最近六个月的全部 CVE，每天更新。

显示 4 条中的 4 条

• 中CVE-2026-90813CVSS 评分 4.32026年9月14日

  A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Execution. The manipulation results in incorrect behavior order:

  CWE-179CWE-180
• 高CVE-2026-49414CVSS 评分 7.82026年6月27日

  The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where the base address was

  CWE-179freebsd freebsd
• 低CVE-2026-3832CVSS 评分 3.72026年4月30日

  A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses

  CWE-179gnu gnutlsredhat hardened_imagesredhat openshift_container_platform
• 中CVE-2026-32305CVSS 评分 5.32026年3月20日

  Traefik is an HTTP reverse proxy and load balancer. Versions 2.11.40 and below, 3.0.0-beta1 through 3.6.11, and 3.7.0-ea.1 are vulnerable to mTLS bypass through the TLS SNI pre-sniffing logic related to fragmented ClientHello packets. When a TLS ClientHello is

  CWE-287CWE-1188CWE-179traefik traefik