网络安全雷达

Ivanti Connect Secure: Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.

Collabora Collabora Online – Built-in CODE Server: Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.

Plex Media Server: Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96655.

Plex Media Server: Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination. This vulnerability can be chained with CVE-2026-96654, CVE-2026-96655, and CVE-2026-96656.

Atlassian Multiple Products: Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions.

Ahsay AhsayCBS: Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133.

Ahsay AhsayCBS: Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134.

ISC BIND: ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.

BeyondTrust Remote Support: BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance.

Strapi Strapi: Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensitive user details via the query filter. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. This vulnerability can be chained with CVE-2023-22621 to achieve remote code execution.

Cisco Secure Email Gateway: Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.

Siemens Software Center: Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.

EG Secure Solutions SiteGuard Server Edition: EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.

Plex Media Server: Plex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could allow an attacker to call other plugins' functions and supply their own parameters. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96655, and CVE-2026-96656.

Apache Struts: Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is enabled.

Plex Media Server: Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96656.

Microsoft Windows: Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.

Arista VeloCloud Orchestrator: Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.

Ivanti Connect Secure 是一款远程接入（VPN）安全网关产品，用于为员工与外部用户提供加密的远程访问通道，并承担接入侧的身份认证职责，广泛部署在企业内网边界，作为访问内部业务系统的统一入口。 2026 年 10 月，长亭安全应急响应中心监测到 Ivanti Connect Secure 存在认证绕过与远程代码执行风险（CVE-2026-104935）。攻击者无需有效账号即可绕过身份认证，在设备上执行任意代码，并可进一步将权限提升至 root；公开信息显示相关漏洞链已被用于在野攻击，攻击活动主要围绕凭据窃取、目录服务信息收集、流量嗅探与日志清理展开。 长亭安全应急响应中心已完成复现验证。截至通告发布，Ivanti 已针对 CVE-2026-104935 发布修复版本，权限提升组件将在后续版本中修复；建议使用受影响版本的用户尽快确认资产暴露面并完成升级。

Fortinet Multiple Products: FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.

GitLab 是开源的 DevOps 平台，提供代码托管、持续集成与交付、缺陷跟踪等能力，广泛应用于企业自建代码仓库与软件交付流水线。2026 年 9 月 10 日，长亭安全应急响应中心监测到 GitLab 仓库提交记录 API 路径遍历漏洞（CVE-2026-85706）风险。攻击者无需登录，在目标实例存在可匿名访问的公开项目时，即可读取 GitLab 服务器上的任意文件，可能造成源代码、配置文件与凭证等敏感信息泄露。长亭安全应急响应中心已完成复现验证。截至通告发布，官方已发布修复版本，暂未发现公开利用代码。建议所有受影响的自建 GitLab 实例立即升级。

JFrog 在默认配置下存在认证绕过漏洞（CVE-2026-82329，CVSS 9.8）。Access 组件将空白 join key 纳入可信集合，未认证攻击者可伪造 HS256 JWT，向无需登录的集群加入接口 POST /access/api/v1/registry/join 换取 scp=admin 的 SERVICE token，并进一步兑换 applied-permissions/admin 平台管理员令牌，从而完全接管 应用。

### Impact When `multer` is configured with an asynchronous `fileFilter`, a single request can crash the Node.js process. If a request is aborted (for example when one file is rejected) while another file's async `fileFilter` is still pending, the pending callback later resumes a parsing stream that multer has already torn down. busboy then emits an error on a stream that no longer has an error listener, which Node raises as an unhandled `'error'` event, and the process exits. A single unauthen

## Summary The ESM compiler in `happy-dom@20.14.5` does not validate imported local binding aliases before interpolating them into generated JavaScript. As a result, an invalid ESM import alias can be transformed into a valid JavaScript destructuring default initializer and executed. This appears to be an alternate injection path and incomplete remediation of GHSA-6q6h-j7hj-3r64 / CVE-2026-33943. The previous fix validates `importName` in the local `export { ... }` handler, but the named impo

KubePi 是流行的 Kubernetes 多集群管理面板。在 v2.0.0 之前的版本中，SSO（单点登录）管理模块被错误地挂载在公开路由上，导致未经认证的远程攻击者可直接访问配置读写及连通性测试接口。可能导致敏感信息泄露、数据篡改等严重后果，给系统安全性带来较大威胁。

### Impact Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network. This affects the auth_code flow. ### Patches Version 7.1.0 and higher are patched. ### Workarounds Ensure you pass in only the auth_code to to acquireTokenByCode

