一个从未"到达"的请求:CVE-2026-76169,Fastify 畸形 URL 绕过封装 404 处理器认证

先知社区 · 2026-10-18 12:03:43 CVE-2026-76169 热度 34

漏洞编号 CVE-2026-76169,GitHub 安全通告编号 GHSA-p68q-wchp-6fh7。一句话描述:fastify 在 >= 4.0.0,

原文链接： 一个从未"到达"的请求:CVE-2026-76169,Fastify 畸形 URL 绕过封装 404 处理器认证

内容来源 先知社区

阅读原文 ↗

相关内容

更多漏洞预警 →

严重漏洞预警

Java 反序列化从 Redis 开始Rce

**审计方法**：全局搜索 `readObject` → 逐层向上追踪调用链 → 定位 HTTP 入口 → 确认数据源为 Redis key → RCE

奇安信攻防社区 · 7 小时前

高危漏洞预警 CVSS 8.6

CVE-2026-120322：A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This

A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This issue affects some unknown processing of the file /plugin-api/file-manager/transferToHost. The manipulation of the argument destPath leads to path tra…

NVD · 15 小时前 CVE-2026-120322

严重漏洞预警 CVSS 9.3

CVE-2026-120283：A vulnerability was identified in Linksys E8450 1.2.00.360516. Affecte

A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hidden_timezone leads to stack-based buffer overflow…

NVD · 16 小时前 CVE-2026-120283

严重漏洞预警 CVSS 9.3

CVE-2026-120281：A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects

A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buf…

NVD · 16 小时前 CVE-2026-120281

SafeAlert 聚合公开安全情报，内容版权归原作者所有，仅供学习研究。

每日 06:30 自动更新后台管理