https://vulnerability.circl.lu/sightings/feed 2026-09-18T17:02:11.735597+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/4373b950-7ce8-401d-9488-fb55036ec221/export 2026-09-18T17:02:11.757668+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4373b950-7ce8-401d-9488-fb55036ec221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69151", "type": "seen", "source": "https://gist.github.com/djlan/14b1946c39d5ba5605dfec06e037e317", "content": "## \u8fd9\u4e2a PR \u60f3\u89e3\u51b3\u4ec0\u4e48\u95ee\u9898\uff1f\n\n**\u6807\u9898\uff1a** [SECURITY] bump Angular from 21.2.17 to 21.2.19 in /sample/angular-host-app\n\n**\u4e00\u53e5\u8bdd\u603b\u7ed3\uff1a** \u5c06 `sample/angular-host-app` \u4f7f\u7528\u7684\u4e00\u7ec4 Angular \u5305\u4ece 21.2.17 \u5347\u7ea7\u5230 21.2.19\uff0c\u4ee5\u4fee\u590d `@angular/compiler` \u548c `@angular/core` \u4e2d\u8bb0\u5f55\u7684 CVE-2026-69151\uff0c\u540c\u65f6\u4fdd\u6301 Angular \u8fd0\u884c\u65f6\u4e0e\u7f16\u8bd1\u5de5\u5177\u94fe\u7248\u672c\u4e00\u81f4\u3002\n\n| \u9879\u76ee | \u5185\u5bb9 |\n|---|---|\n| PR | [782419](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/782419) |\n| \u4f5c\u8005 | Dingmeng Xue |\n| \u72b6\u6001 | Active\uff08\u975e\u8349\u7a3f\uff0c\u5f53\u524d\u5408\u5e76\u72b6\u6001\u4e3a succeeded\uff09 |\n| \u5206\u652f | `dixue/angular-cve-69151` \u2192 `main` |\n| \u53d8\u66f4\u7edf\u8ba1 | 1 \u4e2a\u63d0\u4ea4\uff0c2 \u4e2a\u6587\u4ef6\uff0c\u65b0\u589e 182 \u884c\uff0c\u5220\u9664 70 \u884c |\n\n### \u76ee\u5f55\n\n- [\u95ee\u9898\u80cc\u666f](#\u95ee\u9898\u80cc\u666f)\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u6d4b\u8bd5\u7528\u4f8b\u89e3\u6790](#\u6d4b\u8bd5\u7528\u4f8b\u89e3\u6790)\n\n### \u95ee\u9898\u80cc\u666f\n\n**\u5df2\u786e\u8ba4\u7684\u610f\u56fe\uff1a** PR \u63cf\u8ff0\u548c\u56db\u4e2a\u5173\u8054 Bug \u5de5\u4f5c\u9879\u5171\u540c\u6307\u51fa\uff0c\u793a\u4f8b Angular \u5bbf\u4e3b\u5e94\u7528\u7684\u4f9d\u8d56\u6811\u5305\u542b CVE-2026-69151\u3002\u544a\u8b66\u5206\u522b\u8986\u76d6 `@angular/compiler` \u4e0e `@angular/core`\uff0c\u5e76\u8bb0\u5f55\u4e86\u4f9d\u8d56\u7248\u672c 21.2.7 \u548c 21.2.17\uff1b\u672c PR \u76f4\u63a5\u5904\u7406\u5f53\u524d\u6e05\u5355\u4e2d\u7684 21.2.17\uff0c\u5c06\u76f8\u5173 Angular \u5305\u66f4\u65b0\u5230 21.2.19\u3002PR \u7684\u76ee\u6807\u662f\u7528\u5df2\u4fee\u8865\u7248\u672c\u6d88\u9664\u8fd9\u4e9b\u4f9d\u8d56\u544a\u8b66\uff0c\u800c\u4e0d\u662f\u4fee\u6539\u5e94\u7528\u529f\u80fd\u3002\n\n**\u8865\u5145\u80cc\u666f\uff1a** \u5b89\u5168\u4f9d\u8d56\u66f4\u65b0\u9700\u8981\u53ca\u65f6\u63a8\u8fdb\uff0c\u540c\u65f6\u4ecd\u9700\u7531\u7ef4\u62a4\u8005\u786e\u8ba4\u8865\u4e01\u4e0e\u793a\u4f8b\u5e94\u7528\u7684\u6784\u5efa\u65b9\u5f0f\u517c\u5bb9\u3002\u4e3a\u51cf\u5c11\u6539\u52a8\u8303\u56f4\uff0c\u672c\u6b21\u91c7\u7528\u540c\u4e00 Angular \u6b21\u7248\u672c\u7ebf\u5185\u7684\u8865\u4e01\u5347\u7ea7\uff0c\u53ea\u8c03\u6574\u4f9d\u8d56\u58f0\u660e\u548c\u9501\u5b9a\u7ed3\u679c\u3002\n\n**\u4ece\u4ee3\u7801\u53d8\u66f4\u63a8\u65ad\uff1a** Angular \u5305\u4e4b\u95f4\u5b58\u5728\u4e25\u683c\u6216\u7d27\u5bc6\u7684 peer dependency \u7248\u672c\u5173\u7cfb\uff0c\u56e0\u6b64 PR \u6ca1\u6709\u53ea\u5347\u7ea7\u88ab\u544a\u8b66\u76f4\u63a5\u70b9\u540d\u7684 `compiler` \u548c `core`\uff0c\u800c\u662f\u540c\u6b65\u5347\u7ea7 `common`\u3001`forms`\u3001`platform-browser`\u3001`platform-browser-dynamic`\u3001`router` \u4ee5\u53ca\u7f16\u8bd1\u671f\u7684 `compiler-cli`\u3002\u8fd9\u4f7f\u8fd0\u884c\u65f6\u3001\u6d4f\u89c8\u5668\u96c6\u6210\u3001\u8def\u7531\u3001\u8868\u5355\u548c\u7f16\u8bd1\u5de5\u5177\u7ee7\u7eed\u4f7f\u7528\u540c\u4e00\u8865\u4e01\u7248\u672c\uff1b\u8be5\u4e00\u81f4\u6027\u52a8\u673a\u7531\u9501\u6587\u4ef6\u4e2d\u7684 peer dependency \u53d8\u5316\u652f\u6301\uff0c\u4f46 PR \u63cf\u8ff0\u6ca1\u6709\u9010\u9879\u8bf4\u660e\u3002\n\n## \u53d8\u66f4\u6982\u89c8\n\n### 1. Angular \u76f4\u63a5\u4f9d\u8d56\u7248\u672c\u5bf9\u9f50\n\n- **\u89e3\u51b3\u7684\u95ee\u9898\u90e8\u5206\uff1a** \u79fb\u9664\u5e94\u7528\u6e05\u5355\u4e2d\u5bf9 Angular 21.2.17 \u7684\u76f4\u63a5\u5f15\u7528\uff0c\u5e76\u5c06\u53d7\u5230 CVE \u544a\u8b66\u5f71\u54cd\u7684 `@angular/compiler`\u3001`@angular/core` \u66f4\u65b0\u5230 21.2.19\u3002\n- **\u6838\u5fc3\u7ec4\u4ef6/\u6587\u4ef6\uff1a** [`sample/angular-host-app/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/782419?path=/sample/angular-host-app/package.json&_a=files)\u3002\n- **\u91c7\u7528\u8fd9\u79cd\u65b9\u5f0f\u7684\u539f\u56e0\uff1a** \u5df2\u786e\u8ba4\u7684\u4fee\u590d\u7b56\u7565\u662f\u7a84\u8303\u56f4\u8865\u4e01\u5347\u7ea7\u3002\u8be5\u6587\u4ef6\u628a\u4e03\u4e2a Angular \u8fd0\u884c\u65f6/\u6846\u67b6\u5305\u4ee5\u53ca\u5f00\u53d1\u4f9d\u8d56 `@angular/compiler-cli` \u7edf\u4e00\u4ece `^21.2.17` \u8c03\u6574\u4e3a `^21.2.19`\uff0c\u6ca1\u6709\u6539\u52a8\u5e94\u7528\u6e90\u7801\u3001\u811a\u672c\u6216\u5176\u4ed6\u9876\u5c42\u4f9d\u8d56\u3002\n- **\u8bf7\u6c42\u6216\u6570\u636e\u6d41\uff1a** \u8fd9\u4e2a\u6a21\u5757\u6ca1\u6709\u65b0\u589e\u8fd0\u884c\u65f6\u8bf7\u6c42\u5904\u7406\u94fe\u8def\u3002\u5b89\u88c5\u9636\u6bb5\uff0c\u5305\u7ba1\u7406\u5668\u8bfb\u53d6 `package.json` \u7684\u7248\u672c\u8303\u56f4\u5e76\u89e3\u6790 Angular 21.2.19\uff1b\u6784\u5efa\u9636\u6bb5\uff0c`compiler-cli` \u4e0e `compiler` \u53c2\u4e0e\u6a21\u677f\u548c TypeScript \u7f16\u8bd1\uff1b\u5e94\u7528\u8fd0\u884c\u65f6\u5219\u7531 `core`\u3001`common`\u3001\u8868\u5355\u3001\u8def\u7531\u548c\u6d4f\u89c8\u5668\u5e73\u53f0\u5305\u5171\u540c\u63d0\u4f9b\u73b0\u6709\u529f\u80fd\u3002\n\n### 2. \u53ef\u91cd\u590d\u5b89\u88c5\u7684\u4f9d\u8d56\u6811\u66f4\u65b0\n\n- **\u89e3\u51b3\u7684\u95ee\u9898\u90e8\u5206\uff1a** \u5c06\u6e05\u5355\u4e2d\u7684\u7248\u672c\u5347\u7ea7\u843d\u5b9e\u5230\u53ef\u91cd\u590d\u5b89\u88c5\u7684\u9501\u5b9a\u4f9d\u8d56\u6811\uff0c\u786e\u4fdd\u5b9e\u9645\u5b89\u88c5\u7684\u662f 21.2.19\uff0c\u800c\u4e0d\u53ea\u662f\u6269\u5927\u6216\u6539\u53d8\u7248\u672c\u58f0\u660e\u3002\n- **\u6838\u5fc3\u7ec4\u4ef6/\u6587\u4ef6\uff1a** [`sample/angular-host-app/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/782419?path=/sample/angular-host-app/package-lock.json&_a=files)\u3002\n- **\u91c7\u7528\u8fd9\u79cd\u65b9\u5f0f\u7684\u539f\u56e0\uff1a** `package-lock.json` \u8bb0\u5f55\u7cbe\u786e\u7248\u672c\u3001\u5305\u6e90\u3001\u5b8c\u6574\u6027\u6458\u8981\u3001\u4f9d\u8d56\u5173\u7cfb\u548c\u5e73\u53f0\u5143\u6570\u636e\u3002\u540c\u6b65\u63d0\u4ea4\u9501\u6587\u4ef6\u53ef\u4ee5\u8ba9 CI \u548c\u5f00\u53d1\u73af\u5883\u6309\u76f8\u540c\u89e3\u6790\u7ed3\u679c\u5b89\u88c5\u4f9d\u8d56\uff0c\u5e76\u4f7f Angular \u5305\u4e4b\u95f4\u7684 peer dependency \u6307\u5411 21.2.19\u3002\n- **\u8bf7\u6c42\u6216\u6570\u636e\u6d41\uff1a** `npm` \u5148\u8bfb\u53d6\u9876\u5c42\u6e05\u5355\uff0c\u518d\u6309\u9501\u6587\u4ef6\u53d6\u5f97\u7cbe\u786e\u5305\u7248\u672c\u3002\u89e3\u6790\u540e\u7684\u4f9d\u8d56\u56fe\u5c06 Angular \u7684 `common`\u3001`compiler`\u3001`core`\u3001`forms`\u3001\u6d4f\u89c8\u5668\u5e73\u53f0\u5305\u548c `router` \u56fa\u5b9a\u5230 21.2.19\uff1b`compiler-cli` \u540c\u6b65\u5230 21.2.19\uff0c\u5e76\u5e26\u5165\u5176\u89e3\u6790\u51fa\u7684 Babel \u5b50\u4f9d\u8d56\u66f4\u65b0\u3002\u9501\u6587\u4ef6\u8fd8\u8865\u5145\u4e86\u90e8\u5206\u53ef\u9009\u539f\u751f\u5305\u7684 `libc` \u5e73\u53f0\u6761\u4ef6\uff0c\u8fd9\u4e9b\u5185\u5bb9\u5c5e\u4e8e\u91cd\u65b0\u89e3\u6790\u4f9d\u8d56\u6811\u540e\u7684\u5b89\u88c5\u5143\u6570\u636e\u3002\n\n### 3. \u7f16\u8bd1\u5de5\u5177\u94fe\u7684\u4f20\u9012\u4f9d\u8d56\u5237\u65b0\n\n- **\u89e3\u51b3\u7684\u95ee\u9898\u90e8\u5206\uff1a** \u8ba9\u5347\u7ea7\u540e\u7684 Angular \u7f16\u8bd1\u5668 CLI \u4f7f\u7528\u4e0e\u5176 21.2.19 \u5305\u63cf\u8ff0\u4e00\u81f4\u7684\u4f20\u9012\u4f9d\u8d56\u3002\n- **\u6838\u5fc3\u7ec4\u4ef6/\u6587\u4ef6\uff1a** [`sample/angular-host-app/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/782419?path=/sample/angular-host-app/package-lock.json&_a=files) \u4e2d `@angular/compiler-cli` \u7684\u9501\u5b9a\u6761\u76ee\u53ca\u5176\u5d4c\u5957 Babel \u6761\u76ee\u3002\n- **\u91c7\u7528\u8fd9\u79cd\u65b9\u5f0f\u7684\u539f\u56e0\uff1a** \u8fd9\u662f\u9501\u6587\u4ef6\u6839\u636e\u65b0\u7248 `@angular/compiler-cli` \u4f9d\u8d56\u58f0\u660e\u751f\u6210\u7684\u7ed3\u679c\uff0c\u800c\u4e0d\u662f PR \u5355\u72ec\u58f0\u660e\u7684\u4e00\u9879\u529f\u80fd\u6539\u9020\u3002\u53ef\u89c1\u53d8\u5316\u5305\u62ec\u8be5\u5305\u4f7f\u7528\u7684 `@babel/core` \u4ece 7.29.0 \u66f4\u65b0\u5230 7.29.7\uff0c\u4ee5\u53ca\u76f8\u5e94 helper\u3001parser\u3001types \u548c generator \u6761\u76ee\u7684\u8c03\u6574\u3002\n- **\u8bf7\u6c42\u6216\u6570\u636e\u6d41\uff1a** \u5728\u6784\u5efa\u8fc7\u7a0b\u4e2d\uff0cAngular \u7f16\u8bd1\u5668 CLI \u8c03\u7528\u5176 Babel \u76f8\u5173\u4f20\u9012\u4f9d\u8d56\u5904\u7406\u548c\u751f\u6210\u4ee3\u7801\uff1b\u8fd0\u884c\u65f6\u5e94\u7528\u8bf7\u6c42\u4e0d\u4f1a\u76f4\u63a5\u7ecf\u8fc7\u8fd9\u4e9b\u5305\u3002\u8fd9\u91cc\u63cf\u8ff0\u7684\u662f\u6784\u5efa\u6570\u636e\u6d41\uff0c\u4f9d\u636e\u662f\u9501\u6587\u4ef6\u4e2d\u7684\u4f9d\u8d56\u5d4c\u5957\u5173\u7cfb\u3002\n\n## \u6d4b\u8bd5\u7528\u4f8b\u89e3\u6790\n\n\u672c PR **\u6ca1\u6709\u4fee\u6539\u6216\u65b0\u589e\u4efb\u4f55\u6d4b\u8bd5\u6587\u4ef6\uff0c\u56e0\u6b64\u6ca1\u6709\u53ef\u9010\u9879\u679a\u4e3e\u7684 changed test case**\u3002\n\nPR \u63cf\u8ff0\u63d0\u4f9b\u4e86\u4ee5\u4e0b\u9a8c\u8bc1\u8bb0\u5f55\uff0c\u4f46\u5b83\u4eec\u4e0d\u662f\u672c\u6b21\u53d8\u66f4\u4e2d\u7684\u6d4b\u8bd5\u7528\u4f8b\uff1a\n\n1. **\u4f9d\u8d56\u7248\u672c\u68c0\u67e5**\n - **\u573a\u666f\uff1a** \u786e\u8ba4\u5b89\u88c5\u89e3\u6790\u7ed3\u679c\u5305\u542b\u76ee\u6807\u8865\u4e01\u7248\u672c\u3002\n - **\u8f93\u5165/\u8bbe\u7f6e\uff1a** \u5728 `sample/angular-host-app` \u7684\u4f9d\u8d56\u73af\u5883\u4e2d\u8fd0\u884c `npm ls`\uff0c\u68c0\u67e5 `@angular/compiler`\u3001`@angular/core` \u548c `@angular/compiler-cli`\u3002\n - **\u53ef\u89c2\u5bdf\u7684\u6210\u529f\u6761\u4ef6\uff1a** \u4e09\u4e2a\u5305\u5747\u89e3\u6790\u4e3a 21.2.19\u3002\n - **\u8bf4\u660e\u7684\u884c\u4e3a\uff1a** \u9876\u5c42\u4f9d\u8d56\u58f0\u660e\u4e0e\u9501\u6587\u4ef6\u5171\u540c\u4f7f\u88ab\u544a\u8b66\u7684\u8fd0\u884c\u65f6\u5305\u53ca\u914d\u5957\u7f16\u8bd1 CLI \u843d\u5230\u76ee\u6807\u7248\u672c\u3002\n\n2. **\u5e94\u7528\u6784\u5efa\u9a8c\u8bc1**\n - **\u573a\u666f\uff1a** \u786e\u8ba4\u5347\u7ea7\u540e\u7684 Angular \u4f9d\u8d56\u6811\u4ecd\u53ef\u7f16\u8bd1\u8be5\u793a\u4f8b\u5e94\u7528\u3002\n - **\u8f93\u5165/\u8bbe\u7f6e\uff1a** \u8fd0\u884c\u73b0\u6709\u7684 `npm run build`\uff1bPR \u6570\u636e\u5305\u672a\u63d0\u4f9b\u989d\u5916 fixture\u3001mock \u6216\u65ad\u8a00\u7ec6\u8282\u3002\n - **\u53ef\u89c2\u5bdf\u7684\u6210\u529f\u6761\u4ef6\uff1a** \u6784\u5efa\u547d\u4ee4\u6210\u529f\u5b8c\u6210\u3002\n - **\u8bf4\u660e\u7684\u884c\u4e3a\uff1a** Angular 21.2.19 \u7684\u8fd0\u884c\u65f6\u5305\u3001\u7f16\u8bd1\u5668\u4e0e\u73b0\u6709\u5e94\u7528\u6e90\u7801\u80fd\u591f\u5b8c\u6210\u65e2\u6709\u6784\u5efa\u6d41\u7a0b\u3002\n\n3. **\u73b0\u6709\u6d4f\u89c8\u5668\u6d4b\u8bd5\u547d\u4ee4**\n - **\u573a\u666f\uff1a** \u5c1d\u8bd5\u4ee5\u65e0\u76d1\u89c6\u3001Chrome Headless \u6a21\u5f0f\u8fd0\u884c\u73b0\u6709\u6d4b\u8bd5\u3002\n - **\u8f93\u5165/\u8bbe\u7f6e\uff1a** `npm test -- --watch=false --browsers=ChromeHeadless`\u3002\n - **\u53ef\u89c2\u5bdf\u7ed3\u679c\uff1a** \u8be5\u547d\u4ee4\u4ecd\u88ab\u5df2\u6709\u4ee3\u7801\u5bf9\u5df2\u79fb\u9664 Angular \u6d4b\u8bd5 API \u7684\u5bfc\u5165\u6240\u963b\u585e\uff0c\u672a\u5f62\u6210\u901a\u8fc7\u7ed3\u679c\u3002\n - **\u8bf4\u660e\u7684\u884c\u4e3a\uff1a** \u53ef\u7528\u8bc1\u636e\u53ea\u8868\u660e\u8fd9\u662f\u5347\u7ea7\u524d\u5df2\u5b58\u5728\u7684\u6d4b\u8bd5\u542f\u52a8\u963b\u585e\uff1b\u6570\u636e\u5305\u6ca1\u6709\u63d0\u4f9b\u5177\u4f53\u53d7\u5f71\u54cd\u6d4b\u8bd5\u540d\u79f0\u3001fixture\u3001mock\u3001\u65ad\u8a00\u6216\u672c PR \u5bf9\u6d4b\u8bd5\u4ee3\u7801\u7684\u6539\u52a8\uff0c\u56e0\u6b64\u4e0d\u80fd\u636e\u6b64\u63a8\u65ad\u66f4\u591a\u6d4b\u8bd5\u8986\u76d6\u3002\n", "creation_timestamp": "2026-09-18T16:20:44.250594Z"} 2026-09-18T16:20:44.250594+00:00 https://vulnerability.circl.lu/sighting/dc7bbf90-5633-48b9-85b5-1eb218062f44/export 2026-09-18T17:02:11.759787+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "dc7bbf90-5633-48b9-85b5-1eb218062f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69414", "type": "seen", "source": "https://t.me/VulnerabilityNews/44009", "content": "Microsoft working on Defender patch for ShieldBreak zero-day\n\nMicrosoft is working on a security patch for the \"ShieldBreak\" zero-day vulnerability disclosed last week by security researcher \"Nightmare Eclipse\" and now tracked as CVE-2026-69414. [...]\nhttps://www.bleepingcomputer.com/news/security/microsoft-working-on-defender-patch-for-shieldbreak-zero-day/", "creation_timestamp": "2026-09-18T12:00:07.615095Z"} 2026-09-18T12:00:07.615095+00:00 https://vulnerability.circl.lu/sighting/1579d9ae-1b33-4451-b71f-1d5ad52cf22b/export 2026-09-18T17:02:11.759924+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1579d9ae-1b33-4451-b71f-1d5ad52cf22b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69730", "type": "seen", "source": "https://t.me/xhqcankao/31991", "content": "\u5fae\u8f6f\u53f2\u4e0a\u6700\u5927\u53f7\u5468\u4e8c\u8865\u4e01\u65e5 \u5171\u8ba1\u4fee\u590d974\u4e2a\u6f0f\u6d1e\n\n\u5fae\u8f6f\u4e5d\u6708\u7684\u8865\u4e01\u661f\u671f\u4e8c\u4fee\u590d\u4e86\u81f3\u5c11 974\u4e2a\u5b89\u5168\u6f0f\u6d1e\uff0c\u53f2\u4e0a\u6700\u5927\u7684\u4e00\u6279\u3002\u4e4b\u524d\u7eaa\u5f55\u662f\u4eca\u5e74\u4e03\u6708\u7684570\u4e2a\u2014\u2014\u8fd9\u6b21\u8fd1\u4e4e\u7ffb\u500d\u3002\u5176\u4e2d113\u4e2a\u662f\u4e25\u91cd\u7ea7\u522b\uff0c\u610f\u5473\u7740\u653b\u51fb\u8005\u5728\u6ca1\u6709\u7528\u6237\u4ea4\u4e92\u7684\u60c5\u51b5\u4e0b\u53ef\u80fd\u8fdc\u7a0b\u63a5\u7ba1\u7cfb\u7edf\u30022 \u4e2a\u96f6\u65e5\u6f0f\u6d1e\u6b63\u5728\u88ab\u79ef\u6781\u5229\u7528\uff0c\u90fd\u662f Windows \u672c\u5730\u6743\u9650\u63d0\u5347\u3002\u53e6\u5916\u6709\u4e24\u4e2a\u4e25\u91cd\u6f0f\u6d1e\u503c\u5f97\u5173\u6ce8\uff1a\n\nCVE-2026-69730\u662fWindows Server 2012\u4ee5\u4e0a\u53ca Windows 10 \u7684 DNS \u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u65e0\u9700\u8ba4\u8bc1\uff0c\u53d1\u4e00\u4e2a\u6784\u9020\u8fc7\u7684\u6570\u636e\u5305\u5c31\u80fd\u6267\u884c\u8fdc\u7a0b\u4ee3\u7801\u3002\u5fae\u8f6f\u81ea\u5df1\u6807\u6ce8\u4e86\u5f88\u53ef\u80fd\u88ab\u5229\u7528\u3002\nCVE-2026-69829\u662fWindows Shell \u7684\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\uff0cCVSS 9.8\u2014\u2014\u653b\u51fb\u590d\u6742\u5ea6\u4f4e\u3001\u4e0d\u9700\u8981\u6743\u9650\u3001\u4e0d\u9700\u8981\u7528\u6237\u4ea4\u4e92\u3002\n\n\u2014\u2014 oschina.net\u3001krebsonsecurity", "creation_timestamp": "2026-09-18T08:00:07.413029Z"} 2026-09-18T08:00:07.413029+00:00 https://vulnerability.circl.lu/sighting/103faf24-01ed-48bb-989a-d0ddb3ca23d1/export 2026-09-18T17:02:11.760020+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "103faf24-01ed-48bb-989a-d0ddb3ca23d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69829", "type": "seen", "source": "https://t.me/xhqcankao/31991", "content": "\u5fae\u8f6f\u53f2\u4e0a\u6700\u5927\u53f7\u5468\u4e8c\u8865\u4e01\u65e5 \u5171\u8ba1\u4fee\u590d974\u4e2a\u6f0f\u6d1e\n\n\u5fae\u8f6f\u4e5d\u6708\u7684\u8865\u4e01\u661f\u671f\u4e8c\u4fee\u590d\u4e86\u81f3\u5c11 