`ReadWriteLock` and `AsyncReadWriteLock` (the SQLite-backed reader/writer lock) hand SQLite a name they do not control. On Linux the lock validates its database through a descriptor (the number the kernel gives a process for an open file). It then connects SQLite to `/proc/self/fd/<n>`, a Linux path that names the process's own open file `n`. SQLite turns that path back into a plain path and reopens it by name, following symlinks (a symlink is a file that points at another path). On every POSIX

## Summary API clients can supply arbitrary `mm_processor_kwargs` per request. vLLM forwards these values through the multimodal rendering and processing pipeline to Hugging Face and custom image/video processor constructors and calls. Resource-sensitive values such as image size, patch size, patch count, crop count, or frame count can therefore be controlled by a remote client. For processors that upscale inputs, a single request can force an allocation large enough to terminate the API serve

### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with repeated malformed cross-reference streams. ### Patches This has been fixed in [pypdf==6.21.2](https://github.com/py-pdf/pypdf/releases/tag/6.21.2). ### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#4240](https://github.com/py-pdf/pypdf/pull/4240). ### Notes This is a follow-up to https://github.com/py-pdf/pypdf/securi

### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires opening a file with large/wrong upper limits in the xref table. ### Patches This has been fixed in [pypdf==6.21.2](https://github.com/py-pdf/pypdf/releases/tag/6.21.2). ### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#4239](https://github.com/py-pdf/pypdf/pull/4239).

### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires loading relevant parts of a file (like their pages) where the same, but non-existent indirect object is referenced multiple times. ### Patches This has been fixed in [pypdf==6.21.2](https://github.com/py-pdf/pypdf/releases/tag/6.21.2). ### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#4240](https://github.com/py-pdf/pypdf/pull/4240).

### Impact A set of eMudhra intermediate certificates were compromised and are being blocked by browsers and other TLS clients. This Electron update adds the same block to both Chromium networking and Node.js `tls`, `https` and `fetch`. On earlier versions, an attacker holding a certificate issued through these intermediates and able to intercept network traffic could impersonate a TLS server to an app. Apps are only affected if they make TLS connections over a network an attacker can intercep

### Impact A single request can crash any application using `body-parser` with default options. When a request carries a `Content-Encoding` (for example `gzip`), `body-parser` pipes it into a decompression stream and, after reading the body, leaves that stream piped with no error listener. A payload of one valid compressed frame followed by trailing bytes decodes and the application responds normally, but the trailing bytes then reach the already-finished decoder, which emits an error that is r

## Summary In the `gix` crate, `Cache::protect_options()` in `gix/src/config/cache/access.rs` reads the three filesystem path-protection settings (`core.protectHFS`, `core.protectNTFS`, and `gitoxide.core.protectWindows`) with the unfiltered `gix_config::File::boolean()` accessor instead of the trust-aware `boolean_filter()` accessor used by every other security-critical config read in the same file. When a repository is opened with reduced trust (an ownership mismatch, which maps `.git/config`

### Impact undici's `fetch()` crashes the Node.js process when a malicious server returns a response with more than five content codings and closes the connection before sending the body. undici rejects such responses (a content-encoding limit), but it created the internal response stream before that check and returned without attaching an error listener or aborting the request. The early close then surfaces a content-length mismatch on that orphaned internal stream, which Node.js treats as an

## Summary Caller-supplied prompt text can become executable syntax in the xonsh activation script. An attacker must influence the value passed to virtualenv, and a user must subsequently activate the environment. ## Affected area Xonsh reads a UTF-8 activation script using a legacy multibyte encoding such as GBK. Printable non-ASCII bytes can change how the reader recognizes an adjacent quote. The report concerns POSIX activation. It does not establish exposure through unrelated activators.

## Summary Caller-supplied prompt text can become executable syntax in the bash activation prompt. An attacker must influence the value passed to virtualenv, and a user must subsequently activate the environment and draw the prompt. ## Affected area Bash runs with compatibility level 4.2 and draws the environment prompt. Its replacement-string behavior differs from newer compatibility modes, leaving prompt text subject to a second interpretation. The report concerns POSIX activation. It does

### Impact Decoding a header that holds a long run of joinable RFC 2047 base64 encoded words, such as `=?utf-8?B?QUJD?=` repeated tens of thousands of times in a `Subject`, `From`, `To`, a filename or a description, took time quadratic in the number of words. The join check ran a regex over the text joined so far for every word, which flattens the accumulated string each time. A single well formed message of about 1.6 MB blocked the event loop for one to twenty seconds depending on the host, an

## Impact Echo's Proxy middleware could retain a handler, copy goroutines and network connections after a WebSocket client disconnected if the upstream kept its connection open. The raw proxy waited for both copy directions to finish without reliably closing the other connection when one direction ended. Rejected upgrade responses with HTTP keep-alive were one way to trigger this behavior. Repeated connections can accumulate resources and cause denial of service. The impact depends on the prox

