| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-106489 | Backstage: Improper authorization enforcement for TechDocs static content | backstage | backstage | Medium | 6.5 | 2026-10-06 20:39:51 | Deep Dive |
| CVE-2026-106488 | Backstage: Improper authentication in the OIDC provider | backstage | backstage | High | 8.1 | 2026-10-06 20:38:18 | Deep Dive |
| CVE-2026-104045 | Sssd: sssd: denial of service via race condition in autofs responder | Red Hat | Red Hat Enterprise Linux 10 | Medium | 4.7 | 2026-10-06 20:37:41 | Deep Dive |
| CVE-2026-106487 | Backstage: Unsupported catalog cluster authentication mode in kubernetes backend | backstage | backstage | Low | 3.5 | 2026-10-06 20:36:45 | Deep Dive |
| CVE-2026-106582 | OpenSSH <10.6 压缩漏洞 | OpenBSD | OpenSSH | Low | 3.7 | 2026-10-06 20:35:33 | Deep Dive |
| CVE-2026-106486 | Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions | backstage | backstage | High | 8.5 | 2026-10-06 20:35:10 | Deep Dive |
| CVE-2026-106032 | Server-side request forgery and local file read via unrestricted external OpenAPI reference resolution in Bedrock AgentCore Starter Toolkit agent import | aws | bedrock-agentcore-starter-toolkit | Medium | 5.7 | 2026-10-06 20:34:55 | Deep Dive |
| CVE-2026-105812 | Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import | aws | bedrock-agentcore-starter-toolkit | Critical | 9.0 | 2026-10-06 20:34:09 | Deep Dive |
| CVE-2026-106463 | Backstage: Improper authorization in GitLab organizational user ingestion | backstage | backstage | Medium | 5.4 | 2026-10-06 20:32:46 | Deep Dive |
| CVE-2026-106462 | Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback | backstage | backstage | Medium | 6.4 | 2026-10-06 20:30:29 | Deep Dive |
| CVE-2026-106555 | OpenSSH <10.6 GSSAPI认证状态持久化漏洞 | OpenBSD | OpenSSH | Low | 2.2 | 2026-10-06 20:28:56 | Deep Dive |
| CVE-2026-106553 | OpenSSH低于10.6版本GSSAPI凭证持久化漏洞 | OpenBSD | OpenSSH | Low | 2.2 | 2026-10-06 20:25:46 | Deep Dive |
| CVE-2026-106461 | Backstage: Incorrect authorization in scaffolder task listing | backstage | backstage | Medium | 4.3 | 2026-10-06 20:25:32 | Deep Dive |
| CVE-2026-106460 | Backstage: Explicit negative email verification can be ignored during shared OAuth profile normalization | backstage | backstage | Medium | 6.8 | 2026-10-06 20:22:32 | Deep Dive |
| CVE-2026-106552 | OpenSSH sftp远程目录遍历漏洞 | OpenBSD | OpenSSH | Medium | 4.2 | 2026-10-06 20:20:31 | Deep Dive |
| CVE-2026-106459 | Backstage: Improper input validation in Sentry scaffolder actions | backstage | backstage | High | 8.5 | 2026-10-06 20:19:38 | Deep Dive |
| CVE-2026-106458 | Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates | backstage | backstage | Medium | 6.5 | 2026-10-06 20:16:12 | Deep Dive |
| CVE-2026-106547 | HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata | The HDF Group | HDF5 | High | 8.5 | 2026-10-06 20:14:41 | Deep Dive |
| CVE-2026-106457 | Backstage: Insufficient audience validation in the Cloudflare Access auth provider | backstage | backstage | Medium | 6.8 | 2026-10-06 20:13:27 | Deep Dive |
| CVE-2026-106456 | Backstage: Inconsistent credential enforcement for overlapping proxy routes | backstage | backstage | Medium | 4.8 | 2026-10-06 20:10:42 | Deep Dive |