Nyhetsnavet - säkerhetsflöden

IT-säkerhet och cybersäkerhet i realtid — CVE-varningar, sårbarhetsrapporter, incidenter och hotinformation från NVD, CISA, BleepingComputer och fler SOC-källor.

Senaste 1h Senaste 6h Senaste 24h Senaste 7d Senaste 30d Endast lokalt Analys/ledare Endast följda källor

Sökning: 110 / hus / kvadratmeter Rensa filter

1 källa använder cache

Toppnyheter Säkerhet

GitHub Security Advisories 4 h

GitHub Security Advisories

CVE-2026-41510: Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding

## Root Cause File: `internal/corazawaf/transaction.go`, lines 770–808 (since commit 2fd87b89, PR #812, 2023-06-14) ```go func (tx *Transaction) AddGetRequestArgument(key string, value string) { if...

2026-10-06 22:38 4 h

NVD (National Vulnerability Database)

CVE-2026-103087

2026-09-30 04:16 · 6 d

Poster

140

Källor

Senast uppdaterad

2026-10-07 03:18

NVD (National Vulnerability Database)10

SecurityWeek Vulnerabilities10

CERT-SE10

CISA KEV-katalog10

CISA Alerts10

Microsoft MSRC10

CVE-toppar

CVE-2026-648925

CVE-2026-1024893

CVE-2026-1024903

CVE-2026-1042863

CVE-2026-765043

Senaste CVE

CVE-2026-41510

GitHub Security Advisories · 2026-10-06 22:38

CVE-2026-41510: Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding

CVE-2026-41508

GitHub Security Advisories · 2026-10-06 22:37

CVE-2026-41508: Coraza: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handling

CVE-2026-41504

GitHub Security Advisories · 2026-10-06 22:37

CVE-2026-41504: Coraza: Native audit-log format allows CRLF injection and log forgery via request body and header fields

CVE-2026-86540

GitHub Security Advisories · 2026-10-06 20:58

CVE-2026-86540: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

CVE-2026-21589

BleepingComputer · 2026-10-06 19:34

Atlassian warns of critical file-access flaw in Jira, Confluence

Säkerhet 2 artiklar

GitHub Security Advisories

CVE-2026-41510: Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding

2026-10-06 22:38 4 h

GitHub Security Advisories

NVD (National Vulnerability Database)

CVE-2026-103087

Uncontrolled recursion in the Gosub browser engine (gosub-engine) through 0.1.0 and main before commit 46868b3 allows a remote attacker to cause a Denial of Service (stack exhaustion and application crash) via an SVG...

2026-09-30 04:16 6 d

NVD (National Vulnerability Database)