U

Updated CVEs from Tenable

https://www.tenable.com/cve/feeds?sort=updated (RSS订阅地址)

CVE-2026-9216

<p>Medium Severity</p> <h3>Description</h3> <p>An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.</p> <p>Read more at <a href="https://www.tenable.com/cve/CVE-2026-9216">https://www.tenable.com/cve/CVE-2026-9216</a></p>

2026/9/8
阅读更多

CVE-2026-9215

<p>Medium Severity</p> <h3>Description</h3> <p>A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.</p> <p>Read more at <a href="https://www.tenable.com/cve/CVE-2026-9215">https://www.tenable.com/cve/CVE-2026-9215</a></p>

2026/9/8
阅读更多

CVE-2026-9214

<p>Medium Severity</p> <h3>Description</h3> <p>Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.</p> <p>Read more at <a href="https://www.tenable.com/cve/CVE-2026-9214">https://www.tenable.com/cve/CVE-2026-9214</a></p>

2026/8/11
阅读更多

CVE-2026-87827

<p>Critical Severity</p> <h3>Description</h3> <p>Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to the affected service can execute arbitrary system commands on the device, potentially resulting in complete compromise of the DVR. The vulnerability is known to have been exploited in the wild by the Mirai_ptea (Rimasuta) and Mirai_aurora botnets for malware propagation and subsequent DDoS activity. The vulnerability was reported to affect firmware dating from 2016, while firmware released after 2017 appears to mitigate the issue by restricting the affected service to the localhost interface (127.0.0.1) instead of exposing it on all interfaces (0.0.0.0). The affected-device list reported by Netlab includes many D1004NR, D1008NR, D1016NR, D1104, D1104NR, D1108NR, D1116NR, D1132NR, D2116NR, D97xx, D98xx, and D99xx variants and several associated hardware revisions The exploit is included in some version of rapperbot and exploited in 2026. This assignment has been made to document the active exploitation and lack of documentation from the vendor.</p> <p>Read more at <a href="https://www.tenable.com/cve/CVE-2026-87827">https://www.tenable.com/cve/CVE-2026-87827</a></p>

2026/9/9
阅读更多

CVE-2026-87821

<p>High Severity</p> <h3>Description</h3> <p>Lara Dashboard through 1.3.1 contains a server-side request forgery vulnerability in the POST /api/admin/builder/markdown/fetch endpoint that allows any authenticated user to fetch arbitrary URLs and read the response body. Attackers can read internal HTTP services and cloud metadata including IAM credentials by supplying malicious URLs without host validation or redirect restrictions.</p> <p>Read more at <a href="https://www.tenable.com/cve/CVE-2026-87821">https://www.tenable.com/cve/CVE-2026-87821</a></p>

2026/9/9
阅读更多

CVE-2026-87820

<p>Medium Severity</p> <h3>Description</h3> <p>CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. Unauthenticated attackers can enumerate panel administrators and recent scanner activity to inventory multi-tenant installations and facilitate follow-on attacks.</p> <p>Read more at <a href="https://www.tenable.com/cve/CVE-2026-87820">https://www.tenable.com/cve/CVE-2026-87820</a></p>

2026/9/9
阅读更多

CVE-2026-87819

<p>High Severity</p> <h3>Description</h3> <p>GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.name_email_regex that processes commit author and committer fields. Attackers can craft a commit object with a malformed author field containing an unterminated angle bracket to cause quadratic backtracking, exhausting CPU resources for over two minutes per commit access.</p> <p>Read more at <a href="https://www.tenable.com/cve/CVE-2026-87819">https://www.tenable.com/cve/CVE-2026-87819</a></p>

2026/9/9
阅读更多

CVE-2026-87818

<p>High Severity</p> <h3>Description</h3> <p>GitPython 3.1.59 fails to restrict the --no-index option in the high-level diff API, allowing attackers to read arbitrary filesystem paths as repository operands. Attackers can combine --no-index with -I/--ignore-matching-lines to create a content-dependent Boolean oracle, repeatedly querying local files to recover single-line secrets through distinguishable success or error responses.</p> <p>Read more at <a href="https://www.tenable.com/cve/CVE-2026-87818">https://www.tenable.com/cve/CVE-2026-87818</a></p>

2026/9/9
阅读更多

CVE-2026-87817

<p>High Severity</p> <h3>Description</h3> <p>GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, commondir, and HEAD. Attackers can execute arbitrary code by placing a malicious pre-commit hook in the tracked hooks directory that executes when a victim calls index.commit() on a cloned or opened repository.</p> <p>Read more at <a href="https://www.tenable.com/cve/CVE-2026-87817">https://www.tenable.com/cve/CVE-2026-87817</a></p>

2026/9/9
阅读更多

CVE-2026-87816

<p>High Severity</p> <h3>Description</h3> <p>PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expire_after_views limits. Attackers can send concurrent requests to the show endpoint to access one-time secrets multiple times before the view count is incremented and the push expires.</p> <p>Read more at <a href="https://www.tenable.com/cve/CVE-2026-87816">https://www.tenable.com/cve/CVE-2026-87816</a></p>

2026/9/9
阅读更多

推荐订阅

WeLiveSecurity

Blaze's Security Blog

SANS Blog

ClearSky Cyber Security

360 Netlab Blog - Network Security Research Lab at 360