SecLens 情报中心

威胁情报

针对攻击活动、样本与IOC的持续情报更新。

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

发布时间 2026-07-22 08:00 (UTC+08:00) 抓取时间 2026-07-27 11:05 (UTC+08:00)

Microsoft | SharePoint | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50522 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; http…
扩展字段
```
{
  "cve_id": "CVE-2026-50522",
  "due_date": "2026-07-25T00:00:00+00:00",
  "known_ransomware_campaign_use": "Unknown",
  "product": "SharePoint",
  "raw_date_added": "2026-07-22",
  "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "vendor_project": "Microsoft"
}
```
CISA KEV Catalog catalog:kev ransomware:unknown source:cisa type:vulnerability known-exploited vulnerability
Check Point SmartConsole Improper Authentication Vulnerability

发布时间 2026-07-22 08:00 (UTC+08:00) 抓取时间 2026-07-27 11:05 (UTC+08:00)

Check Point | SmartConsole | https://support.checkpoint.com/results/sk/sk185169/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.…
扩展字段
```
{
  "cve_id": "CVE-2026-16232",
  "due_date": "2026-07-25T00:00:00+00:00",
  "known_ransomware_campaign_use": "Unknown",
  "product": "SmartConsole",
  "raw_date_added": "2026-07-22",
  "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "vendor_project": "Check Point"
}
```
CISA KEV Catalog catalog:kev ransomware:unknown source:cisa type:vulnerability known-exploited vulnerability
DD-WRT Stack-Based Buffer Overflow Vulnerability

发布时间 2026-07-21 08:00 (UTC+08:00) 抓取时间 2026-07-27 11:05 (UTC+08:00)

DD-WRT | DD-WRT | This vulnerability affects a common open-source component, third-party library, proprietary implementation, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://svn.dd-wrt.com/changeset/45724 ; BOD 26-04: https://www.cisa.gov/news-events/di…
扩展字段
```
{
  "cve_id": "CVE-2021-27137",
  "due_date": "2026-07-24T00:00:00+00:00",
  "known_ransomware_campaign_use": "Unknown",
  "product": "DD-WRT",
  "raw_date_added": "2026-07-21",
  "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "vendor_project": "DD-WRT"
}
```
CISA KEV Catalog catalog:kev ransomware:unknown source:cisa type:vulnerability known-exploited vulnerability
Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

发布时间 2026-07-21 08:00 (UTC+08:00) 抓取时间 2026-07-27 11:05 (UTC+08:00)

Langflow | Langflow | https://github.com/langflow-ai/langflow/releases/tag/v1.9.0 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist…
扩展字段
```
{
  "cve_id": "CVE-2026-0770",
  "due_date": "2026-07-24T00:00:00+00:00",
  "known_ransomware_campaign_use": "Unknown",
  "product": "Langflow",
  "raw_date_added": "2026-07-21",
  "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "vendor_project": "Langflow"
}
```
CISA KEV Catalog catalog:kev ransomware:unknown source:cisa type:vulnerability known-exploited vulnerability
WordPress Core Interpretation Conflict Vulnerability

发布时间 2026-07-21 08:00 (UTC+08:00) 抓取时间 2026-07-27 11:05 (UTC+08:00)

WordPress | Core | https://wordpress.org/news/2026/07/wordpress-7-0-2-release/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.go…
扩展字段
```
{
  "cve_id": "CVE-2026-63030",
  "due_date": "2026-07-24T00:00:00+00:00",
  "known_ransomware_campaign_use": "Unknown",
  "product": "Core",
  "raw_date_added": "2026-07-21",
  "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "vendor_project": "WordPress"
}
```
CISA KEV Catalog catalog:kev ransomware:unknown source:cisa type:vulnerability known-exploited vulnerability
WordPress Core SQL Injection Vulnerability

发布时间 2026-07-21 08:00 (UTC+08:00) 抓取时间 2026-07-27 11:05 (UTC+08:00)

WordPress | Core | https://wordpress.org/news/2026/07/wordpress-7-0-2-release/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.go…
扩展字段
```
{
  "cve_id": "CVE-2026-60137",
  "due_date": "2026-08-04T00:00:00+00:00",
  "known_ransomware_campaign_use": "Unknown",
  "product": "Core",
  "raw_date_added": "2026-07-21",
  "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "vendor_project": "WordPress"
}
```
CISA KEV Catalog catalog:kev ransomware:unknown source:cisa type:vulnerability known-exploited vulnerability
Fortinet FortiSandbox OS Command Injection Vulnerability

发布时间 2026-07-16 08:00 (UTC+08:00) 抓取时间 2026-07-27 11:05 (UTC+08:00)

Fortinet | FortiSandbox | https://fortiguard.fortinet.com/psirt/FG-IR-26-100 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/…
扩展字段
```
{
  "cve_id": "CVE-2026-39808",
  "due_date": "2026-07-19T00:00:00+00:00",
  "known_ransomware_campaign_use": "Unknown",
  "product": "FortiSandbox",
  "raw_date_added": "2026-07-16",
  "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "vendor_project": "Fortinet"
}
```
CISA KEV Catalog catalog:kev ransomware:unknown source:cisa type:vulnerability known-exploited vulnerability
Fortinet FortiSandbox OS Command Injection Vulnerability

发布时间 2026-07-16 08:00 (UTC+08:00) 抓取时间 2026-07-27 11:05 (UTC+08:00)

Fortinet | FortiSandbox | https://fortiguard.fortinet.com/psirt/FG-IR-26-141 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/…
扩展字段
```
{
  "cve_id": "CVE-2026-25089",
  "due_date": "2026-07-19T00:00:00+00:00",
  "known_ransomware_campaign_use": "Unknown",
  "product": "FortiSandbox",
  "raw_date_added": "2026-07-16",
  "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "vendor_project": "Fortinet"
}
```
CISA KEV Catalog catalog:kev ransomware:unknown source:cisa type:vulnerability known-exploited vulnerability

全部来源 Cloudflare 博客腾讯云安全公告 Adobe 安全公告阿里云 AVD Ubuntu 安全通告启明星辰安全通告 Amazon Linux AL2 公告 Amazon Linux AL2023 公告 AWS 安全公告 MSRC 更新指南 Oracle 安全警报 Apple 安全更新 Chrome 稳定版更新 Red Hat 安全公告 Atlassian 安全公告 NVIDIA 安全公告华为安全公告联想安全公告阿里云 Linux 安全公告阿里云 Linux CVE 通知阿里云安全公告 Amazon Linux 1 (EOL)安全公告 Amazon Linux 安全公告长亭漏洞库 Seebug 漏洞库 CISA KEV Catalog 微步银狐情报微步银狐 IOC Ransomware.live 近期受害者工信部 CNVDB CNNVD 通报 CNNVD 漏洞库 CNVD 漏洞库 TC260 标准征求意见 Seebug 技术 Paper GitHub Advisory HackerOne 博客 Exploit-DB 安天每日安全简讯 LinuxSecurity Hybrid VulDB 地方采购（CCGP）中央采购（CCGP） The Hacker News FreeBuf 社区 VIPRead 嘶吼安全资讯 Doonsec 微信聚合 arXiv cs.CR RSA Conference Podcast 新闻聚焦社区动态会议与培训融资快讯并购整合情报快报事件通报工具更新产品发布

威胁情报

订阅来源 RSS