[webapps] Keycloak 26.7.2 - Unauthenticated Account Takeover

严重 漏洞预警

Java 反序列化从 Redis 开始Rce

**审计方法**：全局搜索 `readObject` → 逐层向上追踪调用链 → 定位 HTTP 入口 → 确认数据源为 Redis key → RCE

奇安信攻防社区 · 7 小时前

高危 漏洞预警 CVSS 8.6

CVE-2026-120322：A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This

A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This issue affects some unknown processing of the file /plugin-api/file-manager/transferToHost. The manipulation of the argument destPath leads to path tra…

NVD · 15 小时前 CVE-2026-120322

严重 漏洞预警 CVSS 9.3

CVE-2026-120283：A vulnerability was identified in Linksys E8450 1.2.00.360516. Affecte

A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hidden_timezone leads to stack-based buffer overflow…

NVD · 16 小时前 CVE-2026-120283

严重 漏洞预警 CVSS 9.3

CVE-2026-120281：A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects

A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buf…

NVD · 16 小时前 CVE-2026-120281