974\u4e2a\u5b89\u5168\u6f0f\u6d1e\uff0c\u53f2\u4e0a\u6700\u5927\u7684\u4e00\u6279\u3002\u4e4b\u524d\u7eaa\u5f55\u662f\u4eca\u5e74\u4e03\u6708\u7684570\u4e2a\u2014\u2014\u8fd9\u6b21\u8fd1\u4e4e\u7ffb\u500d\u3002\u5176\u4e2d113\u4e2a\u662f\u4e25\u91cd\u7ea7\u522b\uff0c\u610f\u5473\u7740\u653b\u51fb\u8005\u5728\u6ca1\u6709\u7528\u6237\u4ea4\u4e92\u7684\u60c5\u51b5\u4e0b\u53ef\u80fd\u8fdc\u7a0b\u63a5\u7ba1\u7cfb\u7edf\u30022 \u4e2a\u96f6\u65e5\u6f0f\u6d1e\u6b63\u5728\u88ab\u79ef\u6781\u5229\u7528\uff0c\u90fd\u662f Windows \u672c\u5730\u6743\u9650\u63d0\u5347\u3002\u53e6\u5916\u6709\u4e24\u4e2a\u4e25\u91cd\u6f0f\u6d1e\u503c\u5f97\u5173\u6ce8\uff1a\n\nCVE-2026-69730\u662fWindows Server 2012\u4ee5\u4e0a\u53ca Windows 10 \u7684 DNS \u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u65e0\u9700\u8ba4\u8bc1\uff0c\u53d1\u4e00\u4e2a\u6784\u9020\u8fc7\u7684\u6570\u636e\u5305\u5c31\u80fd\u6267\u884c\u8fdc\u7a0b\u4ee3\u7801\u3002\u5fae\u8f6f\u81ea\u5df1\u6807\u6ce8\u4e86\u5f88\u53ef\u80fd\u88ab\u5229\u7528\u3002\nCVE-2026-69829\u662fWindows Shell \u7684\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\uff0cCVSS 9.8\u2014\u2014\u653b\u51fb\u590d\u6742\u5ea6\u4f4e\u3001\u4e0d\u9700\u8981\u6743\u9650\u3001\u4e0d\u9700\u8981\u7528\u6237\u4ea4\u4e92\u3002\n\n\u2014\u2014 oschina.net\u3001krebsonsecurity", "creation_timestamp": "2026-09-18T08:00:07.354522Z"} 2026-09-18T08:00:07.354522+00:00 https://vulnerability.circl.lu/sighting/2dc12bf1-7d81-476f-bd4b-c15320cd5d5b/export 2026-09-18T17:02:11.760103+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2dc12bf1-7d81-476f-bd4b-c15320cd5d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6973", "type": "seen", "source": "https://t.me/VulnerabilityNews/42396", "content": "Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks\n\nCVE-2026-6973 is a high-severity vulnerability that allows an attacker who has admin privileges to execute arbitrary code.\nThe post Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek.\nhttps://www.securityweek.com/ivanti-patches-epmm-zero-day-exploited-in-targeted-attacks/", "creation_timestamp": "2026-09-18T05:00:07.998949Z"} 2026-09-18T05:00:07.998949+00:00 https://vulnerability.circl.lu/sighting/cc65a738-3e77-482e-9e46-7f8cf3f758ba/export 2026-09-18T17:02:11.760197+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cc65a738-3e77-482e-9e46-7f8cf3f758ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69843", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr6gj3wcs2g", "content": "CVE-2026-69843 - microsoft fabric\nMicrosoft Fabric can be tricked into accepting false credentials, allowing someone without permission to act as a more privileged user on the network. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoftfabric #microsoft #CVE #infosec", "creation_timestamp": "2026-09-18T03:00:06.469720Z"} 2026-09-18T03:00:06.469720+00:00 https://vulnerability.circl.lu/sighting/2c2dc6cc-7786-4746-a54f-3d195a417092/export 2026-09-18T17:02:11.760294+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2c2dc6cc-7786-4746-a54f-3d195a417092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69399", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr46yn6zh2r", "content": "CVE-2026-69399 - azure arc\nThe Azure Arc service could be tricked into giving a user more access than intended. This could allow an attacker to control or change settings in your connected systems.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#azurearc #microsoft #CVE #infosec", "creation_timestamp": "2026-09-18T02:20:06.833097Z"} 2026-09-18T02:20:06.833097+00:00 https://vulnerability.circl.lu/sighting/4a2dedef-311c-4359-ab57-c23822c39943/export 2026-09-18T17:02:11.760379+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4a2dedef-311c-4359-ab57-c23822c39943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69865", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr3n5jrln2t", "content": "CVE-2026-69865 - azure container registry\nThe Azure Container Registry service can be tricked into granting more access than intended. An attacker who can send specially crafted requests could increase their\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-09-18T02:10:08.008118Z"} 2026-09-18T02:10:08.008118+00:00 https://vulnerability.circl.lu/sighting/c9164428-f82a-40b0-a1c1-d14d9a39743c/export 2026-09-18T17:02:11.760491+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c9164428-f82a-40b0-a1c1-d14d9a39743c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69843", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvr3kkqcpg2c", "content": "\ud83d\udea8 CVE-2026-69843 \u2014 CVSS 10 CRITICAL\n\nAuthentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-69843\n\n#CVE #PotatoSecurity #InfoSec", "creation_timestamp": "2026-09-18T02:08:41.308315Z"} 2026-09-18T02:08:41.308315+00:00 https://vulnerability.circl.lu/sighting/8fff650c-9684-4a4a-a905-3e392d703fa4/export 2026-09-18T17:02:11.760603+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8fff650c-9684-4a4a-a905-3e392d703fa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69843", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvr3kkcflz2y", "content": "\ud83d\udea8 CVE-2026-69843 \u2014 CVSS 10 CRITICAL\n\nAuthentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-69843\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T02:08:40.665230Z"} 2026-09-18T02:08:40.665230+00:00