packetfence

PacketFence PacketFence 是什么？ PacketFence 是一个完全受支持、值得信赖的免费开源网络访问控制（NAC）系统。其功能集令人印象深刻，包括用于注册和修复的强制门户、集中式有线和无线管理、802.1X 支持、问题设备的二层隔离、与 IDS 解决方案和漏洞扫描器的集成；PacketFence 可用于有效保护网络——从小型网络到非常大的异构网络。 你想知道谁在你的网络上吗？你想基于连接者给予不同的网络访问权限吗？PacketFence 正是你所需要的！ 安装 请遵循管理指南中提供的说明。 更多信息 自上次发布以来的显著变化请参见 NEWS 文件。...

CVE-2026-20180

Cisco ISE RCE：高级利用与修复分析 📋 目录 1. 执行摘要 2. 攻击面分析 3. 利用向量 4. 高级规避技术 5. 对零信任架构的系统性影响 6. 修复策略 7. 取证调查 8. 参考资料 🎯 执行摘要 Cisco Identity Services Engine ISE 中的远程代码执行（RCE）漏洞代表了企业边界安全中的关键断裂点。对于精英安全研究人员而言，ISE 不仅仅是身份验证组件：它是控制整个网络基础设施访问权限的主钥匙 。 严重风险： 未认证的攻击者可在不到 5 分钟内获得系统的完全控制权，且不会在传统监控系统中留下可检测的痕迹。 🔍 攻击面分析 1.1 N...

CVE-2026-101910

A flaw was found in ip-address. The address classification mechanism fails to identify the local-use Network Address Translation NAT64 range as private. A remote attacker can exploit this by submitting an internal address formatted within this IPv6 prefix to an application that relies on the...

kernel: selinux: check connect-related permissions on TCP Fast Open

A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux module. When using TCP Fast Open, SELinux failed to properly check connect-related permissions. This oversight could allow a local attacker to bypass SELinux network access controls, potentially enabling unauthorized network...

Packet Fence 15.2.0

PacketFence is a network access control NAC system. It is actively maintained and has been deployed in numerous large-scale institutions. It can be used to effectively secure networks, from small to very large heterogeneous networks. PacketFence provides NAC-oriented features such as registration...

CVE-2026-56854

A flaw was found in golang.org/x/crypto/ssh. The component failed to properly enforce source-address restrictions for several authentication methods, including password and keyboard-interactive callbacks. In applications that misuse the ServerConfig.PublicKeyCallback callback to make security...

packetfence v15.2.0

PacketFence What is PacketFence? PacketFence is a fully supported, trusted, Free and Open Source network access control NAC system. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, 802.1X support, layer-2...

PacketFence Cloud: Enterprise Network Access Control, Now a Managed Service

...

CVE-2026-72243

A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux module. When using TCP Fast Open, SELinux failed to properly check connect-related permissions. This oversight could allow a local attacker to bypass SELinux network access controls, potentially enabling unauthorized network...

CVE-2026-44507

Removed by vendor...

GHSA-VP9R-94XG-Q7Q8 Duplicate Advisory: SurrealDB allows bypass of deny-net flags via DNS resolution

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-m3c3-78fh-w3w7. This link is maintained to preserve external references. Original Description SurrealDB before 2.2.6, 2.3.6, and 2.1.8 and 3.0.0-alpha.7 and earlier fails to validate DNS-resolved hostnames again...

PT-2026-56403

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Limatek System Inc. LimRAD NAC allows Stored XSS. This issue affects LimRAD NAC: through 08072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-44393

A flaw was found in OpenStack oslo.messaging. The RabbitMQ driver does not properly verify the hostname of the message broker when establishing a TLS Transport Layer Security connection. An attacker capable of intercepting control-plane network traffic can exploit this vulnerability to impersonat...

CVE-2026-54106 U.S. GAO EPDS and CBCA EDS network access control bypass

The U.S. Government Accountability Office GAO Electronic Protest Docketing System EPDS and Civilian Board of Contract Appeals CBCA Electronic Docketing System EDS do not validate X-Forwarded-For HTTP headers, allowing a remote attacker with compromised administrator credentials to bypass network...

CVE-2026-4035

A flaw was found in MLflow. This vulnerability allows an attacker to exfiltrate sensitive server-side environment credentials. It occurs because the AI Gateway secrets can resolve environment variables, which are then sent to an attacker-controlled endpoint. This could lead to unauthorized access...

Cisco ISE 安全漏洞

Cisco ISE is a NAC solution developed by the American company Cisco. It is used to manage access to network resources for endpoints, users, and devices in a zero-trust architecture. Cisco ISE has a security vulnerability that arises from observing error messages when calling affected API endpoint...

CVE-2026-32937

free5GC is an open source 5G core network. free5GC CHF prior to version 1.2.2 has an out-of-bounds slice access vulnerability in the CHF nchf-convergedcharging service. A valid authenticated request to PUT /nchf-convergedcharging/v3/recharging/:ueId?ratingGroup=... can trigger a server-side panic...

CVE-2026-23767

ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without encryption or integrity protection...

Important: valkey

Issue Overview: Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject arbitrary information into the response stream for the given client, potentially corrupting or returning tampered data to other user...

CVE-2026-0689

In ExtremeCloud IQ – Site Engine XIQ‑SE before 26.2.10, a vulnerability in the NAC administration interface allows an authenticated NAC administrator to retrieve masked sensitive parameters from HTTP responses. Although credentials appear redacted in the user interface, the application returns th...