Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to modify parts of the configuration on an affected dev
A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device. This vulnerability is due t
A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate. This vulnerability is due
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct a cr
On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulnerabilities impact critical operations such as the Brotli decoder, DNS resolution,
On November 4, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco UCS Central Software Remote Code Execution Vulnerability CVE-202
Between October 17 and October 20, 2026, a critical security compromise involving Certificate Authorities that are managed by eMudhra was uncovered. A security researcher demonstrated that the private keys for eight eMudhra intermediate certificates were
On October 21, the PHP Foundation announced the availability of a Critical PHP Security release addressing two critical vulnerabilities: CVE-2026-109618 - RCE via OOM corruption CVE-2026-109619 - RCE via stale global state For information about these vul
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerab
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device. This vulnerability is due to improper input validation
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due
A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are imprope
高危CVE修复说明CVE-2026-99999 内核升级说明关于 ca-certificates 的 eMudhra 证书泄露修复说明关于 PHP 的 CVE-2026-109618 和 CVE-2026-109619 （PHP2Shell）修复说明CVE-2026-31431 内核升级修复说明CVE-2026-43284 & CVE-2026-43500 (DirtyFrag）内核漏洞修复说明CVE-20
高危CVE修复说明CVE-2026-98432 漏洞修复说明关于 ca-certificates 的 eMudhra 证书泄露修复说明关于 PHP 的 CVE-2026-109618 和 CVE-2026-109619 （PHP2Shell）修复说明CVE-2026-31431 内核升级修复说明CVE-2026-43284 & CVE-2026-43500 (DirtyFrag）内核漏洞修复说明CVE-20
高危CVE修复说明CVE-2026-98432 漏洞修复说明CVE-2026-99999 内核升级说明关于 ca-certificates 的 eMudhra 证书泄露修复说明CVE-2026-31431 内核升级修复说明CVE-2026-43284 & CVE-2026-43500 (DirtyFrag）内核漏洞修复说明CVE-2026-46300（Fragnesia）内核漏洞不受影响情况
站内所有资源、漏洞预警、工具与专题内容仅面向企业授权自测、合规研究与安全运维使用。本站不提供可直接用于非法攻击的程序、载荷或黑产平台入口。
