SecLens 情报中心

{
  "affected_vendor": "宏碁",
  "cnnvd_code": "CNNVD-202606-1362",
  "create_time": "2026-06-05",
  "cve_code": "CVE-2026-49188",
  "detailed_publish_time": "2026-06-04 00:00:00",
  "detailed_update_time": "2026-06-05 00:00:00",
  "hazard_level": 1,
  "is_official": 1,
  "publish_time": "2026-06-04",
  "refer_url": "来源:community.acer.com\r\n链接:https://community.acer.com/en/kb/articles/19707",
  "update_time": "2026-06-05",
  "vendor": "1000284",
  "vul_desc": "Acer M6E是中国台湾宏碁（Acer）公司的一款便携式5G移动热点设备。\r\nAcer M6E存在安全漏洞，该漏洞源于ai_cmd工具以完全root权限执行，并将套接字输入直接传递给popen，可能导致未经身份验证的用户执行任意root命令。",
  "vul_type": "0",
  "vul_type_name": "其他"
}

{
  "affected_vendor": "宏碁",
  "cnnvd_code": "CNNVD-202606-1363",
  "create_time": "2026-06-05",
  "cve_code": "CVE-2026-49187",
  "detailed_publish_time": "2026-06-04 00:00:00",
  "detailed_update_time": "2026-06-05 00:00:00",
  "hazard_level": 2,
  "is_official": 1,
  "publish_time": "2026-06-04",
  "refer_url": "来源:community.acer.com\r\n链接:https://community.acer.com/en/kb/articles/19707",
  "update_time": "2026-06-05",
  "vendor": "1000284",
  "vul_desc": "Acer M6E是中国台湾宏碁（Acer）公司的一款便携式5G移动热点设备。\r\nAcer M6E存在安全漏洞，该漏洞源于APK资源文件硬编码的APK资源文件永不过期且共享凭证，可能导致信息泄露和潜在滥用。",
  "vul_type": "0",
  "vul_type_name": "其他"
}

{
  "affected_vendor": "宏碁",
  "cnnvd_code": "CNNVD-202606-1364",
  "create_time": "2026-06-05",
  "cve_code": "CVE-2026-49185",
  "detailed_publish_time": "2026-06-04 00:00:00",
  "detailed_update_time": "2026-06-05 00:00:00",
  "hazard_level": 1,
  "is_official": 1,
  "publish_time": "2026-06-04",
  "refer_url": "来源:community.acer.com\r\n链接:https://community.acer.com/en/kb/articles/19707",
  "update_time": "2026-06-05",
  "vendor": "1000284",
  "vul_desc": "Acer M6E是中国台湾宏碁（Acer）公司的一款便携式5G移动热点设备。\r\nAcer M6E存在安全漏洞，该漏洞源于FieldX MDM adb messaging topic将未经验证的有效载荷直接传递给Runtime.exec，可能导致命令注入。",
  "vul_type": "0",
  "vul_type_name": "其他"
}

{
  "affected_vendor": "宏碁",
  "cnnvd_code": "CNNVD-202606-1365",
  "create_time": "2026-06-05",
  "cve_code": "CVE-2026-49186",
  "detailed_publish_time": "2026-06-04 00:00:00",
  "detailed_update_time": "2026-06-05 00:00:00",
  "hazard_level": 1,
  "is_official": 1,
  "publish_time": "2026-06-04",
  "refer_url": "来源:community.acer.com\r\n链接:https://community.acer.com/en/kb/articles/19707",
  "update_time": "2026-06-05",
  "vendor": "1000284",
  "vul_desc": "Acer M6E是中国台湾宏碁（Acer）公司的一款便携式5G移动热点设备。\r\nAcer M6E存在安全漏洞，该漏洞源于本地MQTT Broker未强制实施主题级访问控制列表，可能导致任何客户端使用通配符订阅以枚举隐藏网络设备或发布恶意控制命令。",
  "vul_type": "0",
  "vul_type_name": "其他"
}

{
  "affected_vendor": "OpenStack",
  "cnnvd_code": "CNNVD-202606-1366",
  "create_time": "2026-06-05",
  "cve_code": "CVE-2026-44917",
  "detailed_publish_time": "2026-06-04 00:00:00",
  "detailed_update_time": "2026-06-05 00:00:00",
  "hazard_level": 0,
  "is_official": 1,
  "publish_time": "2026-06-04",
  "refer_url": "来源:bugs.launchpad.net\r\n链接:https://bugs.launchpad.net/ironic/+bug/2148319\r\n\r\n来源:www.openwall.com\r\n链接:https://www.openwall.com/lists/oss-security/2026/06/03/13\r\n\r\n来源:www.openwall.com\r\n链接:http://www.openwall.com/lists/oss-security/2026/06/03/13",
  "update_time": "2026-06-05",
  "vendor": "1010418",
  "vul_desc": "OpenStack Ironic是OpenStack开源的一个集成的 OpenStack 程序。用于配置裸机而不是虚拟机。\r\nOpenStack Ironic 35.0.2之前版本存在安全漏洞，该漏洞源于允许恶意认证的项目管理员或经理通过pxe_template读取Ironic conductor上的本地文件。",
  "vul_type": "0",
  "vul_type_name": "其他"
}

{
  "affected_vendor": "OpenStack",
  "cnnvd_code": "CNNVD-202606-1367",
  "create_time": "2026-06-05",
  "cve_code": "CVE-2026-48681",
  "detailed_publish_time": "2026-06-04 00:00:00",
  "detailed_update_time": "2026-06-05 00:00:00",
  "hazard_level": 2,
  "is_official": 1,
  "publish_time": "2026-06-04",
  "refer_url": "来源:bugs.launchpad.net\r\n链接:https://bugs.launchpad.net/ironic/+bug/2148333\r\n\r\n来源:www.openwall.com\r\n链接:https://www.openwall.com/lists/oss-security/2026/06/03/12\r\n\r\n来源:www.openwall.com\r\n链接:http://www.openwall.com/lists/oss-security/2026/06/03/12",
  "update_time": "2026-06-05",
  "vendor": "1010418",
  "vul_desc": "OpenStack Ironic是OpenStack开源的一个集成的 OpenStack 程序。用于配置裸机而不是虚拟机。\r\nOpenStack Ironic 35.0.2之前版本存在安全漏洞，该漏洞源于在部署过程中使用特制ISO镜像时，通过目录遍历允许文件覆盖。",
  "vul_type": "0",
  "vul_type_name": "其他"
}

{
  "affected_vendor": "宏碁",
  "cnnvd_code": "CNNVD-202606-1368",
  "create_time": "2026-06-05",
  "cve_code": "CVE-2026-49191",
  "detailed_publish_time": "2026-06-04 00:00:00",
  "detailed_update_time": "2026-06-05 00:00:00",
  "hazard_level": 1,
  "is_official": 1,
  "publish_time": "2026-06-04",
  "refer_url": "来源:community.acer.com\r\n链接:https://community.acer.com/en/kb/articles/19707",
  "update_time": "2026-06-05",
  "vendor": "1000284",
  "vul_desc": "Acer M6E是中国台湾宏碁（Acer）公司的一款便携式5G移动热点设备。\r\nAcer M6E存在安全漏洞，该漏洞源于M3WebServer生产构建硬编码后端API密钥，可能通过详细的错误处理页面被轻易拦截。",
  "vul_type": "0",
  "vul_type_name": "其他"
}

{
  "affected_vendor": "云原生计算基金会",
  "cnnvd_code": "CNNVD-202606-1369",
  "create_time": "2026-06-05",
  "cve_code": "CVE-2026-41010",
  "detailed_publish_time": "2026-06-04 00:00:00",
  "detailed_update_time": "2026-06-05 00:00:00",
  "hazard_level": 0,
  "is_official": 0,
  "publish_time": "2026-06-04",
  "refer_url": "来源:www.cloudfoundry.org\r\n链接:https://www.cloudfoundry.org/blog/cve-2026-41010-release-job-name-command-injection-on-bosh-director/",
  "update_time": "2026-06-05",
  "vendor": "1002667",
  "vul_desc": "Cloud Foundry BOSH Director是美国Cloud Foundry公司的一个云基础设施部署与生命周期管理平台。\r\nCloud Foundry BOSH Director所有版本及之前版本存在安全漏洞，该漏洞源于ReleaseJob#unpack方法中name参数未经清理直接用于shell命令，可能导致命令注入。",
  "vul_type": "0",
  "vul_type_name": "其他"
}