SecLens 情报中心

威胁情报

针对攻击活动、样本与IOC的持续情报更新。

Fortinet FortiSandbox OS Command Injection Vulnerability

发布时间 2026-07-16 08:00 (UTC+08:00) 抓取时间 2026-07-21 19:05 (UTC+08:00)

Fortinet | FortiSandbox | https://fortiguard.fortinet.com/psirt/FG-IR-26-100 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/…
扩展字段
```
{
  "cve_id": "CVE-2026-39808",
  "due_date": "2026-07-19T00:00:00+00:00",
  "known_ransomware_campaign_use": "Unknown",
  "product": "FortiSandbox",
  "raw_date_added": "2026-07-16",
  "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "vendor_project": "Fortinet"
}
```
CISA KEV Catalog catalog:kev ransomware:unknown source:cisa type:vulnerability known-exploited vulnerability
Fortinet FortiSandbox OS Command Injection Vulnerability

发布时间 2026-07-16 08:00 (UTC+08:00) 抓取时间 2026-07-21 19:05 (UTC+08:00)

Fortinet | FortiSandbox | https://fortiguard.fortinet.com/psirt/FG-IR-26-141 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/…
扩展字段
```
{
  "cve_id": "CVE-2026-25089",
  "due_date": "2026-07-19T00:00:00+00:00",
  "known_ransomware_campaign_use": "Unknown",
  "product": "FortiSandbox",
  "raw_date_added": "2026-07-16",
  "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "vendor_project": "Fortinet"
}
```
CISA KEV Catalog catalog:kev ransomware:unknown source:cisa type:vulnerability known-exploited vulnerability
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

发布时间 2026-07-16 08:00 (UTC+08:00) 抓取时间 2026-07-21 19:05 (UTC+08:00)

Microsoft | SharePoint | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; http…
扩展字段
```
{
  "cve_id": "CVE-2026-58644",
  "due_date": "2026-07-19T00:00:00+00:00",
  "known_ransomware_campaign_use": "Unknown",
  "product": "SharePoint",
  "raw_date_added": "2026-07-16",
  "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "vendor_project": "Microsoft"
}
```
CISA KEV Catalog catalog:kev ransomware:unknown source:cisa type:vulnerability known-exploited vulnerability
KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability

发布时间 2026-07-15 08:00 (UTC+08:00) 抓取时间 2026-07-21 19:05 (UTC+08:00)

KNX Association | KNX Protocol Connection Authorization Option 1 | https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-01 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizin…
扩展字段
```
{
  "cve_id": "CVE-2023-4346",
  "due_date": "2026-07-29T00:00:00+00:00",
  "known_ransomware_campaign_use": "Unknown",
  "product": "KNX Protocol Connection Authorization Option 1",
  "raw_date_added": "2026-07-15",
  "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "vendor_project": "KNX Association"
}
```
CISA KEV Catalog catalog:kev ransomware:unknown source:cisa type:vulnerability known-exploited vulnerability
Oracle E-Business Suite Improper Privilege Management Vulnerability

发布时间 2026-07-15 08:00 (UTC+08:00) 抓取时间 2026-07-21 19:05 (UTC+08:00)

Oracle | E-Business Suite | https://www.oracle.com/security-alerts/cspumay2026.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.ni…
扩展字段
```
{
  "cve_id": "CVE-2026-46817",
  "due_date": "2026-07-18T00:00:00+00:00",
  "known_ransomware_campaign_use": "Unknown",
  "product": "E-Business Suite",
  "raw_date_added": "2026-07-15",
  "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "vendor_project": "Oracle"
}
```
CISA KEV Catalog catalog:kev ransomware:unknown source:cisa type:vulnerability known-exploited vulnerability
SonicWall SMA1000 Appliances Code Injection Vulnerability

发布时间 2026-07-14 08:00 (UTC+08:00) 抓取时间 2026-07-21 19:05 (UTC+08:00)

SonicWall | SMA1000 Appliances | https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; h…
扩展字段
```
{
  "cve_id": "CVE-2026-15410",
  "due_date": "2026-07-17T00:00:00+00:00",
  "known_ransomware_campaign_use": "Unknown",
  "product": "SMA1000 Appliances",
  "raw_date_added": "2026-07-14",
  "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "vendor_project": "SonicWall"
}
```
CISA KEV Catalog catalog:kev ransomware:unknown source:cisa type:vulnerability known-exploited vulnerability
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

发布时间 2026-07-14 08:00 (UTC+08:00) 抓取时间 2026-07-21 19:05 (UTC+08:00)

SonicWall | SMA1000 Appliances | https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; h…
扩展字段
```
{
  "cve_id": "CVE-2026-15409",
  "due_date": "2026-07-17T00:00:00+00:00",
  "known_ransomware_campaign_use": "Unknown",
  "product": "SMA1000 Appliances",
  "raw_date_added": "2026-07-14",
  "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "vendor_project": "SonicWall"
}
```
CISA KEV Catalog catalog:kev ransomware:unknown source:cisa type:vulnerability known-exploited vulnerability
Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

发布时间 2026-07-14 08:00 (UTC+08:00) 抓取时间 2026-07-21 19:05 (UTC+08:00)

Microsoft | SharePoint Server | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-56164 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-base…
扩展字段
```
{
  "cve_id": "CVE-2026-56164",
  "due_date": "2026-07-17T00:00:00+00:00",
  "known_ransomware_campaign_use": "Unknown",
  "product": "SharePoint Server",
  "raw_date_added": "2026-07-14",
  "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
  "vendor_project": "Microsoft"
}
```
CISA KEV Catalog catalog:kev ransomware:unknown source:cisa type:vulnerability known-exploited vulnerability

全部来源 Cloudflare 博客腾讯云安全公告 Adobe 安全公告阿里云 AVD Ubuntu 安全通告启明星辰安全通告 Amazon Linux AL2 公告 Amazon Linux AL2023 公告 AWS 安全公告 MSRC 更新指南 Oracle 安全警报 Apple 安全更新 Chrome 稳定版更新 Red Hat 安全公告 Atlassian 安全公告 NVIDIA 安全公告华为安全公告联想安全公告阿里云 Linux 安全公告阿里云 Linux CVE 通知阿里云安全公告 Amazon Linux 1 (EOL)安全公告 Amazon Linux 安全公告长亭漏洞库 Seebug 漏洞库 CISA KEV Catalog 微步银狐情报微步银狐 IOC Ransomware.live 近期受害者工信部 CNVDB CNNVD 通报 CNNVD 漏洞库 CNVD 漏洞库 TC260 标准征求意见 Seebug 技术 Paper GitHub Advisory HackerOne 博客 Exploit-DB 安天每日安全简讯 LinuxSecurity Hybrid VulDB 地方采购（CCGP）中央采购（CCGP） The Hacker News FreeBuf 社区 VIPRead 嘶吼安全资讯 Doonsec 微信聚合 arXiv cs.CR RSA Conference Podcast 新闻聚焦社区动态会议与培训融资快讯并购整合情报快报事件通报工具更新产品发布

威胁情报

订阅来源 RSS