1
CVE-2026-66318 CVSS:8.1 Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. 产品: - CVE-2026-67611 OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allow
CVE-2026-67611High 8.1
CVE-2026-67611 CVSS:8.1 OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allows attackers with valid credentials to circumvent… - CVE-2026-67610 OpenEMR through 8.2.0 contains an improper authentication vulnerability in the O
CVE-2026-67610High 8.1
CVE-2026-67610 CVSS:8.1 OpenEMR through 8.2.0 contains an improper authentication vulnerability in the OAuth2 dynamic client registration endpoint that allows… - CVE-2026-69088 Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static m
CVE-2026-69088High 8.1
CVE-2026-69088 CVSS:8.1 Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static method calls (Class::method) in blueprint dynamic-field… - CVE-2026-18092 Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XM
CVE-2026-18092High 8.1
CVE-2026-18092 CVSS:8.1 Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new_from_xml reads… - CVE-2026-16623 The Create Block WordPress plugin before 2.10.0 does not correctly escape user
CVE-2026-16623High 8.0
CVE-2026-16623 CVSS:8.0 The Create Block WordPress plugin before 2.10.0 does not correctly escape user-supplied text before writing it into a generated PHP… - CVE-2026-18599 A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is
CVE-2026-18599High 8.0
CVE-2026-18599 CVSS:8.0 A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread.set_config of the file… - CVE-2026-10710 A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigge
CVE-2026-10710High 7.8
CVE-2026-10710 CVSS:7.8 A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in… - CVE-2026-10709 A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigge
CVE-2026-10709High 7.8
CVE-2026-10709 CVSS:7.8 A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in… - CVE-2026-41447 FirmaCheck for Windows before 1.3.16 contains a dll hijacking vulnerability that
CVE-2026-41447High 7.8
CVE-2026-41447 CVSS:7.8 FirmaCheck for Windows before 1.3.16 contains a dll hijacking vulnerability that allows local attackers to execute arbitrary code by… - CVE-2026-59913 Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, co
CVE-2026-59913High 7.8
CVE-2026-59913 CVSS:7.8 Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain a Missing Authentication for Critical Function… - CVE-2026-59912 Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, co
CVE-2026-59912High 7.8
CVE-2026-59912 CVSS:7.8 Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability. A low… - CVE-2026-18606 A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by t
CVE-2026-18606High 7.8
CVE-2026-18606 CVSS:7.8 A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the… - CVE-2026-67609 Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x
CVE-2026-67609High 7.8
CVE-2026-67609 CVSS:7.8 Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain a privilege escalation vulnerability… - CVE-2026-18642 Deserialization of untrusted data vulnerability in TUBITAK BILGEM Software Techn
CVE-2026-18642High 7.8
CVE-2026-18642 CVSS:7.8 Deserialization of untrusted data vulnerability in TUBITAK BILGEM Software Technologies Research Institute eta-otp-lock allows Object… - CVE-2026-66310 External control of file name or path in Microsoft Edge for Android allows an un
CVE-2026-66310High 7.7
CVE-2026-66310 CVSS:7.7 External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. 产品: - CVE-2026-69086 SiYuan versions before v3.7.3 fail to validate the avID parameter on all code br
CVE-2026-69086High 7.7
CVE-2026-69086 CVSS:7.7 SiYuan versions before v3.7.3 fail to validate the avID parameter on all code branches in attribute-view read endpoints, allowing… - CVE-2026-63252 In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fai
CVE-2026-63252High 7.5
CVE-2026-63252 CVSS:7.5 In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a… - CVE-2026-62927 In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the or
CVE-2026-62927High 7.5
CVE-2026-62927 CVSS:7.5 In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after… - CVE-2026-61387 In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is
CVE-2026-61387High 7.5
CVE-2026-61387 CVSS:7.5 In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an… - CVE-2026-67977 An integer overflow in the Svc::FileDownlink::SendPartial component of fprime fr
CVE-2026-67977High 7.5
CVE-2026-67977 CVSS:7.5 An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of… - CVE-2026-56846 A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade
CVE-2026-56846High 7.5
CVE-2026-56846 CVSS:7.5 A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion.… - CVE-2026-56845 An unauthenticated path traversal (LFI) vulnerability exists under /custom-sound
CVE-2026-56845High 7.5
CVE-2026-56845 CVSS:7.5 An unauthenticated path traversal (LFI) vulnerability exists under /custom-sounds/ when CustomSounds storage is configured to… - CVE-2026-66315 Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacke
CVE-2026-66315High 7.5
