Nyhetsnavet - säkerhetsflöden

IT-säkerhet och cybersäkerhet i realtid — CVE-varningar, sårbarhetsrapporter, incidenter och hotinformation från NVD, CISA, BleepingComputer och fler SOC-källor.

Senaste 1h Senaste 6h Senaste 24h Senaste 7d Senaste 30d Endast lokalt Analys/ledare Endast följda källor

Sökning: amerikansk / använts / att Tid: Senaste 1h Rensa filter

1 källa använder cache

Toppnyheter Säkerhet

GitHub Security Advisories 58 min

GitHub Security Advisories

CVE-2026-105750: Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode

### Summary When the HTML backend renders pages in a headless browser (`HTMLBackendOptions(render_page=True)`), the `enable_local_fetch` option is not enforced. A crafted HTML file can embed an arbitrary local file...

2026-10-06 02:02 58 min

GitHub Security Advisories

CVE-2026-105752: vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle

2026-10-06 02:02 · 58 min

Poster

140

Källor

Senast uppdaterad

2026-10-06 02:52

NVD (National Vulnerability Database)10

SecurityWeek Vulnerabilities10

CERT-SE10

CISA KEV-katalog10

CISA Alerts10

Microsoft MSRC10

CVE-toppar

CVE-2023-466045

CVE-2026-648925

CVE-2026-648935

CVE-2026-887795

CVE-2026-282914

Senaste CVE

CVE-2026-105750

GitHub Security Advisories · 2026-10-06 02:02

CVE-2026-105750: Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode

CVE-2026-105753

GitHub Security Advisories · 2026-10-06 02:02

CVE-2026-105753: vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core

CVE-2026-105752

GitHub Security Advisories · 2026-10-06 02:02

CVE-2026-105752: vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle

CVE-2026-102598

GitHub Security Advisories · 2026-10-06 01:48

CVE-2026-102598: Werkzeug safe_join() allows Windows special device names

CVE-2026-102829

GitHub Security Advisories · 2026-10-06 01:48

CVE-2026-102829: simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection

Säkerhet 2 artiklar

GitHub Security Advisories

CVE-2026-105750: Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode

2026-10-06 02:02 58 min

GitHub Security Advisories

CVE-2026-105752: vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit [`752a3a504485`](https://github.com/vllm-...

2026-10-06 02:02 58 min

GitHub Security Advisories