## Impact Echo v4's opt-in Decompress middleware exposed a gzip-decoded request stream without limiting its expanded size. A small compressed request could therefore produce a very large decoded body. Handlers that read or bind that body could consume excessive memory or CPU, and repeated or concurrent requests could cause denial of service. The middleware is not enabled by default. A limit on the compressed request size alone does not bound the decompressed size. Applications that already app

## Impact Echo v4's opt-in BodyDump middleware read complete request bodies into memory and retained complete response bodies without a capture limit. A client able to submit large requests to a route using BodyDump could cause large allocations before the application handler ran. Large responses, including responses whose size can be influenced by a client, also caused an additional unbounded capture allocation. Repeated or concurrent requests can exhaust process memory and cause denial of se

JimuReport 是一款开源低代码报表工具。最新版v2.5.2及之前版本在处理用户可控的 H2 JDBC URL 时存在远程代码执行漏洞：其 JDBC URL 安全过滤函数使用 `String.toLowerCase()`（Unicode 感知）将整个 URL 转小写后，再匹配黑名单关键字 `init=`、`runscript`。 由于H2 驱动解析 JDBC URL 中的设置项与与 SQL 命令时，，使用 `org.h2.util.StringUtils.toUpperEnglish()`，其内部实际调用的是 `String.toUpperCase(Locale.ENGLISH)`（Unicode 感知的英文大写归一化），而非 ASCII-only 处理。二者对 Unicode 字符 `ı`（U+0131，LATIN SMALL LETTER DOTLESS I）的大小写映射不对称，

Proxmox VE 的 libpve-access-control 组件存在身份认证绕过漏洞。攻击者向 API 登录接口提交特制的 tfa-challenge 参数，可绕过密码验证，直接以未启用双因素认证（2FA）的现有用户身份登录，默认影响高权限的 root@pam 账户。

用友YonBIP旗舰版友户通CAS接口存在用户认证逻辑绕过漏洞。攻击者可利用该漏洞绕过认证机制，直接登录任意账户，导致系统权限失控，存在数据泄露、篡改及业务中断等严重风险。

Nacos 是开源的动态服务发现、服务配置和服务管理平台，常用于微服务与云原生应用的注册发现、配置管理和流量治理。2026年8月28日，长亭安全应急响应中心监测到 Nacos 3.x 存在管理接口权限绕过漏洞。Nacos 3.x 对不同类型接口采用分层鉴权，部分管理接口的鉴权范围配置不一致，在特定默认配置下未能进入预期的管理权限校验流程，形成管理接口权限绕过。未携带有效凭证的请求可能访问部分账户、角色及资源权限管理功能；验证中观察到，相关功能可被用于创建账户、调整角色及授予资源权限。攻击者无需有效凭证即可访问部分管理功能，未授权执行账户、角色及资源权限相关操作，可能形成持久化后门并影响配置与服务管理。官方已发布 Nacos 3.2.4 修复版本。

JeecgBoot 3.9.3 及之前版本的积木报表导出接口 /jmreport/auto/export 存在未授权远程代码执行漏洞。该接口标注 @JimuNoLoginRequired 且 Shiro 将 /jmreport/** 配为 anon，未登录即可进入导出流程。导出 PDF 时，攻击者传入的 reportParams[].params 值以 = 开头时进入 Aviator 表达式引擎执行，可结合 groovy.util.Eval.me 拉起操作系统命令，实现未授权 RCE。

ShowDoc <= 3.9.2 在旧版 API 注册接口 registerByVerify 中对 username 仅执行 trim，未限制 PHP 标签。采用 SQLite 部署时，用户名由注册流程写入 Web 根目录下的 Sqlite/showdoc.db.php；该文件扩展名为 .php，若 Web 服务器将其交由 PHP 解释器处理，攻击者可在无需账号权限的情况下写入 PHP 片段并在访问该数据库文件时触发执行。 漏洞影响范围：ShowDoc version <= 3.9.2（SQLite 部署场景）。官方在 3.9.3 为 username 增加字符白名单校验。本文提交仅用于授权测试与防护验证。

大华智慧园区综合管理平台 backStoragePlan_deleteAll 接口存在SQL注入漏洞。该接口未对用户输入的参数进行充分过滤与参数化处理，攻击者可通过构造恶意SQL语句，利用该接口实现数据库的越权查询、数据篡改甚至拖库，进而获取系统敏感信息或控制数据库服务，对业务数据安全构成严重威胁。