https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 18 Sep 2026 17:02:11 +0000 https://vulnerability.circl.lu/sighting/4373b950-7ce8-401d-9488-fb55036ec221/export {"uuid": "4373b950-7ce8-401d-9488-fb55036ec221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69151", "type": "seen", "source": "https://gist.github.com/djlan/14b1946c39d5ba5605dfec06e037e317", "content": "## \u8fd9\u4e2a PR \u60f3\u89e3\u51b3\u4ec0\u4e48\u95ee\u9898\uff1f\n\n**\u6807\u9898\uff1a** [SECURITY] bump Angular from 21.2.17 to 21.2.19 in /sample/angular-host-app\n\n**\u4e00\u53e5\u8bdd\u603b\u7ed3\uff1a** \u5c06 `sample/angular-host-app` \u4f7f\u7528\u7684\u4e00\u7ec4 Angular \u5305\u4ece 21.2.17 \u5347\u7ea7\u5230 21.2.19\uff0c\u4ee5\u4fee\u590d `@angular/compiler` \u548c `@angular/core` \u4e2d\u8bb0\u5f55\u7684 CVE-2026-69151\uff0c\u540c\u65f6\u4fdd\u6301 Angular \u8fd0\u884c\u65f6\u4e0e\u7f16\u8bd1\u5de5\u5177\u94fe\u7248\u672c\u4e00\u81f4\u3002\n\n| \u9879\u76ee | \u5185\u5bb9 |\n|---|---|\n| PR | [782419](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/782419) |\n| \u4f5c\u8005 | Dingmeng Xue |\n| \u72b6\u6001 | Active\uff08\u975e\u8349\u7a3f\uff0c\u5f53\u524d\u5408\u5e76\u72b6\u6001\u4e3a succeeded\uff09 |\n| \u5206\u652f | `dixue/angular-cve-69151` \u2192 `main` |\n| \u53d8\u66f4\u7edf\u8ba1 | 1 \u4e2a\u63d0\u4ea4\uff0c2 \u4e2a\u6587\u4ef6\uff0c\u65b0\u589e 182 \u884c\uff0c\u5220\u9664 70 \u884c |\n\n### \u76ee\u5f55\n\n- [\u95ee\u9898\u80cc\u666f](#\u95ee\u9898\u80cc\u666f)\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u6d4b\u8bd5\u7528\u4f8b\u89e3\u6790](#\u6d4b\u8bd5\u7528\u4f8b\u89e3\u6790)\n\n### \u95ee\u9898\u80cc\u666f\n\n**\u5df2\u786e\u8ba4\u7684\u610f\u56fe\uff1a** PR \u63cf\u8ff0\u548c\u56db\u4e2a\u5173\u8054 Bug \u5de5\u4f5c\u9879\u5171\u540c\u6307\u51fa\uff0c\u793a\u4f8b Angular \u5bbf\u4e3b\u5e94\u7528\u7684\u4f9d\u8d56\u6811\u5305\u542b CVE-2026-69151\u3002\u544a\u8b66\u5206\u522b\u8986\u76d6 `@angular/compiler` \u4e0e `@angular/core`\uff0c\u5e76\u8bb0\u5f55\u4e86\u4f9d\u8d56\u7248\u672c 21.2.7 \u548c 21.2.17\uff1b\u672c PR \u76f4\u63a5\u5904\u7406\u5f53\u524d\u6e05\u5355\u4e2d\u7684 21.2.17\uff0c\u5c06\u76f8\u5173 Angular \u5305\u66f4\u65b0\u5230 21.2.19\u3002PR \u7684\u76ee\u6807\u662f\u7528\u5df2\u4fee\u8865\u7248\u672c\u6d88\u9664\u8fd9\u4e9b\u4f9d\u8d56\u544a\u8b66\uff0c\u800c\u4e0d\u662f\u4fee\u6539\u5e94\u7528\u529f\u80fd\u3002\n\n**\u8865\u5145\u80cc\u666f\uff1a** \u5b89\u5168\u4f9d\u8d56\u66f4\u65b0\u9700\u8981\u53ca\u65f6\u63a8\u8fdb\uff0c\u540c\u65f6\u4ecd\u9700\u7531\u7ef4\u62a4\u8005\u786e\u8ba4\u8865\u4e01\u4e0e\u793a\u4f8b\u5e94\u7528\u7684\u6784\u5efa\u65b9\u5f0f\u517c\u5bb9\u3002\u4e3a\u51cf\u5c11\u6539\u52a8\u8303\u56f4\uff0c\u672c\u6b21\u91c7\u7528\u540c\u4e00 Angular \u6b21\u7248\u672c\u7ebf\u5185\u7684\u8865\u4e01\u5347\u7ea7\uff0c\u53ea\u8c03\u6574\u4f9d\u8d56\u58f0\u660e\u548c\u9501\u5b9a\u7ed3\u679c\u3002\n\n**\u4ece\u4ee3\u7801\u53d8\u66f4\u63a8\u65ad\uff1a** Angular \u5305\u4e4b\u95f4\u5b58\u5728\u4e25\u683c\u6216\u7d27\u5bc6\u7684 peer dependency \u7248\u672c\u5173\u7cfb\uff0c\u56e0\u6b64 PR \u6ca1\u6709\u53ea\u5347\u7ea7\u88ab\u544a\u8b66\u76f4\u63a5\u70b9\u540d\u7684 `compiler` \u548c `core`\uff0c\u800c\u662f\u540c\u6b65\u5347\u7ea7 `common`\u3001`forms`\u3001`platform-browser`\u3001`platform-browser-dynamic`\u3001`router` \u4ee5\u53ca\u7f16\u8bd1\u671f\u7684 `compiler-cli`\u3002\u8fd9\u4f7f\u8fd0\u884c\u65f6\u3001\u6d4f\u89c8\u5668\u96c6\u6210\u3001\u8def\u7531\u3001\u8868\u5355\u548c\u7f16\u8bd1\u5de5\u5177\u7ee7\u7eed\u4f7f\u7528\u540c\u4e00\u8865\u4e01\u7248\u672c\uff1b\u8be5\u4e00\u81f4\u6027\u52a8\u673a\u7531\u9501\u6587\u4ef6\u4e2d\u7684 peer dependency \u53d8\u5316\u652f\u6301\uff0c\u4f46 PR \u63cf\u8ff0\u6ca1\u6709\u9010\u9879\u8bf4\u660e\u3002\n\n## \u53d8\u66f4\u6982\u89c8\n\n### 1. Angular \u76f4\u63a5\u4f9d\u8d56\u7248\u672c\u5bf9\u9f50\n\n- **\u89e3\u51b3\u7684\u95ee\u9898\u90e8\u5206\uff1a** \u79fb\u9664\u5e94\u7528\u6e05\u5355\u4e2d\u5bf9 Angular 21.2.17 \u7684\u76f4\u63a5\u5f15\u7528\uff0c\u5e76\u5c06\u53d7\u5230 CVE \u544a\u8b66\u5f71\u54cd\u7684 `@angular/compiler`\u3001`@angular/core` \u66f4\u65b0\u5230 21.2.19\u3002\n- **\u6838\u5fc3\u7ec4\u4ef6/\u6587\u4ef6\uff1a** [`sample/angular-host-app/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/782419?path=/sample/angular-host-app/package.json&_a=files)\u3002\n- **\u91c7\u7528\u8fd9\u79cd\u65b9\u5f0f\u7684\u539f\u56e0\uff1a** \u5df2\u786e\u8ba4\u7684\u4fee\u590d\u7b56\u7565\u662f\u7a84\u8303\u56f4\u8865\u4e01\u5347\u7ea7\u3002\u8be5\u6587\u4ef6\u628a\u4e03\u4e2a Angular \u8fd0\u884c\u65f6/\u6846\u67b6\u5305\u4ee5\u53ca\u5f00\u53d1\u4f9d\u8d56 `@angular/compiler-cli` \u7edf\u4e00\u4ece `^21.2.17` \u8c03\u6574\u4e3a `^21.2.19`\uff0c\u6ca1\u6709\u6539\u52a8\u5e94\u7528\u6e90\u7801\u3001\u811a\u672c\u6216\u5176\u4ed6\u9876\u5c42\u4f9d\u8d56\u3002\n- **\u8bf7\u6c42\u6216\u6570\u636e\u6d41\uff1a** \u8fd9\u4e2a\u6a21\u5757\u6ca1\u6709\u65b0\u589e\u8fd0\u884c\u65f6\u8bf7\u6c42\u5904\u7406\u94fe\u8def\u3002\u5b89\u88c5\u9636\u6bb5\uff0c\u5305\u7ba1\u7406\u5668\u8bfb\u53d6 `package.json` \u7684\u7248\u672c\u8303\u56f4\u5e76\u89e3\u6790 Angular 21.2.19\uff1b\u6784\u5efa\u9636\u6bb5\uff0c`compiler-cli` \u4e0e `compiler` \u53c2\u4e0e\u6a21\u677f\u548c TypeScript \u7f16\u8bd1\uff1b\u5e94\u7528\u8fd0\u884c\u65f6\u5219\u7531 `core`\u3001`common`\u3001\u8868\u5355\u3001\u8def\u7531\u548c\u6d4f\u89c8\u5668\u5e73\u53f0\u5305\u5171\u540c\u63d0\u4f9b\u73b0\u6709\u529f\u80fd\u3002\n\n### 2. \u53ef\u91cd\u590d\u5b89\u88c5\u7684\u4f9d\u8d56\u6811\u66f4\u65b0\n\n- **\u89e3\u51b3\u7684\u95ee\u9898\u90e8\u5206\uff1a** \u5c06\u6e05\u5355\u4e2d\u7684\u7248\u672c\u5347\u7ea7\u843d\u5b9e\u5230\u53ef\u91cd\u590d\u5b89\u88c5\u7684\u9501\u5b9a\u4f9d\u8d56\u6811\uff0c\u786e\u4fdd\u5b9e\u9645\u5b89\u88c5\u7684\u662f 21.2.19\uff0c\u800c\u4e0d\u53ea\u662f\u6269\u5927\u6216\u6539\u53d8\u7248\u672c\u58f0\u660e\u3002\n- **\u6838\u5fc3\u7ec4\u4ef6/\u6587\u4ef6\uff1a** [`sample/angular-host-app/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/782419?path=/sample/angular-host-app/package-lock.json&_a=files)\u3002\n- **\u91c7\u7528\u8fd9\u79cd\u65b9\u5f0f\u7684\u539f\u56e0\uff1a** `package-lock.json` \u8bb0\u5f55\u7cbe\u786e\u7248\u672c\u3001\u5305\u6e90\u3001\u5b8c\u6574\u6027\u6458\u8981\u3001\u4f9d\u8d56\u5173\u7cfb\u548c\u5e73\u53f0\u5143\u6570\u636e\u3002\u540c\u6b65\u63d0\u4ea4\u9501\u6587\u4ef6\u53ef\u4ee5\u8ba9 CI \u548c\u5f00\u53d1\u73af\u5883\u6309\u76f8\u540c\u89e3\u6790\u7ed3\u679c\u5b89\u88c5\u4f9d\u8d56\uff0c\u5e76\u4f7f Angular \u5305\u4e4b\u95f4\u7684 peer dependency \u6307\u5411 21.2.19\u3002\n- **\u8bf7\u6c42\u6216\u6570\u636e\u6d41\uff1a** `npm` \u5148\u8bfb\u53d6\u9876\u5c42\u6e05\u5355\uff0c\u518d\u6309\u9501\u6587\u4ef6\u53d6\u5f97\u7cbe\u786e\u5305\u7248\u672c\u3002\u89e3\u6790\u540e\u7684\u4f9d\u8d56\u56fe\u5c06 Angular \u7684 `common`\u3001`compiler`\u3001`core`\u3001`forms`\u3001\u6d4f\u89c8\u5668\u5e73\u53f0\u5305\u548c `router` \u56fa\u5b9a\u5230 21.2.19\uff1b`compiler-cli` \u540c\u6b65\u5230 21.2.19\uff0c\u5e76\u5e26\u5165\u5176\u89e3\u6790\u51fa\u7684 Babel \u5b50\u4f9d\u8d56\u66f4\u65b0\u3002\u9501\u6587\u4ef6\u8fd8\u8865\u5145\u4e86\u90e8\u5206\u53ef\u9009\u539f\u751f\u5305\u7684 `libc` \u5e73\u53f0\u6761\u4ef6\uff0c\u8fd9\u4e9b\u5185\u5bb9\u5c5e\u4e8e\u91cd\u65b0\u89e3\u6790\u4f9d\u8d56\u6811\u540e\u7684\u5b89\u88c5\u5143\u6570\u636e\u3002\n\n### 3. \u7f16\u8bd1\u5de5\u5177\u94fe\u7684\u4f20\u9012\u4f9d\u8d56\u5237\u65b0\n\n- **\u89e3\u51b3\u7684\u95ee\u9898\u90e8\u5206\uff1a** \u8ba9\u5347\u7ea7\u540e\u7684 Angular \u7f16\u8bd1\u5668 CLI \u4f7f\u7528\u4e0e\u5176 21.2.19 \u5305\u63cf\u8ff0\u4e00\u81f4\u7684\u4f20\u9012\u4f9d\u8d56\u3002\n- **\u6838\u5fc3\u7ec4\u4ef6/\u6587\u4ef6\uff1a** [`sample/angular-host-app/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/782419?path=/sample/angular-host-app/package-lock.json&_a=files) \u4e2d `@angular/compiler-cli` \u7684\u9501\u5b9a\u6761\u76ee\u53ca\u5176\u5d4c\u5957 Babel \u6761\u76ee\u3002\n- **\u91c7\u7528\u8fd9\u79cd\u65b9\u5f0f\u7684\u539f\u56e0\uff1a** \u8fd9\u662f\u9501\u6587\u4ef6\u6839\u636e\u65b0\u7248 `@angular/compiler-cli` \u4f9d\u8d56\u58f0\u660e\u751f\u6210\u7684\u7ed3\u679c\uff0c\u800c\u4e0d\u662f PR \u5355\u72ec\u58f0\u660e\u7684\u4e00\u9879\u529f\u80fd\u6539\u9020\u3002\u53ef\u89c1\u53d8\u5316\u5305\u62ec\u8be5\u5305\u4f7f\u7528\u7684 `@babel/core` \u4ece 7.29.0 \u66f4\u65b0\u5230 7.29.7\uff0c\u4ee5\u53ca\u76f8\u5e94 helper\u3001parser\u3001types \u548c generator \u6761\u76ee\u7684\u8c03\u6574\u3002\n- **\u8bf7\u6c42\u6216\u6570\u636e\u6d41\uff1a** \u5728\u6784\u5efa\u8fc7\u7a0b\u4e2d\uff0cAngular \u7f16\u8bd1\u5668 CLI \u8c03\u7528\u5176 Babel \u76f8\u5173\u4f20\u9012\u4f9d\u8d56\u5904\u7406\u548c\u751f\u6210\u4ee3\u7801\uff1b\u8fd0\u884c\u65f6\u5e94\u7528\u8bf7\u6c42\u4e0d\u4f1a\u76f4\u63a5\u7ecf\u8fc7\u8fd9\u4e9b\u5305\u3002\u8fd9\u91cc\u63cf\u8ff0\u7684\u662f\u6784\u5efa\u6570\u636e\u6d41\uff0c\u4f9d\u636e\u662f\u9501\u6587\u4ef6\u4e2d\u7684\u4f9d\u8d56\u5d4c\u5957\u5173\u7cfb\u3002\n\n## \u6d4b\u8bd5\u7528\u4f8b\u89e3\u6790\n\n\u672c PR **\u6ca1\u6709\u4fee\u6539\u6216\u65b0\u589e\u4efb\u4f55\u6d4b\u8bd5\u6587\u4ef6\uff0c\u56e0\u6b64\u6ca1\u6709\u53ef\u9010\u9879\u679a\u4e3e\u7684 changed test case**\u3002\n\nPR \u63cf\u8ff0\u63d0\u4f9b\u4e86\u4ee5\u4e0b\u9a8c\u8bc1\u8bb0\u5f55\uff0c\u4f46\u5b83\u4eec\u4e0d\u662f\u672c\u6b21\u53d8\u66f4\u4e2d\u7684\u6d4b\u8bd5\u7528\u4f8b\uff1a\n\n1. **\u4f9d\u8d56\u7248\u672c\u68c0\u67e5**\n - **\u573a\u666f\uff1a** \u786e\u8ba4\u5b89\u88c5\u89e3\u6790\u7ed3\u679c\u5305\u542b\u76ee\u6807\u8865\u4e01\u7248\u672c\u3002\n - **\u8f93\u5165/\u8bbe\u7f6e\uff1a** \u5728 `sample/angular-host-app` \u7684\u4f9d\u8d56\u73af\u5883\u4e2d\u8fd0\u884c `npm ls`\uff0c\u68c0\u67e5 `@angular/compiler`\u3001`@angular/core` \u548c `@angular/compiler-cli`\u3002\n - **\u53ef\u89c2\u5bdf\u7684\u6210\u529f\u6761\u4ef6\uff1a** \u4e09\u4e2a\u5305\u5747\u89e3\u6790\u4e3a 