严重
漏洞预警
Java 反序列化从 Redis 开始Rce
**审计方法**：全局搜索 `readObject` → 逐层向上追踪调用链 → 定位 HTTP 入口 → 确认数据源为 Redis key → RCE
ARCHIVE
历史归档
按时间、分类、严重程度检索全部安全漏洞与安全信息。当前共收录 41 条记录。
高危
漏洞预警
CVSS 8.6
CVE-2026-120322：A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This
A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This issue affects some unknown processing of the file /plugin-api/file-manager/transferToHost. The manipulation of the argument destPath leads to path tra…
严重
漏洞预警
CVSS 9.3
CVE-2026-120283：A vulnerability was identified in Linksys E8450 1.2.00.360516. Affecte
A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hidden_timezone leads to stack-based buffer overflow…
严重
漏洞预警
CVSS 9.3
CVE-2026-120281：A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects
A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buf…
高危
漏洞预警
CVSS 8.6
CVE-2026-120282：A vulnerability was determined in WAVLINK WN536AX6-A V260507. This imp
A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocol.csp. This manipulation of the argument mac causes os command injection. Remote exploitation of the…
严重
漏洞预警
CVSS 9.3
CVE-2026-120280：A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impa
A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguard_cli_group handler of the file /protocol.csp of the component WireGuard. The manipulation of the argument group_…
严重
漏洞预警
CVSS 9.3
CVE-2026-120279：A flaw has been found in WAVLINK WN536AX6-A V260507. The affected elem
A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpn_cli Handler. Executing a manipulation of the argument file_id can lead t…
严重
漏洞预警
CVSS 9.3
CVE-2026-120277：A security vulnerability has been detected in WAVLINK WN536AX6-A V2605
A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argu…
严重
漏洞预警
CVSS 9.3
CVE-2026-120276：A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. Th
A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument gr…
高危
漏洞预警
CVSS 7.6
CVE-2026-95863：Improper neutralization of input during web page generation in Apache
Improper neutralization of input during web page generation in Apache Wicket. Apache Wicket generates JavaScript that refers to the elements it renders, and writes into that JavaScript two values it derives itself: a com…
高危
漏洞预警
CVSS 7.4
CVE-2026-84231：Improper neutralization of input during web page generation in Apache
Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.link.ExternalLink builds a JavaScript click handler and writes it into the tag's onclick attribute whenever the…
高危
漏洞预警
CVSS 8.3
CVE-2026-83594：Memory allocation with an excessive size value in Apache Wicket. org.a
Memory allocation with an excessive size value in Apache Wicket. org.apache.wicket.markup.html.form.upload.resource.FileUploadToResourceField uploads files to a separately mounted resource rather than through a form, and…
高危
漏洞预警
CVSS 8.3
CVE-2026-84170：Allocation of resources without limits or throttling in Apache Wicket
Allocation of resources without limits or throttling in Apache Wicket. org.apache.wicket.markup.html.form.upload.resource.AbstractFileUploadResource is the server side of the form-less upload offered by FileUploadToResou…
高危
漏洞预警
CVSS 7.6
CVE-2026-82956：Improper neutralization of input during web page generation in Apache
Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.ajax.AjaxNewWindowNotifyingBehavior notices that a page instance has been opened in a second browser window or tab. It asks…
高危
漏洞预警
CVSS 7.4
CVE-2026-83559：Improper encoding or escaping of output in Apache Wicket. org.apache.w
Improper encoding or escaping of output in Apache Wicket. org.apache.wicket.core.util.string.JavaScriptUtils#escapeQuotes() replaces each single quote in its input with a backslash and a single quote, and each double quo…
高危
漏洞预警
CVSS 7.4
CVE-2026-83539：Improper neutralization of input during web page generation in Apache
Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.extensions.markup.html.basic.SmartLinkLabel and org.apache.wicket.extensions.markup.html.basic.SmartLinkMultiLineLabel displ…
高危
漏洞预警
CVSS 7.6
CVE-2026-111089：Apache Wicket reads texts from the application's resource bundles — a
Apache Wicket reads texts from the application's resource bundles — a localized label, a css class name — and writes some of them into the JavaScript and the markup it generates for a component. Those texts are placed in…
高危
漏洞预警
CVSS 7.2
CVE-2026-82840：Session fixation in Apache Wicket. org.apache.wicket.authroles.authent
Session fixation in Apache Wicket. org.apache.wicket.authroles.authentication.AuthenticatedWebSession is the authentication base class of Wicket's role-based security module, and its signIn(String, String) method is the…
高危
漏洞预警
CVSS 7.7
CVE-2026-120241：A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-
A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. Impacted is an unknown function of the file httpupg.cgi of the component Local Firmware Upgra…
高危
漏洞预警
CVSS 8.6
CVE-2026-120240：A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. Thi
A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument g…