CVE-2026-66315 CVSS:7.5 Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. 产品: - CVE-2026-67978 An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a
CVE-2026-67978High 7.5
CVE-2026-67978 CVSS:7.5 An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via transmitting a crafted SBN… - CVE-2026-48399 Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Princip
CVE-2026-48399High 7.5
CVE-2026-48399 CVSS:7.5 Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could result in a Security… - CVE-2026-67973 An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a
CVE-2026-67973High 7.5
CVE-2026-67973 CVSS:7.5 An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via replaying final CFDP PDUs.… - CVE-2026-67976 The Ref::SignalGen component of fprime framework v4.2.2 does not validate the sa
CVE-2026-67976High 7.5
CVE-2026-67976 CVSS:7.5 The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers… - CVE-2026-68981 Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the appl
CVE-2026-68981High 7.5
CVE-2026-68981 CVSS:7.5 Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding filter. The… - CVE-2026-69185 Socket.IO enables bidirectional and low-latency communication for every platform
CVE-2026-69185High 7.5
CVE-2026-69185 CVSS:7.5 Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 4.2.7, 3.4.5, and 3.3.6, a specially crafted…
+GitHub-Advis - CVE-2026-69152 The brace-expansion library generates arbitrary strings containing a common pref
CVE-2026-69152High 7.5
CVE-2026-69152 CVSS:7.5 The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and…
+GitHub-Advis - CVE-2026-61372 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v
CVE-2026-61372High 7.5
CVE-2026-61372 CVSS:7.5 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Jena Fuseki. This issue affects… - CVE-2026-18568 XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification by
CVE-2026-18568High 7.5
CVE-2026-18568 CVSS:7.5 XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns true when every signature… - CVE-2026-69095 OpenWrt luci-app-bmx7 before commit 5890760a454dad2cb00389dba2cdc5e779e0ffdd con
CVE-2026-69095High 7.5
CVE-2026-69095 CVSS:7.5 OpenWrt luci-app-bmx7 before commit 5890760a454dad2cb00389dba2cdc5e779e0ffdd contains a path traversal vulnerability in the bmx7-info… - CVE-2026-69091 Admidio before 5.0.11 contains an authentication bypass vulnerability in the for
CVE-2026-69091High 7.5
CVE-2026-69091 CVSS:7.5 Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode. The… - CVE-2026-69089 Grav CMS 2.0.10 contains a path traversal vulnerability in ImageMedium::watermar
CVE-2026-69089High 7.5
CVE-2026-69089 CVSS:7.5 Grav CMS 2.0.10 contains a path traversal vulnerability in ImageMedium::watermark(), which passes its unsanitized $image argument to… - CVE-2026-18089 Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by ver
CVE-2026-18089High 7.5
CVE-2026-18089 CVSS:7.5 Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded… - CVE-2026-21555 In modem, there is a possible improper input validation. This could lead to remo
CVE-2026-21555High 7.5
CVE-2026-21555 CVSS:7.5 In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution… - CVE-2026-21554 In modem, there is a possible improper input validation. This could lead to remo
CVE-2026-21554High 7.5
CVE-2026-21554 CVSS:7.5 In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution… - CVE-2026-21553 In modem, there is a possible improper input validation. This could lead to remo
CVE-2026-21553High 7.5
CVE-2026-21553 CVSS:7.5 In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution… - CVE-2026-21552 In modem, there is a possible improper input validation. This could lead to remo
CVE-2026-21552High 7.5
CVE-2026-21552 CVSS:7.5 In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution… - CVE-2026-21551 In modem, there is a possible improper input validation. This could lead to remo
CVE-2026-21551High 7.5
CVE-2026-21551 CVSS:7.5 In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution… - CVE-2026-21550 In modem, there is a possible improper input validation. This could lead to remo
CVE-2026-21550High 7.5
CVE-2026-21550 CVSS:7.5 In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution… - CVE-2026-21549 In modem, there is a possible improper input validation. This could lead to remo
CVE-2026-21549High 7.5
CVE-2026-21549 CVSS:7.5 In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution… - CVE-2026-21548 In nr modem, there is a possible improper input validation. This could lead to r
CVE-2026-21548High 7.5
CVE-2026-21548 CVSS:7.5 In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution… - CVE-2026-18587 A flaw has been found in Wavlink WL-NU516U1 708c073-mt7628. The impacted element
CVE-2026-18587High 7.5
CVE-2026-18587 CVSS:7.5 A flaw has been found in Wavlink WL-NU516U1 708c073-mt7628. The impacted element is an unknown function of the component Config Import.… - CVE-2026-60007 In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns
CVE-2026-60007High 7.4
