4 matches found
CVE-2026-82533
DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability in its local HTTP control-plane API that allows attackers to gain full agent control by supplying a spoofed Host header, as the server validates only the client-supplied Host header value rather than the actual...
CVE-2026-82533 DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofing
DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability in its local HTTP control-plane API that allows attackers to gain full agent control by supplying a spoofed Host header, as the server validates only the client-supplied Host header value rather than the actual...
Linux Distros Unpatched Vulnerability : CVE-2026-33743
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incus is a system container and virtual machine manager. Prior to version 6.23.0, a specially crafted storage bucket backup can be used by an user with access t...
Talos Linux 安全漏洞
Talos Linux is Sidero Labs' modern Linux distribution built for Kubernetes. Talos Linux suffers from a security vulnerability that stems from incorrect validation of a request when signing a CSR Certificate Signing Request for a worker node, resulting in full access to the Talos API on a control...