2026-05-18 — CVE-2025-54510 Fabricked AMD SEV-SNP 破解、Linux ESP 模組攻擊面
primary=https://xca-attacks.github.io/fabricked/ primary=https://www.openwall.com/lists/oss-security/2026/05/16/3
1 min Read →
Category
資安雷達
CVE、Supply Chain、重大資安事件
2026-05-17 — rkyv GHSA-vfvv-c25p-m7mm panic 安全漏洞、Linux ESP 攻擊面、Meta Labyrinth 1.1
primary=https://github.com/advisories/GHSA-vfvv-c25p-m7mm primary=https://rustsec.org/advisories/RUSTSEC-2026-0122.html primary=https://www.openwall.com/lists/oss-security/2026/05/16/3 primary=https://engineering.fb.com/2026/05/11/security/labyrinth-1-1-end-to-end-encrypted-e2ee-backups-more-reliable/
1 min Read →
2026-05-16 — CVE-2026-46333 SSH 私鑰竊取、Pixel 10 零點擊鏈、Mullvad 出口 IP 指紋
primary=https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn/ primary=https://projectzero.google/2026/05/pixel-10-exploit.html primary=https://tmctmt.com/posts/mullvad-exit-ips-as-a-fingerprinting-vector/
1 min Read →
2026-05-15 — Apple M5 核心 MIE 繞過、PostgreSQL 11 CVE、vm2 CVSS 9.8 沙盒逃逸
primary=https://blog.calif.io/p/first-public-kernel-memory-corruption primary=https://www.postgresql.org/about/news/postgresql-184-1710-1614-1518-and-1423-released-3297/ primary=https://github.com/advisories/GHSA-248r-7h7q-cr24
1 min Read →
2026-05-14 — Fragnesia Linux LPE、NIST NVD 縮減、Strapi CVE-2026-22599
primary=https://lwn.net/Articles/1072647/ primary=https://www.docker.com/blog/nist-narrows-the-nvd-what-container-security-programs-should-reassess/ primary=https://github.com/advisories/GHSA-3xcq-8mjw-h6mx
1 min Read →
2026-05-13 — CVE-2026-45185 Exim RCE、dnsmasq 六個 CVE、SillyTavern 路徑穿越 CVSS 9.1
primary=https://xbow.com/blog/dead-letter-cve-2026-45185-xbow-found-rce-exim primary=https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html primary=https://github.com/advisories/GHSA-886q-f44j-h6wh
1 min Read →
2026-05-12 — TanStack NPM 供應鏈攻擊：OIDC Token 劫持植入憑證竊取器
primary=https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack
1 min Read →
2026-05-11 — Hono Cache CVE-2026-44457、FreeBSD execve LPE CVE-2026-7270、90 天揭露政策終結
primary=https://github.com/advisories/GHSA-p77w-8qqv-26rm primary=https://www.freebsd.org/security/advisories/FreeBSD-SA-26:13.exec.asc primary=https://blog.himanshuanand.com/2026/05/the-90-day-disclosure-policy-is-dead/
1 min Read →
2026-05-10 — Hono CSS Injection GHSA-qp7p、MCP Server OS Command Injection GHSA-v6wj、Vert.x SNI DoS CVE-2026-6860
primary=https://github.com/advisories/GHSA-qp7p-654g-cw7p primary=https://github.com/advisories/GHSA-v6wj-c83f-v46x primary=https://github.com/advisories/GHSA-3g76-f9xq-8vp6
1 min Read →
2026-05-09 — Open WebUI GHSA-9pgh 路徑穿越、Let’s Encrypt Gen Y 根缺陷、free5GC 未認證 API 批量漏洞
primary=https://github.com/advisories/GHSA-9pgh-j74g-qj6m primary=https://letsencrypt.status.io/ primary=https://github.com/advisories?type=reviewed
2 min Read →