最新预警列表

严重高危国内 Linux 发行版云厂商主机安全开源社区云原生漏洞数据库官方通告已被利用漏洞预警 CVE 官方源厂商通告 PSIRT 网络设备 DDoS 攻击情报厂商报告 NVD Recent openEuler 安全公告 OSV CISA KEV Cisco PSIRT CERT/CC VU Huawei PSIRT CERT-EU Cloudflare DDoS 阿里云 Alibaba Cloud Linux 安全公告

CRITICAL Cisco PSIRT 2026-08-17

Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to insufficient access contro

查看官方参考

CRITICAL Cisco PSIRT 2026-08-17

Cisco Advance Notification for Publication of August 5, 2026, Security Advisories

On August 5, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026 C

查看官方参考

CRITICAL NVD Recent 2026-08-12

CVE-2026-8457：The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to and inc

The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to and including 2.8.7. This is due to the plugin's Apple login handler accepting the Apple id_token and decoding only its base64 payload without

查看官方参考

CRITICAL Cisco PSIRT 2026-08-12

Cisco IOS XE Software Security Hardening Release: August 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple i

查看官方参考

CRITICAL CERT/CC VU 2026-08-11

VU#305509: OPeNDAP Hyrax is vulnerable to SSRF and Credential Disclosure

Overview A vulnerability has been discovered in the OPeNDAP Hyrax software solution. A remote attacker with the ability to submit crafted requests to an affected Hyrax instance could cause the application to communicate with unauthorized remote systems. U

查看官方参考

CRITICAL CERT/CC VU 2026-08-10

VU#614868: Opencart ecommerce platform contains directory traversal vulnerability

Overview The OpenCart v4.2.0.0 extension installer contains a directory traversal vulnerability. The extension installation process extracts uploaded .zip files then uses the zip entry filenames as filesystem paths, without validating that the resolved pa

查看官方参考

CRITICAL NVD Recent 2026-08-07

CVE-2026-58048：Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.

Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.

查看官方参考