| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-41180 | PsiTransfer: Upload PATCH path traversal can create `config.<NODE_ENV>.js` and lead to code execution on restart | psi-4ward | psitransfer | High | 7.5 | 2026-04-23 00:10:58 | Deep Dive |
| CVE-2026-41243 | OpenLearn's pending forum posts remain publicly readable by direct ID when moderation mode is enabled | siemvk | OpenLearn | - | - | 2026-04-23 00:09:04 | Deep Dive |
| CVE-2026-41179 | RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution | rclone | rclone | 超危 | - | 2026-04-23 00:03:36 | Deep Dive |
| CVE-2026-32679 | Japan Media Systems LiveOn Meet Client和Canon Network Camera Plugin 代码问题漏洞 | Japan Media Systems Corporation | Downloader5Installer.exe | - | - | 2026-04-23 00:02:05 | Deep Dive |
| CVE-2026-40062 | Ziosoft Ziostation 路径遍历漏洞 | Ziosoft, Inc. | Ziostation2 | - | - | 2026-04-23 00:01:29 | Deep Dive |
| CVE-2026-6878 | ByteDance verl grader.py math_equal sandbox | ByteDance | verl | Medium | 5.6 | 2026-04-23 00:00:20 | Deep Dive |
| CVE-2025-70994 | Yadea T5 Electric Bicycles 安全漏洞 | - | - | - | - | 2026-04-23 00:00:00 | Deep Dive |
| CVE-2026-39087 | ntfy 代码注入漏洞 | - | - | - | - | 2026-04-23 00:00:00 | Deep Dive |
| CVE-2025-50229 | JIZHICMS 安全漏洞 | - | - | - | - | 2026-04-23 00:00:00 | Deep Dive |
| CVE-2026-31181 | TOTOLINK A3300R 操作系统命令注入漏洞 | - | - | - | - | 2026-04-23 00:00:00 | Deep Dive |
| CVE-2026-31176 | TOTOLINK A3300R 命令注入漏洞 | - | - | - | - | 2026-04-23 00:00:00 | Deep Dive |
| CVE-2026-31178 | TOTOLINK A3300R 操作系统命令注入漏洞 | - | - | - | - | 2026-04-23 00:00:00 | Deep Dive |
| CVE-2026-31179 | TOTOLINK A3300R 命令注入漏洞 | - | - | - | - | 2026-04-23 00:00:00 | Deep Dive |
| CVE-2026-31177 | TOTOLINK A3300R 操作系统命令注入漏洞 | - | - | - | - | 2026-04-23 00:00:00 | Deep Dive |
| CVE-2026-31159 | TOTOLINK A3300R 命令注入漏洞 | - | - | - | - | 2026-04-23 00:00:00 | Deep Dive |
| CVE-2026-31172 | TOTOLINK A3300R 命令注入漏洞 | - | - | - | - | 2026-04-23 00:00:00 | Deep Dive |
| CVE-2026-31175 | TOTOLINK A3300R 命令注入漏洞 | - | - | - | - | 2026-04-23 00:00:00 | Deep Dive |
| CVE-2026-31165 | TOTOLINK A3300R 命令注入漏洞 | - | - | - | - | 2026-04-23 00:00:00 | Deep Dive |
| CVE-2026-31164 | TOTOLINK A3300R 命令注入漏洞 | - | - | - | - | 2026-04-23 00:00:00 | Deep Dive |
| CVE-2026-31160 | TOTOLINK A3300R 命令注入漏洞 | - | - | - | - | 2026-04-23 00:00:00 | Deep Dive |