21.2.19\u3002\n - **\u8bf4\u660e\u7684\u884c\u4e3a\uff1a** \u9876\u5c42\u4f9d\u8d56\u58f0\u660e\u4e0e\u9501\u6587\u4ef6\u5171\u540c\u4f7f\u88ab\u544a\u8b66\u7684\u8fd0\u884c\u65f6\u5305\u53ca\u914d\u5957\u7f16\u8bd1 CLI \u843d\u5230\u76ee\u6807\u7248\u672c\u3002\n\n2. **\u5e94\u7528\u6784\u5efa\u9a8c\u8bc1**\n - **\u573a\u666f\uff1a** \u786e\u8ba4\u5347\u7ea7\u540e\u7684 Angular \u4f9d\u8d56\u6811\u4ecd\u53ef\u7f16\u8bd1\u8be5\u793a\u4f8b\u5e94\u7528\u3002\n - **\u8f93\u5165/\u8bbe\u7f6e\uff1a** \u8fd0\u884c\u73b0\u6709\u7684 `npm run build`\uff1bPR \u6570\u636e\u5305\u672a\u63d0\u4f9b\u989d\u5916 fixture\u3001mock \u6216\u65ad\u8a00\u7ec6\u8282\u3002\n - **\u53ef\u89c2\u5bdf\u7684\u6210\u529f\u6761\u4ef6\uff1a** \u6784\u5efa\u547d\u4ee4\u6210\u529f\u5b8c\u6210\u3002\n - **\u8bf4\u660e\u7684\u884c\u4e3a\uff1a** Angular 21.2.19 \u7684\u8fd0\u884c\u65f6\u5305\u3001\u7f16\u8bd1\u5668\u4e0e\u73b0\u6709\u5e94\u7528\u6e90\u7801\u80fd\u591f\u5b8c\u6210\u65e2\u6709\u6784\u5efa\u6d41\u7a0b\u3002\n\n3. **\u73b0\u6709\u6d4f\u89c8\u5668\u6d4b\u8bd5\u547d\u4ee4**\n - **\u573a\u666f\uff1a** \u5c1d\u8bd5\u4ee5\u65e0\u76d1\u89c6\u3001Chrome Headless \u6a21\u5f0f\u8fd0\u884c\u73b0\u6709\u6d4b\u8bd5\u3002\n - **\u8f93\u5165/\u8bbe\u7f6e\uff1a** `npm test -- --watch=false --browsers=ChromeHeadless`\u3002\n - **\u53ef\u89c2\u5bdf\u7ed3\u679c\uff1a** \u8be5\u547d\u4ee4\u4ecd\u88ab\u5df2\u6709\u4ee3\u7801\u5bf9\u5df2\u79fb\u9664 Angular \u6d4b\u8bd5 API \u7684\u5bfc\u5165\u6240\u963b\u585e\uff0c\u672a\u5f62\u6210\u901a\u8fc7\u7ed3\u679c\u3002\n - **\u8bf4\u660e\u7684\u884c\u4e3a\uff1a** \u53ef\u7528\u8bc1\u636e\u53ea\u8868\u660e\u8fd9\u662f\u5347\u7ea7\u524d\u5df2\u5b58\u5728\u7684\u6d4b\u8bd5\u542f\u52a8\u963b\u585e\uff1b\u6570\u636e\u5305\u6ca1\u6709\u63d0\u4f9b\u5177\u4f53\u53d7\u5f71\u54cd\u6d4b\u8bd5\u540d\u79f0\u3001fixture\u3001mock\u3001\u65ad\u8a00\u6216\u672c PR \u5bf9\u6d4b\u8bd5\u4ee3\u7801\u7684\u6539\u52a8\uff0c\u56e0\u6b64\u4e0d\u80fd\u636e\u6b64\u63a8\u65ad\u66f4\u591a\u6d4b\u8bd5\u8986\u76d6\u3002\n", "creation_timestamp": "2026-09-18T16:20:44.250594Z"} {"uuid": "4373b950-7ce8-401d-9488-fb55036ec221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69151", "type": "seen", "source": "https://gist.github.com/djlan/14b1946c39d5ba5605dfec06e037e317", "content": "## \u8fd9\u4e2a PR \u60f3\u89e3\u51b3\u4ec0\u4e48\u95ee\u9898\uff1f\n\n**\u6807\u9898\uff1a** [SECURITY] bump Angular from 21.2.17 to 21.2.19 in /sample/angular-host-app\n\n**\u4e00\u53e5\u8bdd\u603b\u7ed3\uff1a** \u5c06 `sample/angular-host-app` \u4f7f\u7528\u7684\u4e00\u7ec4 Angular \u5305\u4ece 21.2.17 \u5347\u7ea7\u5230 21.2.19\uff0c\u4ee5\u4fee\u590d `@angular/compiler` \u548c `@angular/core` \u4e2d\u8bb0\u5f55\u7684 CVE-2026-69151\uff0c\u540c\u65f6\u4fdd\u6301 Angular \u8fd0\u884c\u65f6\u4e0e\u7f16\u8bd1\u5de5\u5177\u94fe\u7248\u672c\u4e00\u81f4\u3002\n\n| \u9879\u76ee | \u5185\u5bb9 |\n|---|---|\n| PR | [782419](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/782419) |\n| \u4f5c\u8005 | Dingmeng Xue |\n| \u72b6\u6001 | Active\uff08\u975e\u8349\u7a3f\uff0c\u5f53\u524d\u5408\u5e76\u72b6\u6001\u4e3a succeeded\uff09 |\n| \u5206\u652f | `dixue/angular-cve-69151` \u2192 `main` |\n| \u53d8\u66f4\u7edf\u8ba1 | 1 \u4e2a\u63d0\u4ea4\uff0c2 \u4e2a\u6587\u4ef6\uff0c\u65b0\u589e 182 \u884c\uff0c\u5220\u9664 70 \u884c |\n\n### \u76ee\u5f55\n\n- [\u95ee\u9898\u80cc\u666f](#\u95ee\u9898\u80cc\u666f)\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u6d4b\u8bd5\u7528\u4f8b\u89e3\u6790](#\u6d4b\u8bd5\u7528\u4f8b\u89e3\u6790)\n\n### \u95ee\u9898\u80cc\u666f\n\n**\u5df2\u786e\u8ba4\u7684\u610f\u56fe\uff1a** PR \u63cf\u8ff0\u548c\u56db\u4e2a\u5173\u8054 Bug \u5de5\u4f5c\u9879\u5171\u540c\u6307\u51fa\uff0c\u793a\u4f8b Angular \u5bbf\u4e3b\u5e94\u7528\u7684\u4f9d\u8d56\u6811\u5305\u542b CVE-2026-69151\u3002\u544a\u8b66\u5206\u522b\u8986\u76d6 `@angular/compiler` \u4e0e `@angular/core`\uff0c\u5e76\u8bb0\u5f55\u4e86\u4f9d\u8d56\u7248\u672c 21.2.7 \u548c 21.2.17\uff1b\u672c PR \u76f4\u63a5\u5904\u7406\u5f53\u524d\u6e05\u5355\u4e2d\u7684 21.2.17\uff0c\u5c06\u76f8\u5173 Angular \u5305\u66f4\u65b0\u5230 21.2.19\u3002PR \u7684\u76ee\u6807\u662f\u7528\u5df2\u4fee\u8865\u7248\u672c\u6d88\u9664\u8fd9\u4e9b\u4f9d\u8d56\u544a\u8b66\uff0c\u800c\u4e0d\u662f\u4fee\u6539\u5e94\u7528\u529f\u80fd\u3002\n\n**\u8865\u5145\u80cc\u666f\uff1a** \u5b89\u5168\u4f9d\u8d56\u66f4\u65b0\u9700\u8981\u53ca\u65f6\u63a8\u8fdb\uff0c\u540c\u65f6\u4ecd\u9700\u7531\u7ef4\u62a4\u8005\u786e\u8ba4\u8865\u4e01\u4e0e\u793a\u4f8b\u5e94\u7528\u7684\u6784\u5efa\u65b9\u5f0f\u517c\u5bb9\u3002\u4e3a\u51cf\u5c11\u6539\u52a8\u8303\u56f4\uff0c\u672c\u6b21\u91c7\u7528\u540c\u4e00 Angular \u6b21\u7248\u672c\u7ebf\u5185\u7684\u8865\u4e01\u5347\u7ea7\uff0c\u53ea\u8c03\u6574\u4f9d\u8d56\u58f0\u660e\u548c\u9501\u5b9a\u7ed3\u679c\u3002\n\n**\u4ece\u4ee3\u7801\u53d8\u66f4\u63a8\u65ad\uff1a** Angular \u5305\u4e4b\u95f4\u5b58\u5728\u4e25\u683c\u6216\u7d27\u5bc6\u7684 peer dependency \u7248\u672c\u5173\u7cfb\uff0c\u56e0\u6b64 PR \u6ca1\u6709\u53ea\u5347\u7ea7\u88ab\u544a\u8b66\u76f4\u63a5\u70b9\u540d\u7684 `compiler` \u548c `core`\uff0c\u800c\u662f\u540c\u6b65\u5347\u7ea7 `common`\u3001`forms`\u3001`platform-browser`\u3001`platform-browser-dynamic`\u3001`router` \u4ee5\u53ca\u7f16\u8bd1\u671f\u7684 `compiler-cli`\u3002\u8fd9\u4f7f\u8fd0\u884c\u65f6\u3001\u6d4f\u89c8\u5668\u96c6\u6210\u3001\u8def\u7531\u3001\u8868\u5355\u548c\u7f16\u8bd1\u5de5\u5177\u7ee7\u7eed\u4f7f\u7528\u540c\u4e00\u8865\u4e01\u7248\u672c\uff1b\u8be5\u4e00\u81f4\u6027\u52a8\u673a\u7531\u9501\u6587\u4ef6\u4e2d\u7684 peer dependency \u53d8\u5316\u652f\u6301\uff0c\u4f46 PR \u63cf\u8ff0\u6ca1\u6709\u9010\u9879\u8bf4\u660e\u3002\n\n## \u53d8\u66f4\u6982\u89c8\n\n### 1. Angular \u76f4\u63a5\u4f9d\u8d56\u7248\u672c\u5bf9\u9f50\n\n- **\u89e3\u51b3\u7684\u95ee\u9898\u90e8\u5206\uff1a** \u79fb\u9664\u5e94\u7528\u6e05\u5355\u4e2d\u5bf9 Angular 21.2.17 \u7684\u76f4\u63a5\u5f15\u7528\uff0c\u5e76\u5c06\u53d7\u5230 CVE \u544a\u8b66\u5f71\u54cd\u7684 `@angular/compiler`\u3001`@angular/core` \u66f4\u65b0\u5230 21.2.19\u3002\n- **\u6838\u5fc3\u7ec4\u4ef6/\u6587\u4ef6\uff1a** [`sample/angular-host-app/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/782419?path=/sample/angular-host-app/package.json&_a=files)\u3002\n- **\u91c7\u7528\u8fd9\u79cd\u65b9\u5f0f\u7684\u539f\u56e0\uff1a** \u5df2\u786e\u8ba4\u7684\u4fee\u590d\u7b56\u7565\u662f\u7a84\u8303\u56f4\u8865\u4e01\u5347\u7ea7\u3002\u8be5\u6587\u4ef6\u628a\u4e03\u4e2a Angular \u8fd0\u884c\u65f6/\u6846\u67b6\u5305\u4ee5\u53ca\u5f00\u53d1\u4f9d\u8d56 `@angular/compiler-cli` \u7edf\u4e00\u4ece `^21.2.17` \u8c03\u6574\u4e3a `^21.2.19`\uff0c\u6ca1\u6709\u6539\u52a8\u5e94\u7528\u6e90\u7801\u3001\u811a\u672c\u6216\u5176\u4ed6\u9876\u5c42\u4f9d\u8d56\u3002\n- **\u8bf7\u6c42\u6216\u6570\u636e\u6d41\uff1a** \u8fd9\u4e2a\u6a21\u5757\u6ca1\u6709\u65b0\u589e\u8fd0\u884c\u65f6\u8bf7\u6c42\u5904\u7406\u94fe\u8def\u3002\u5b89\u88c5\u9636\u6bb5\uff0c\u5305\u7ba1\u7406\u5668\u8bfb\u53d6 `package.json` \u7684\u7248\u672c\u8303\u56f4\u5e76\u89e3\u6790 Angular 21.2.19\uff1b\u6784\u5efa\u9636\u6bb5\uff0c`compiler-cli` \u4e0e `compiler` \u53c2\u4e0e\u6a21\u677f\u548c TypeScript \u7f16\u8bd1\uff1b\u5e94\u7528\u8fd0\u884c\u65f6\u5219\u7531 `core`\u3001`common`\u3001\u8868\u5355\u3001\u8def\u7531\u548c\u6d4f\u89c8\u5668\u5e73\u53f0\u5305\u5171\u540c\u63d0\u4f9b\u73b0\u6709\u529f\u80fd\u3002\n\n### 2. \u53ef\u91cd\u590d\u5b89\u88c5\u7684\u4f9d\u8d56\u6811\u66f4\u65b0\n\n- **\u89e3\u51b3\u7684\u95ee\u9898\u90e8\u5206\uff1a** \u5c06\u6e05\u5355\u4e2d\u7684\u7248\u672c\u5347\u7ea7\u843d\u5b9e\u5230\u53ef\u91cd\u590d\u5b89\u88c5\u7684\u9501\u5b9a\u4f9d\u8d56\u6811\uff0c\u786e\u4fdd\u5b9e\u9645\u5b89\u88c5\u7684\u662f 21.2.19\uff0c\u800c\u4e0d\u53ea\u662f\u6269\u5927\u6216\u6539\u53d8\u7248\u672c\u58f0\u660e\u3002\n- **\u6838\u5fc3\u7ec4\u4ef6/\u6587\u4ef6\uff1a** [`sample/angular-host-app/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/782419?path=/sample/angular-host-app/package-lock.json&_a=files)\u3002\n- **\u91c7\u7528\u8fd9\u79cd\u65b9\u5f0f\u7684\u539f\u56e0\uff1a** `package-lock.json` \u8bb0\u5f55\u7cbe\u786e\u7248\u672c\u3001\u5305\u6e90\u3001\u5b8c\u6574\u6027\u6458\u8981\u3001\u4f9d\u8d56\u5173\u7cfb\u548c\u5e73\u53f0\u5143\u6570\u636e\u3002\u540c\u6b65\u63d0\u4ea4\u9501\u6587\u4ef6\u53ef\u4ee5\u8ba9 CI \u548c\u5f00\u53d1\u73af\u5883\u6309\u76f8\u540c\u89e3\u6790\u7ed3\u679c\u5b89\u88c5\u4f9d\u8d56\uff0c\u5e76\u4f7f Angular \u5305\u4e4b\u95f4\u7684 peer dependency \u6307\u5411 21.2.19\u3002\n- **\u8bf7\u6c42\u6216\u6570\u636e\u6d41\uff1a** `npm` \u5148\u8bfb\u53d6\u9876\u5c42\u6e05\u5355\uff0c\u518d\u6309\u9501\u6587\u4ef6\u53d6\u5f97\u7cbe\u786e\u5305\u7248\u672c\u3002\u89e3\u6790\u540e\u7684\u4f9d\u8d56\u56fe\u5c06 Angular \u7684 `common`\u3001`compiler`\u3001`core`\u3001`forms`\u3001\u6d4f\u89c8\u5668\u5e73\u53f0\u5305\u548c `router` \u56fa\u5b9a\u5230 21.2.19\uff1b`compiler-cli` \u540c\u6b65\u5230 21.2.19\uff0c\u5e76\u5e26\u5165\u5176\u89e3\u6790\u51fa\u7684 Babel \u5b50\u4f9d\u8d56\u66f4\u65b0\u3002\u9501\u6587\u4ef6\u8fd8\u8865\u5145\u4e86\u90e8\u5206\u53ef\u9009\u539f\u751f\u5305\u7684 `libc` \u5e73\u53f0\u6761\u4ef6\uff0c\u8fd9\u4e9b\u5185\u5bb9\u5c5e\u4e8e\u91cd\u65b0\u89e3\u6790\u4f9d\u8d56\u6811\u540e\u7684\u5b89\u88c5\u5143\u6570\u636e\u3002\n\n### 3. \u7f16\u8bd1\u5de5\u5177\u94fe\u7684\u4f20\u9012\u4f9d\u8d56\u5237\u65b0\n\n- **\u89e3\u51b3\u7684\u95ee\u9898\u90e8\u5206\uff1a** \u8ba9\u5347\u7ea7\u540e\u7684 Angular \u7f16\u8bd1\u5668 CLI \u4f7f\u7528\u4e0e\u5176 21.2.19 \u5305\u63cf\u8ff0\u4e00\u81f4\u7684\u4f20\u9012\u4f9d\u8d56\u3002\n- **\u6838\u5fc3\u7ec4\u4ef6/\u6587\u4ef6\uff1a** [`sample/angular-host-app/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/782419?path=/sample/angular-host-app/package-lock.json&_a=files) \u4e2d `@angular/compiler-cli` \u7684\u9501\u5b9a\u6761\u76ee\u53ca\u5176\u5d4c\u5957 Babel \u6761\u76ee\u3002\n- **\u91c7\u7528\u8fd9\u79cd\u65b9\u5f0f\u7684\u539f\u56e0\uff1a** \u8fd9\u662f\u9501\u6587\u4ef6\u6839\u636e\u65b0\u7248 `@angular/compiler-cli` \u4f9d\u8d56\u58f0\u660e\u751f\u6210\u7684\u7ed3\u679c\uff0c\u800c\u4e0d\u662f PR \u5355\u72ec\u58f0\u660e\u7684\u4e00\u9879\u529f\u80fd\u6539\u9020\u3002\u53ef\u89c1\u53d8\u5316\u5305\u62ec\u8be5\u5305\u4f7f\u7528\u7684 `@babel/core` \u4ece 7.29.0 \u66f4\u65b0\u5230 7.29.7\uff0c\u4ee5\u53ca\u76f8\u5e94 helper\u3001parser\u3001types \u548c generator \u6761\u76ee\u7684\u8c03\u6574\u3002\n- **\u8bf7\u6c42\u6216\u6570\u636e\u6d41\uff1a** \u5728\u6784\u5efa\u8fc7\u7a0b\u4e2d\uff0cAngular \u7f16\u8bd1\u5668 CLI \u8c03\u7528\u5176 Babel \u76f8\u5173\u4f20\u9012\u4f9d\u8d56\u5904\u7406\u548c\u751f\u6210\u4ee3\u7801\uff1b\u8fd0\u884c\u65f6\u5e94\u7528\u8bf7\u6c42\u4e0d\u4f1a\u76f4\u63a5\u7ecf\u8fc7\u8fd9\u4e9b\u5305\u3002\u8fd9\u91cc\u63cf\u8ff0\u7684\u662f\u6784\u5efa\u6570\u636e\u6d41\uff0c\u4f9d\u636e\u662f\u9501\u6587\u4ef6\u4e2d\u7684\u4f9d\u8d56\u5d4c\u5957\u5173\u7cfb\u3002\n\n## \u6d4b\u8bd5\u7528\u4f8b\u89e3\u6790\n\n\u672c PR **\u6ca1\u6709\u4fee\u6539\u6216\u65b0\u589e\u4efb\u4f55\u6d4b\u8bd5\u6587\u4ef6\uff0c\u56e0\u6b64\u6ca1\u6709\u53ef\u9010\u9879\u679a\u4e3e\u7684 changed test case**\u3002\n\nPR \u63cf\u8ff0\u63d0\u4f9b\u4e86\u4ee5\u4e0b\u9a8c\u8bc1\u8bb0\u5f55\uff0c\u4f46\u5b83\u4eec\u4e0d\u662f\u672c\u6b21\u53d8\u66f4\u4e2d\u7684\u6d4b\u8bd5\u7528\u4f8b\uff1a\n\n1. **\u4f9d\u8d56\u7248\u672c\u68c0\u67e5**\n - **\u573a\u666f\uff1a** \u786e\u8ba4\u5b89\u88c5\u89e3\u6790\u7ed3\u679c\u5305\u542b\u76ee\u6807\u8865\u4e01\u7248\u672c\u3002\n - **\u8f93\u5165/\u8bbe\u7f6e\uff1a** \u5728 `sample/angular-host-app` \u7684\u4f9d\u8d56\u73af\u5883\u4e2d\u8fd0\u884c `npm ls`\uff0c\u68c0\u67e5 `@angular/compiler`\u3001`@angular/core` \u548c `@angular/compiler-cli`\u3002\n - **\u53ef\u89c2\u5bdf\u7684\u6210\u529f\u6761\u4ef6\uff1a** \u4e09\u4e2a\u5305\u5747\u89e3\u6790\u4e3a 21.2.19\u3002\n - **\u8bf4\u660e\u7684\u884c\u4e3a\uff1a** \u9876\u5c42\u4f9d\u8d56\u58f0\u660e\u4e0e\u9501\u6587\u4ef6\u5171\u540c\u4f7f\u88ab\u544a\u8b66\u7684\u8fd0\u884c\u65f6\u5305\u53ca\u914d\u5957\u7f16\u8bd1 CLI \u843d\u5230\u76ee\u6807\u7248\u672c\u3002\n\n2. **\u5e94\u7528\u6784\u5efa\u9a8c\u8bc1**\n - **\u573a\u666f\uff1a** \u786e\u8ba4\u5347\u7ea7\u540e\u7684 Angular \u4f9d\u8d56\u6811\u4ecd\u53ef\u7f16\u8bd1\u8be5\u793a\u4f8b\u5e94\u7528\u3002\n - **\u8f93\u5165/\u8bbe\u7f6e\uff1a** \u8fd0\u884c\u73b0\u6709\u7684 `npm run build`\uff1bPR \u6570\u636e\u5305\u672a\u63d0\u4f9b\u989d\u5916 fixture\u3001mock \u6216\u65ad\u8a00\u7ec6\u8282\u3002\n - **\u53ef\u89c2\u5bdf\u7684\u6210\u529f\u6761\u4ef6\uff1a** \u6784\u5efa\u547d\u4ee4\u6210\u529f\u5b8c\u6210\u3002\n - **\u8bf4\u660e\u7684\u884c\u4e3a\uff1a** Angular 21.2.19 \u7684\u8fd0\u884c\u65f6\u5305\u3001\u7f16\u8bd1\u5668\u4e0e\u73b0\u6709\u5e94\u7528\u6e90\u7801\u80fd\u591f\u5b8c\u6210\u65e2\u6709\u6784\u5efa\u6d41\u7a0b\u3002\n\n3. **\u73b0\u6709\u6d4f\u89c8\u5668\u6d4b\u8bd5\u547d\u4ee4**\n - **\u573a\u666f\uff1a** \u5c1d\u8bd5\u4ee5\u65e0\u76d1\u89c6\u3001Chrome Headless \u6a21\u5f0f\u8fd0\u884c\u73b0\u6709\u6d4b\u8bd5\u3002\n - **\u8f93\u5165/\u8bbe\u7f6e\uff1a** `npm test -- --watch=false --browsers=ChromeHeadless`\u3002\n - **\u53ef\u89c2\u5bdf\u7ed3\u679c\uff1a** \u8be5\u547d\u4ee4\u4ecd\u88ab\u5df2\u6709\u4ee3\u7801\u5bf9\u5df2\u79fb\u9664 Angular \u6d4b\u8bd5 API \u7684\u5bfc\u5165\u6240\u963b\u585e\uff0c\u672a\u5f62\u6210\u901a\u8fc7\u7ed3\u679c\u3002\n - **\u8bf4\u660e\u7684\u884c\u4e3a\uff1a** \u53ef\u7528\u8bc1\u636e\u53ea\u8868\u660e\u8fd9\u662f\u5347\u7ea7\u524d\u5df2\u5b58\u5728\u7684\u6d4b\u8bd5\u542f\u52a8\u963b\u585e\uff1b\u6570\u636e\u5305\u6ca1\u6709\u63d0\u4f9b\u5177\u4f53\u53d7\u5f71\u54cd\u6d4b\u8bd5\u540d\u79f0\u3001fixture\u3001mock\u3001\u65ad\u8a00\u6216\u672c PR \u5bf9\u6d4b\u8bd5\u4ee3\u7801\u7684\u6539\u52a8\uff0c\u56e0\u6b64\u4e0d\u80fd\u636e\u6b64\u63a8\u65ad\u66f4\u591a\u6d4b\u8bd5\u8986\u76d6\u3002\n", "creation_timestamp": "2026-09-18T16:20:44.250594Z"} https://vulnerability.circl.lu/sighting/4373b950-7ce8-401d-9488-fb55036ec221/export Fri, 18 Sep 2026 16:20:44 +0000 https://vulnerability.circl.lu/sighting/dc7bbf90-5633-48b9-85b5-1eb218062f44/export {"uuid": "dc7bbf90-5633-48b9-85b5-1eb218062f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69414", "type": "seen", "source": "https://t.me/VulnerabilityNews/44009", "content": "Microsoft working on Defender patch for ShieldBreak zero-day\n\nMicrosoft is working on a security patch for the \"ShieldBreak\" zero-day vulnerability disclosed last week by security researcher \"Nightmare Eclipse\" and now tracked as CVE-2026-69414. [...]\nhttps://www.bleepingcomputer.com/news/security/microsoft-working-on-defender-patch-for-shieldbreak-zero-day/", "creation_timestamp": "2026-09-18T12:00:07.615095Z"} {"uuid": "dc7bbf90-5633-48b9-85b5-1eb218062f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69414", "type": "seen", "source": "https://t.me/VulnerabilityNews/44009", "content": "Microsoft working on Defender patch for ShieldBreak zero-day\n\nMicrosoft is working on a security patch for the \"ShieldBreak\" zero-day vulnerability disclosed last week by security researcher \"Nightmare Eclipse\" and now tracked as CVE-2026-69414. [...]