关于 ca-certificates 的 eMudhra 证书泄露修复说明
高危CVE修复说明CVE-2026-98432 漏洞修复说明CVE-2026-99999 内核升级说明关于 PHP 的 CVE-2026-109618 和 CVE-2026-109619 （PHP2Shell）修复说明CVE-2026-31431 内核升级修复说明CVE-2026-43284 & CVE-2026-43500 (DirtyFrag）内核漏洞修复说明CVE-2026-46300（Fragnesia）
最新预警列表
CVE-2026-46300（Fragnesia）内核漏洞不受影响情况说明
高危CVE修复说明CVE-2026-98432 漏洞修复说明CVE-2026-99999 内核升级说明关于 ca-certificates 的 eMudhra 证书泄露修复说明关于 PHP 的 CVE-2026-109618 和 CVE-2026-109619 （PHP2Shell）修复说明CVE-2026-31431 内核升级修复说明CVE-2026-43284 & CVE-2026-43500 (DirtyF
CVE-2026-43284 & CVE-2026-43500 (DirtyFrag）内核漏洞修复说明
高危CVE修复说明CVE-2026-98432 漏洞修复说明CVE-2026-99999 内核升级说明关于 ca-certificates 的 eMudhra 证书泄露修复说明关于 PHP 的 CVE-2026-109618 和 CVE-2026-109619 （PHP2Shell）修复说明CVE-2026-31431 内核升级修复说明CVE-2026-46300（Fragnesia）内核漏洞不受
CVE-2026-31431 内核升级修复说明
高危CVE修复说明CVE-2026-98432 漏洞修复说明CVE-2026-99999 内核升级说明关于 ca-certificates 的 eMudhra 证书泄露修复说明关于 PHP 的 CVE-2026-109618 和 CVE-2026-109619 （PHP2Shell）修复说明CVE-2026-43284 & CVE-2026-43500 (DirtyFrag）内核漏洞修复说明CVE-2026-4
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated,
VU#644655: TightVNC and UltraVNC Viewer contains a heap-based buffer overflow
Overview A heap-based buffer overflow exists in the Tight JPEG decoding component of the TightVNC Windows Viewer version 1.3.10 and affected UltraVNC Windows Viewers. An attacker controlling a malicious VNC server can trigger memory corruption by sending
CVE-2026-123039：Check Point Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability
Check Point Firewall, Multi-Domain Security Management Server, Scalable Platforms, Security Gateway, and Security Management Server contain an incorrect permissions assignment for critical resources vulnerability when the Gaia OS DynamicCLI daemon runs as
CVE-2026-114713：UnrealIRCd UnrealIRCd Improper Neutralization of Delimiters Vulnerability
UnrealIRCd UnrealIRCd contains an improper neutralization of delimiters vulnerability that allows any user on a network with two or more linked servers to inject server-to-server commands that are executed with server authority.
2026-020: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway
On 12 November 2026, the Cloud Software Group published security bulletins for its Citrix products addressing 28 memory flaws in Citrix NetScaler ADC and Citrix NetScaler Gateway. One of these vulnerabilities, CVE-2026-120868, affects every deployment, in
VU#580079: Arbitrary file read/write vulnerability in ImageMagick-based applications with default configuration
Overview Multiple arbitrary file read and write vulnerabilities have been identified in applications that use ImageMagick with insufficiently restrictive security policies. Collectively referred to as ImageTragick2, these issues arise when ImageMagick pro
VU#944667: ComfyUI-Easy-Use contains unauthenticated path traversal vulnerability
Overview ComfyUI-Easy-Use version 1.4.1 and earlier contains a vulnerability in its save_preview() handler that allows an unauthenticated attacker to overwrite an installed custom node’s Python file. An attacker who can reach the affected ComfyUI instance
VU#685399: PromZard context key code injection leads to remote code execution
Overview The npm library promzard, versions 4.0.0 and earlier, is vulnerable to remote code execution due to direct string interpolation of context object keys, which allows unsanitized JavaScript code injection. Description promzard is a Node.js library
VU#385711: PrestaShop debug mode configuration allows PHP code injection
Overview PrestaShop's back-office Performance > Debug mode functionality contains a PHP code injection vulnerability. An authenticated attacker with permission to modify debug-mode configuration can submit crafted cookie configuration values that are writ
VU#203719: INFINITT PACS System Manager contains multiple code execution vulnerabilities
Overview INFINITT PACS installations using System Manager versions 3.0.11.3 and 3.0.11.5 contain vulnerabilities that may allow an attacker to execute arbitrary code. INFINITT Healthcare has remediated the issues in System Manager versions 3.0.12.3 and 3.
VU#701544: Retraction of mpc-lib hardened derivation fails to protect ancestor isolation
Overview Fireblocks' mpc-lib library contains a cryptographic fail-open vulnerability in its BIP32 hardened derivation implementation in the case of a missing private parent key. This breaks the ancestor isolation property of hardened derivation, allowing
站内所有资源、漏洞预警、工具与专题内容仅面向企业授权自测、合规研究与安全运维使用。本站不提供可直接用于非法攻击的程序、载荷或黑产平台入口。