CVE-2026-60007 CVSS:7.4 In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5… - CVE-2026-14838 Use of GET request method with sensitive query strings vulnerability in Bilin So
CVE-2026-14838High 7.4
CVE-2026-14838 CVSS:7.4 Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST… - CVE-2026-66321 Access of resource using incompatible type ('type confusion') in Microsoft Edge
CVE-2026-66321High 7.4
CVE-2026-66321 CVSS:7.4 Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to… - CVE-2026-65802 External control of file name or path in Microsoft Edge for Android allows an un
CVE-2026-65802High 7.4
CVE-2026-65802 CVSS:7.4 External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a… - CVE-2026-67598 Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerab
CVE-2026-67598High 7.4
CVE-2026-67598 CVSS:7.4 Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that allows… - CVE-2026-18755 A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker
CVE-2026-18755High 7.3
CVE-2026-18755 CVSS:7.3 A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to… - CVE-2026-42169 A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file load
CVE-2026-42169High 7.3
CVE-2026-42169 CVSS:7.3 A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width… - CVE-2026-18647 A security vulnerability has been detected in jina-ai reader up to 1574bfd380d24
CVE-2026-18647High 7.3
CVE-2026-18647 CVSS:7.3 A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the… - CVE-2026-18641 A vulnerability was determined in Sangfor Operation and Maintenance Security Man
CVE-2026-18641High 7.3
CVE-2026-18641 CVSS:7.3 A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.13. Affected by this… - CVE-2026-4793 An incorrect default permissions vulnerability in Synology Assistant before 7.0.
CVE-2026-4793High 7.3
CVE-2026-4793 CVSS:7.3 An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary… - CVE-2026-67243 freo2 provided by refirio contains an unrestricted upload of file with dangerous
CVE-2026-67243High 7.2
CVE-2026-67243 CVSS:7.2 freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level… - CVE-2026-14818 A path traversal vulnerability in the CLI command used to execute configuration
CVE-2026-14818High 7.2
CVE-2026-14818 CVSS:7.2 A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32… - CVE-2026-6837 A post-authentication command injection vulnerability in the "export-cgi" CGI pr
CVE-2026-6837High 7.2
CVE-2026-6837 CVSS:7.2 A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through… - CVE-2026-69246 Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, Guzzle gives
CVE-2026-69246High 7.2
CVE-2026-69246 CVSS:7.2 Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, Guzzle gives a transport the request URI as text and supplies the…
+GitHub-Advis - CVE-2026-67599 ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer com
CVE-2026-67599High 7.2
CVE-2026-67599 CVSS:7.2 ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attackers to execute…
+PoC-in-GitHu - CVE-2026-61524 WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerabili
CVE-2026-61524High 7.2
CVE-2026-61524 CVSS:7.2 WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerability in the module installation feature that allows… - CVE-2026-61523 WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the D
CVE-2026-61523High 7.2
CVE-2026-61523 CVSS:7.2 WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated administrators… - CVE-2026-39931 OpenEMR through 8.2.0 contains an authenticated SQL injection vulnerability in t
CVE-2026-39931High 7.2
CVE-2026-39931 CVSS:7.2 OpenEMR through 8.2.0 contains an authenticated SQL injection vulnerability in the backup configuration import feature that allows… - CVE-2026-67608 Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x
CVE-2026-67608High 7.2
CVE-2026-67608 CVSS:7.2 Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an OS command injection… - CVE-2026-18806 External control of file name or path vulnerability in TÜBİTAK BİLGEM Software T
CVE-2026-18806High 7.1
CVE-2026-18806 CVSS:7.1 External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer… - CVE-2026-66322 Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorize
CVE-2026-66322High 7.1
CVE-2026-66322 CVSS:7.1 Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. 产品: - CVE-2026-18718 Ghidra contains an arbitrary code execution vulnerability in the Swift demangler
CVE-2026-18718High 7.0
CVE-2026-18718 CVSS:7.0 Ghidra contains an arbitrary code execution vulnerability in the Swift demangler analyzer that allows an attacker to execute arbitrary…
+PoC-in-GitHu - CVE-2026-18605 A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10. Affected
CVE-2026-18605High 7.0
CVE-2026-18605 CVSS:7.0 A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10. Affected is an unknown function in the library AppCheckD.sys of… - CVE-2026-69097 GitPython before 3.1.53 fails to properly escape section names in git config fil
CVE-2026-69097High 7.0
CVE-2026-69097 CVSS:7.0 GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary…
🤖 漏洞情报自动汇总 · 2026-08-06 · 数据来源: NVD / GitHub Advisory / Sploitus / CISA-KEV