free5GC 安全漏洞

free5GC is an open-source project for the 5th generation 5G mobile core network. Versions of free5GC prior to 4.2.2 contained security vulnerabilities. These vulnerabilities stemmed from the lack of inbound OAuth2/bearer-token authorization when the NEF route group nnef-callback was mounted, whic...

CVE-2026-45876

In the Linux kernel, the following vulnerability has been resolved: arm64/gcs: Fix error handling in archsetshadowstackstatus allocgcs returns an error-encoded pointer on failure, which comes from dommap, not NULL. The current NULL check fails to detect errors, which could lead to using an invali...

Gladinet Triofox 安全漏洞

Gladinet Triofox is an enterprise file sharing and remote access platform developed by the American company Gladinet. There is a security vulnerability in Gladinet Triofox. This vulnerability arises from the absence of the WOSHttpStatusModule.dll module when processing URL paths starting with...

PT-2026-44098

Name of the Vulnerable Software and Affected Versions Gladinet Triofox Cloud Server Agent affected versions not specified Description Improper handling of remote HTTP messages in the GladServerAgentService.exe, which listens on TCP port 7878, allows unauthenticated attackers to potentially gain...

Erlang/OTP 安全漏洞

Erlang/OTP is an open-source JavaScript library for handling exceptions. This library can catch exceptions caused by Node.js’s built-in APIs. There is a security vulnerability in Erlang/OTP, which stems from improper OCSP response validation in the publickey module. This vulnerability allows fake...

PT-2026-44093

When processing a request with a URL path starting with /status or /sysinfo, WOSHttpStatusModule.dll is to be loaded to handle such URL patterns. The WOSBin LoadHttpModule function in the dll would be called to set up a "module" object for that module. However, WOSHttpStatusModule.dll is not...

claude-code-cache-fix 代码注入漏洞

claude-code-cache-fix is a caching optimization tool developed by Chris Nighswonger. Versions 3.5.0 to 3.5.2 of claude-code-cache-fix had a code injection vulnerability. This vulnerability stemmed from the use of tools/quota-statusline.sh, which directly inserted the hook’s standard input payload...

CVE-2026-44832

creationtimestamp| type| source ---|---|--- 2026-05-26 22:58:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mms3qzzaw52t...

CVE-2026-44900

epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.1, in SignedPublicKeysTrustValidatorImpl.isTrusted, the ECDSA signature verification at line 45 discards the boolean return value of Signature.verify. The method performs certificate chain...

CVE-2026-45298

Dozzle (a realtime Docker container log viewer) prior to 10.5.2 contains a pre-authentication SSRF (CWE-918) via POST /api/notifications/test-webhook. In the default deployment (no DOZZLE_AUTH_PROVIDER set), this endpoint is unauthenticated and forwards an attacker-controlled URL and headers into...

CVE-2026-3660

creationtimestamp| type| source ---|---|--- 2026-05-26 19:38:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116642564816384756 2026-05-26 22:36:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mms2jqv7k72e 2026-05-30 00:07:08+00:00| seen|...

CVE-2026-46275

creationtimestamp| type| source ---|---|--- 2026-05-26 16:00:05+00:00| seen| https://t.me/GithubRedTeam/86003 2026-05-27 21:11:38+00:00| seen| Telegram/gErohbwTCKTWlpvhKyjoMZM9ytnNcaUIrq9IFwI-Mxv4 2026-06-08 15:56:45+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116715303471454670...

CVE-2026-41917

creationtimestamp| type| source ---|---|--- 2026-05-26 15:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrb7ezuu62i...

CVE-2026-4480

creationtimestamp| type| source ---|---|--- 2026-05-26 14:33:00+00:00| seen| https://vulnerability.circl.lu/bundle/ef598036-eda2-4311-807e-ebbdfb04a51d 2026-05-26 16:01:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmreiep6t62r 2026-05-27 02:01:29+00:00| seen|...

CVE-2026-9532

creationtimestamp| type| source ---|---|--- 2026-05-26 09:28:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmqoj6xdlo2q...

CVE-2026-9526

creationtimestamp| type| source ---|---|--- 2026-05-26 08:53:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmqml7wzde2c...

CVE-2026-43828

creationtimestamp| type| source ---|---|--- 2026-05-26 08:51:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmqmgui6pf24...

SUSE-SU-2026:2066-1 Security update for xen

This update for xen fixes the following issues - CVE-2025-54505: Floating Point Divider State Sampling on AMD CPUs AMD-SN-7053 bsc1262428. - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption bsc1264066. - CVE-2026-23557: Xenstored DoS via XSRESETWATCHES command bsc1262178. - CVE-2026-23558:...

gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol OCSP response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabl...

gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol OCSP response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabl...