| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-42095 | Arianna <26.04.1 bookserver 任意文件读取漏洞 | KDE | Arianna | Medium | 4.0 | 2026-04-24 00:00:00 | Deep Dive |
| CVE-2026-31051 | Hostbill两版远程DoS漏洞致客户端余额组件瘫痪 | - | - | - | - | 2026-04-24 00:00:00 | Deep Dive |
| CVE-2026-31052 | Hostbill两版存认证流程DoS漏洞致远程攻击 | - | - | - | - | 2026-04-24 00:00:00 | Deep Dive |
| CVE-2026-31050 | Hostbill 2025-11/12版XSS可远程执行任意代码 | - | - | - | - | 2026-04-24 00:00:00 | Deep Dive |
| CVE-2025-61872 | Mahara ≤25.04.1/24.04.10 Elasticsearch插件XSS漏洞 | - | - | - | - | 2026-04-24 00:00:00 | Deep Dive |
| CVE-2025-67259 | ClassroomIO v0.1.13越权访问漏洞致敏感信息泄露 | - | - | - | - | 2026-04-24 00:00:00 | Deep Dive |
| CVE-2025-59308 | Mahara多租户越权模拟用户漏洞（<24.04.10/25.04.1） | - | - | - | - | 2026-04-24 00:00:00 | Deep Dive |
| CVE-2026-30368 | Lightspeed Classroom v5.1.2客户端授权绕过漏洞致设备失控 | Lightspeed | Lightspeed Classroom | Medium | 5.4 | 2026-04-24 00:00:00 | Deep Dive |
| CVE-2026-40623 | SenseLive X3050 Missing Authorization | SenseLive | X3050 | High | 8.1 | 2026-04-23 23:58:47 | Deep Dive |
| CVE-2026-29050 | melange has Path Traversal When Resolving External Pipelines via Unvalidated pipeline[].uses | chainguard-dev | melange | Medium | 6.1 | 2026-04-23 23:58:40 | Deep Dive |
| CVE-2026-40431 | SenseLive X3050 Cleartext transmission of sensitive information | SenseLive | X3050 | Medium | 5.3 | 2026-04-23 23:56:50 | Deep Dive |
| CVE-2026-27843 | SenseLive X3050 Missing authentication for critical function | SenseLive | X3050 | Critical | 9.1 | 2026-04-23 23:54:55 | Deep Dive |
| CVE-2026-39462 | SenseLive X3050 Insufficiently Protected Credentials | SenseLive | X3050 | High | 8.1 | 2026-04-23 23:52:16 | Deep Dive |
| CVE-2026-35503 | SenseLive X3050 Use of Hard-coded Credentials | SenseLive | X3050 | Critical | 9.8 | 2026-04-23 23:50:04 | Deep Dive |
| CVE-2026-25720 | SenseLive X3050 Insufficient session expiration | SenseLive | X3050 | Medium | 5.4 | 2026-04-23 23:48:17 | Deep Dive |
| CVE-2026-40630 | SenseLive X3050 Authentication bypass using an alternate path or channel | SenseLive | X3050 | Critical | 9.8 | 2026-04-23 23:45:47 | Deep Dive |
| CVE-2026-1789 | XX打印机远程管理接口敏感信息泄露漏洞（特定型号） | Canon Inc. | imagePRESS Series | Medium | 4.9 | 2026-04-23 23:38:11 | Deep Dive |
| CVE-2026-29197 | XX软件<8.4.0等版权限检查拼写漏洞致越权读日志 | Rocket.Chat | Rocket.Chat | - | - | 2026-04-23 23:19:41 | Deep Dive |
| CVE-2026-6732 | Libxml2: libxml2: denial of service via crafted xsd-validated document | Red Hat | Red Hat Enterprise Linux 10 | Medium | 6.5 | 2026-04-23 22:19:34 | Deep Dive |
| CVE-2026-41361 | OpenClaw < 2026.3.28 - SSRF Guard Bypass via IPv6 Special-Use Ranges | OpenClaw | OpenClaw | High | 7.1 | 2026-04-23 21:58:19 | Deep Dive |