- 楼主 编辑于
2026 年 10 月 26 日
PHP2Shell
CVE-2026-109618
CVE-2026-109619eMudhra CA 证书泄露
https://www.helpnetsecurity.com/2026/10/21/emudhra-certificates-private-keys-compromised/
https://blog.cloudflare.com/emudhra-certificate-compromise/
注意：eMudhra (emSign) ca 证书密钥泄露及 php 两个 CVE
GoLang 中间证书信任漏洞
CVE-2026-111943
Node.js 发布最高严重级别高危安全更新
TLS 非规范 IP 地址处理 CVE-2026-106069 CVE-2026-106072
DNS 解析空字节验证 CVE-2026-105482
TLS IP 规范化回归 CVE-2026-105483
Brotli 解码器问题 CVE-2026-111497LiteLLM PyPI 投毒
受影响版本 1.107.0
🚨 LiteLLM, a Python package for connecting to AI model providers with 92M+ monthly downloads, has been compromised.
— Socket (@SocketSecurity) October 21, 2026
Version 1.107.0 ships credential-stealing malware through PyPI wheels and Docker images, targeting cloud credentials, developer secrets, and AI tools. pic.twitter.com/4Mbt1LbhLu
收藏支持反对打赏
今年的漏洞都好多啊