\nhttps://www.bleepingcomputer.com/news/security/microsoft-working-on-defender-patch-for-shieldbreak-zero-day/", "creation_timestamp": "2026-09-18T12:00:07.615095Z"} https://vulnerability.circl.lu/sighting/dc7bbf90-5633-48b9-85b5-1eb218062f44/export Fri, 18 Sep 2026 12:00:07 +0000 https://vulnerability.circl.lu/sighting/1579d9ae-1b33-4451-b71f-1d5ad52cf22b/export {"uuid": "1579d9ae-1b33-4451-b71f-1d5ad52cf22b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69730", "type": "seen", "source": "https://t.me/xhqcankao/31991", "content": "\u5fae\u8f6f\u53f2\u4e0a\u6700\u5927\u53f7\u5468\u4e8c\u8865\u4e01\u65e5 \u5171\u8ba1\u4fee\u590d974\u4e2a\u6f0f\u6d1e\n\n\u5fae\u8f6f\u4e5d\u6708\u7684\u8865\u4e01\u661f\u671f\u4e8c\u4fee\u590d\u4e86\u81f3\u5c11 974\u4e2a\u5b89\u5168\u6f0f\u6d1e\uff0c\u53f2\u4e0a\u6700\u5927\u7684\u4e00\u6279\u3002\u4e4b\u524d\u7eaa\u5f55\u662f\u4eca\u5e74\u4e03\u6708\u7684570\u4e2a\u2014\u2014\u8fd9\u6b21\u8fd1\u4e4e\u7ffb\u500d\u3002\u5176\u4e2d113\u4e2a\u662f\u4e25\u91cd\u7ea7\u522b\uff0c\u610f\u5473\u7740\u653b\u51fb\u8005\u5728\u6ca1\u6709\u7528\u6237\u4ea4\u4e92\u7684\u60c5\u51b5\u4e0b\u53ef\u80fd\u8fdc\u7a0b\u63a5\u7ba1\u7cfb\u7edf\u30022 \u4e2a\u96f6\u65e5\u6f0f\u6d1e\u6b63\u5728\u88ab\u79ef\u6781\u5229\u7528\uff0c\u90fd\u662f Windows \u672c\u5730\u6743\u9650\u63d0\u5347\u3002\u53e6\u5916\u6709\u4e24\u4e2a\u4e25\u91cd\u6f0f\u6d1e\u503c\u5f97\u5173\u6ce8\uff1a\n\nCVE-2026-69730\u662fWindows Server 2012\u4ee5\u4e0a\u53ca Windows 10 \u7684 DNS \u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u65e0\u9700\u8ba4\u8bc1\uff0c\u53d1\u4e00\u4e2a\u6784\u9020\u8fc7\u7684\u6570\u636e\u5305\u5c31\u80fd\u6267\u884c\u8fdc\u7a0b\u4ee3\u7801\u3002\u5fae\u8f6f\u81ea\u5df1\u6807\u6ce8\u4e86\u5f88\u53ef\u80fd\u88ab\u5229\u7528\u3002\nCVE-2026-69829\u662fWindows Shell \u7684\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\uff0cCVSS 9.8\u2014\u2014\u653b\u51fb\u590d\u6742\u5ea6\u4f4e\u3001\u4e0d\u9700\u8981\u6743\u9650\u3001\u4e0d\u9700\u8981\u7528\u6237\u4ea4\u4e92\u3002\n\n\u2014\u2014 oschina.net\u3001krebsonsecurity", "creation_timestamp": "2026-09-18T08:00:07.413029Z"} {"uuid": "1579d9ae-1b33-4451-b71f-1d5ad52cf22b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69730", "type": "seen", "source": "https://t.me/xhqcankao/31991", "content": "\u5fae\u8f6f\u53f2\u4e0a\u6700\u5927\u53f7\u5468\u4e8c\u8865\u4e01\u65e5 \u5171\u8ba1\u4fee\u590d974\u4e2a\u6f0f\u6d1e\n\n\u5fae\u8f6f\u4e5d\u6708\u7684\u8865\u4e01\u661f\u671f\u4e8c\u4fee\u590d\u4e86\u81f3\u5c11 974\u4e2a\u5b89\u5168\u6f0f\u6d1e\uff0c\u53f2\u4e0a\u6700\u5927\u7684\u4e00\u6279\u3002\u4e4b\u524d\u7eaa\u5f55\u662f\u4eca\u5e74\u4e03\u6708\u7684570\u4e2a\u2014\u2014\u8fd9\u6b21\u8fd1\u4e4e\u7ffb\u500d\u3002\u5176\u4e2d113\u4e2a\u662f\u4e25\u91cd\u7ea7\u522b\uff0c\u610f\u5473\u7740\u653b\u51fb\u8005\u5728\u6ca1\u6709\u7528\u6237\u4ea4\u4e92\u7684\u60c5\u51b5\u4e0b\u53ef\u80fd\u8fdc\u7a0b\u63a5\u7ba1\u7cfb\u7edf\u30022 \u4e2a\u96f6\u65e5\u6f0f\u6d1e\u6b63\u5728\u88ab\u79ef\u6781\u5229\u7528\uff0c\u90fd\u662f Windows \u672c\u5730\u6743\u9650\u63d0\u5347\u3002\u53e6\u5916\u6709\u4e24\u4e2a\u4e25\u91cd\u6f0f\u6d1e\u503c\u5f97\u5173\u6ce8\uff1a\n\nCVE-2026-69730\u662fWindows Server 2012\u4ee5\u4e0a\u53ca Windows 10 \u7684 DNS \u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u65e0\u9700\u8ba4\u8bc1\uff0c\u53d1\u4e00\u4e2a\u6784\u9020\u8fc7\u7684\u6570\u636e\u5305\u5c31\u80fd\u6267\u884c\u8fdc\u7a0b\u4ee3\u7801\u3002\u5fae\u8f6f\u81ea\u5df1\u6807\u6ce8\u4e86\u5f88\u53ef\u80fd\u88ab\u5229\u7528\u3002\nCVE-2026-69829\u662fWindows Shell \u7684\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\uff0cCVSS 9.8\u2014\u2014\u653b\u51fb\u590d\u6742\u5ea6\u4f4e\u3001\u4e0d\u9700\u8981\u6743\u9650\u3001\u4e0d\u9700\u8981\u7528\u6237\u4ea4\u4e92\u3002\n\n\u2014\u2014 oschina.net\u3001krebsonsecurity", "creation_timestamp": "2026-09-18T08:00:07.413029Z"} https://vulnerability.circl.lu/sighting/1579d9ae-1b33-4451-b71f-1d5ad52cf22b/export Fri, 18 Sep 2026 08:00:07 +0000 https://vulnerability.circl.lu/sighting/103faf24-01ed-48bb-989a-d0ddb3ca23d1/export {"uuid": "103faf24-01ed-48bb-989a-d0ddb3ca23d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69829", "type": "seen", "source": "https://t.me/xhqcankao/31991", "content": "\u5fae\u8f6f\u53f2\u4e0a\u6700\u5927\u53f7\u5468\u4e8c\u8865\u4e01\u65e5 \u5171\u8ba1\u4fee\u590d974\u4e2a\u6f0f\u6d1e\n\n\u5fae\u8f6f\u4e5d\u6708\u7684\u8865\u4e01\u661f\u671f\u4e8c\u4fee\u590d\u4e86\u81f3\u5c11 974\u4e2a\u5b89\u5168\u6f0f\u6d1e\uff0c\u53f2\u4e0a\u6700\u5927\u7684\u4e00\u6279\u3002\u4e4b\u524d\u7eaa\u5f55\u662f\u4eca\u5e74\u4e03\u6708\u7684570\u4e2a\u2014\u2014\u8fd9\u6b21\u8fd1\u4e4e\u7ffb\u500d\u3002\u5176\u4e2d113\u4e2a\u662f\u4e25\u91cd\u7ea7\u522b\uff0c\u610f\u5473\u7740\u653b\u51fb\u8005\u5728\u6ca1\u6709\u7528\u6237\u4ea4\u4e92\u7684\u60c5\u51b5\u4e0b\u53ef\u80fd\u8fdc\u7a0b\u63a5\u7ba1\u7cfb\u7edf\u30022 \u4e2a\u96f6\u65e5\u6f0f\u6d1e\u6b63\u5728\u88ab\u79ef\u6781\u5229\u7528\uff0c\u90fd\u662f Windows \u672c\u5730\u6743\u9650\u63d0\u5347\u3002\u53e6\u5916\u6709\u4e24\u4e2a\u4e25\u91cd\u6f0f\u6d1e\u503c\u5f97\u5173\u6ce8\uff1a\n\nCVE-2026-69730\u662fWindows Server 2012\u4ee5\u4e0a\u53ca Windows 10 \u7684 DNS \u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u65e0\u9700\u8ba4\u8bc1\uff0c\u53d1\u4e00\u4e2a\u6784\u9020\u8fc7\u7684\u6570\u636e\u5305\u5c31\u80fd\u6267\u884c\u8fdc\u7a0b\u4ee3\u7801\u3002\u5fae\u8f6f\u81ea\u5df1\u6807\u6ce8\u4e86\u5f88\u53ef\u80fd\u88ab\u5229\u7528\u3002\nCVE-2026-69829\u662fWindows Shell \u7684\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\uff0cCVSS 9.8\u2014\u2014\u653b\u51fb\u590d\u6742\u5ea6\u4f4e\u3001\u4e0d\u9700\u8981\u6743\u9650\u3001\u4e0d\u9700\u8981\u7528\u6237\u4ea4\u4e92\u3002\n\n\u2014\u2014 oschina.net\u3001krebsonsecurity", "creation_timestamp": "2026-09-18T08:00:07.354522Z"} {"uuid": "103faf24-01ed-48bb-989a-d0ddb3ca23d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69829", "type": "seen", "source": "https://t.me/xhqcankao/31991", "content": "\u5fae\u8f6f\u53f2\u4e0a\u6700\u5927\u53f7\u5468\u4e8c\u8865\u4e01\u65e5 \u5171\u8ba1\u4fee\u590d974\u4e2a\u6f0f\u6d1e\n\n\u5fae\u8f6f\u4e5d\u6708\u7684\u8865\u4e01\u661f\u671f\u4e8c\u4fee\u590d\u4e86\u81f3\u5c11 974\u4e2a\u5b89\u5168\u6f0f\u6d1e\uff0c\u53f2\u4e0a\u6700\u5927\u7684\u4e00\u6279\u3002\u4e4b\u524d\u7eaa\u5f55\u662f\u4eca\u5e74\u4e03\u6708\u7684570\u4e2a\u2014\u2014\u8fd9\u6b21\u8fd1\u4e4e\u7ffb\u500d\u3002\u5176\u4e2d113\u4e2a\u662f\u4e25\u91cd\u7ea7\u522b\uff0c\u610f\u5473\u7740\u653b\u51fb\u8005\u5728\u6ca1\u6709\u7528\u6237\u4ea4\u4e92\u7684\u60c5\u51b5\u4e0b\u53ef\u80fd\u8fdc\u7a0b\u63a5\u7ba1\u7cfb\u7edf\u30022 \u4e2a\u96f6\u65e5\u6f0f\u6d1e\u6b63\u5728\u88ab\u79ef\u6781\u5229\u7528\uff0c\u90fd\u662f Windows \u672c\u5730\u6743\u9650\u63d0\u5347\u3002\u53e6\u5916\u6709\u4e24\u4e2a\u4e25\u91cd\u6f0f\u6d1e\u503c\u5f97\u5173\u6ce8\uff1a\n\nCVE-2026-69730\u662fWindows Server 2012\u4ee5\u4e0a\u53ca Windows 10 \u7684 DNS \u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u65e0\u9700\u8ba4\u8bc1\uff0c\u53d1\u4e00\u4e2a\u6784\u9020\u8fc7\u7684\u6570\u636e\u5305\u5c31\u80fd\u6267\u884c\u8fdc\u7a0b\u4ee3\u7801\u3002\u5fae\u8f6f\u81ea\u5df1\u6807\u6ce8\u4e86\u5f88\u53ef\u80fd\u88ab\u5229\u7528\u3002\nCVE-2026-69829\u662fWindows Shell \u7684\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\uff0cCVSS 9.8\u2014\u2014\u653b\u51fb\u590d\u6742\u5ea6\u4f4e\u3001\u4e0d\u9700\u8981\u6743\u9650\u3001\u4e0d\u9700\u8981\u7528\u6237\u4ea4\u4e92\u3002\n\n\u2014\u2014 oschina.net\u3001krebsonsecurity", "creation_timestamp": "2026-09-18T08:00:07.354522Z"} https://vulnerability.circl.lu/sighting/103faf24-01ed-48bb-989a-d0ddb3ca23d1/export Fri, 18 Sep 2026 08:00:07 +0000 https://vulnerability.circl.lu/sighting/2dc12bf1-7d81-476f-bd4b-c15320cd5d5b/export {"uuid": "2dc12bf1-7d81-476f-bd4b-c15320cd5d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6973", "type": "seen", "source": "https://t.me/VulnerabilityNews/42396", "content": "Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks\n\nCVE-2026-6973 is a high-severity vulnerability that allows an attacker who has admin privileges to execute arbitrary code.\nThe post Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek.\nhttps://www.securityweek.com/ivanti-patches-epmm-zero-day-exploited-in-targeted-attacks/", "creation_timestamp": "2026-09-18T05:00:07.998949Z"} {"uuid": "2dc12bf1-7d81-476f-bd4b-c15320cd5d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6973", "type": "seen", "source": "https://t.me/VulnerabilityNews/42396", "content": "Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks\n\nCVE-2026-6973 is a high-severity vulnerability that allows an attacker who has admin privileges to execute arbitrary code.\nThe post Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek.\nhttps://www.securityweek.com/ivanti-patches-epmm-zero-day-exploited-in-targeted-attacks/", "creation_timestamp": "2026-09-18T05:00:07.998949Z"} https://vulnerability.circl.lu/sighting/2dc12bf1-7d81-476f-bd4b-c15320cd5d5b/export Fri, 18 Sep 2026 05:00:07 +0000 https://vulnerability.circl.lu/sighting/cc65a738-3e77-482e-9e46-7f8cf3f758ba/export {"uuid": "cc65a738-3e77-482e-9e46-7f8cf3f758ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69843", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr6gj3wcs2g", "content": "CVE-2026-69843 - microsoft fabric\nMicrosoft Fabric can be tricked into accepting false credentials, allowing someone without permission to act as a more privileged user on the network. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoftfabric #microsoft #CVE #infosec", "creation_timestamp": "2026-09-18T03:00:06.469720Z"} {"uuid": "cc65a738-3e77-482e-9e46-7f8cf3f758ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69843", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr6gj3wcs2g", "content": "CVE-2026-69843 - microsoft fabric\nMicrosoft Fabric can be tricked into accepting false credentials, allowing someone without permission to act as a more privileged user on the network. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoftfabric #microsoft #CVE #infosec", "creation_timestamp": "2026-09-18T03:00:06.469720Z"} https://vulnerability.circl.lu/sighting/cc65a738-3e77-482e-9e46-7f8cf3f758ba/export Fri, 18 Sep 2026 03:00:06 +0000 https://vulnerability.circl.lu/sighting/2c2dc6cc-7786-4746-a54f-3d195a417092/export {"uuid": "2c2dc6cc-7786-4746-a54f-3d195a417092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69399", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr46yn6zh2r", "content": "CVE-2026-69399 - azure arc\nThe Azure Arc service could be tricked into giving a user more access than intended. This could allow an attacker to control or change settings in your connected systems.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#azurearc #microsoft #CVE #infosec", "creation_timestamp": "2026-09-18T02:20:06.833097Z"} {"uuid": "2c2dc6cc-7786-4746-a54f-3d195a417092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69399", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr46yn6zh2r", "content": "CVE-2026-69399 - azure arc\nThe Azure Arc service could be tricked into giving a user more access than intended. This could allow an attacker to control or change settings in your connected systems.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#azurearc #microsoft #CVE #infosec", "creation_timestamp": "2026-09-18T02:20:06.833097Z"} https://vulnerability.circl.lu/sighting/2c2dc6cc-7786-4746-a54f-3d195a417092/export Fri, 18 Sep 2026 02:20:06 +0000 https://vulnerability.circl.lu/sighting/4a2dedef-311c-4359-ab57-c23822c39943/export {"uuid": "4a2dedef-311c-4359-ab57-c23822c39943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69865", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr3n5jrln2t", "content": "CVE-2026-69865 - azure container registry\nThe Azure Container Registry service can be tricked into granting more access than intended. An attacker who can send specially crafted requests could increase their\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-09-18T02:10:08.008118Z"} {"uuid": "4a2dedef-311c-4359-ab57-c23822c39943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69865", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr3n5jrln2t", "content": "CVE-2026-69865 - azure container registry\nThe Azure Container Registry service can be tricked into granting more access than intended. An attacker who can send specially crafted requests could increase their\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-09-18T02:10:08.008118Z"} https://vulnerability.circl.lu/sighting/4a2dedef-311c-4359-ab57-c23822c39943/export Fri, 18 Sep 2026 02:10:08 +0000 https://vulnerability.circl.lu/sighting/c9164428-f82a-40b0-a1c1-d14d9a39743c/export {"uuid": "c9164428-f82a-40b0-a1c1-d14d9a39743c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69843", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvr3kkqcpg2c", "content": "\ud83d\udea8 CVE-2026-69843 \u2014 CVSS 10 CRITICAL\n\nAuthentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-69843\n\n#CVE #PotatoSecurity #InfoSec", "creation_timestamp": "2026-09-18T02:08:41.308315Z"} {"uuid": "c9164428-f82a-40b0-a1c1-d14d9a39743c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69843", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvr3kkqcpg2c", "content": "\ud83d\udea8 CVE-2026-69843 \u2014 CVSS 10 CRITICAL\n\nAuthentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-69843\n\n#CVE #PotatoSecurity #InfoSec", "creation_timestamp": "2026-09-18T02:08:41.308315Z"} https://vulnerability.circl.lu/sighting/c9164428-f82a-40b0-a1c1-d14d9a39743c/export Fri, 18 Sep 2026 02:08:41 +0000 https://vulnerability.circl.lu/sighting/8fff650c-9684-4a4a-a905-3e392d703fa4/export {"uuid": "8fff650c-9684-4a4a-a905-3e392d703fa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69843", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvr3kkcflz2y", "content": "\ud83d\udea8 CVE-2026-69843 \u2014 CVSS 10 CRITICAL\n\nAuthentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-69843\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T02:08:40.665230Z"} {"uuid": "8fff650c-9684-4a4a-a905-3e392d703fa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69843", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvr3kkcflz2y", "content": "\ud83d\udea8 CVE-2026-69843 \u2014 CVSS 10 CRITICAL\n\nAuthentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-69843\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T02:08:40.665230Z"} https://vulnerability.circl.lu/sighting/8fff650c-9684-4a4a-a905-3e392d703fa4/export Fri, 18 Sep 2026 02:08:40 +0000