首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 16515 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-111354 | LOW | 3.1 | 2026-10-15 | crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenti | crmeb crmeb_java | 受影响版本 ≤ 3.1，请升级到修复版本。 |
| CVE-2026-111355 | MEDIUM | 6.3 | 2026-10-15 | zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allo | zhontai Admin.Core | 受影响版本 ≤ 10.1.0，请升级到修复版本。 |
| CVE-2026-111356 | HIGH | 7.4 | 2026-10-15 | MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recove | magicblack MacCMS | 受影响版本 ≤ 2026.1000.4056，请升级到修复版本。 |
| CVE-2026-111358 | MEDIUM | 5.4 | 2026-10-15 | SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability th | mettle sendportal-core | 受影响版本 ≤ 4.0.1，请升级到修复版本。 |
| CVE-2026-111349 | MEDIUM | 5.3 | 2026-10-15 | Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer | puemos Craftplan | 受影响版本 ≤ 0.7.5，请升级到修复版本。 |
| CVE-2026-111350 | MEDIUM | 5 | 2026-10-15 | Papermark through 0.22.0 contains a missing authorization vulnerability in the data room v | papermark | 受影响版本 ≤ 0.22.0，请升级到修复版本。 |
| CVE-2026-111351 | MEDIUM | 4.2 | 2026-10-15 | metasfresh through 5.175 contains a missing record-level authorization vulnerability in Bo | metasfresh | 受影响版本 ≤ 5.175，请升级到修复版本。 |
| CVE-2026-111352 | HIGH | 8.8 | 2026-10-15 | ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseC | ThinkCMF | 受影响版本 ≤ 8.0.1，请升级到修复版本。 |
| CVE-2026-111353 | MEDIUM | 4.3 | 2026-10-15 | Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any au | Peppermint-Lab peppermint | 受影响版本 ≤ 0.5.5，请升级到修复版本。 |
| CVE-2026-111346 | MEDIUM | 5.4 | 2026-10-15 | ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComm | easysoft zentaopms | 受影响版本 ≤ 22.6，请升级到修复版本。 |
| CVE-2026-111347 | MEDIUM | 5.9 | 2026-10-15 | go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public r | opsre go-ldap-admin | 受影响版本 ≤ 0.6.2，请升级到修复版本。 |
| CVE-2026-111348 | MEDIUM | 5.4 | 2026-10-15 | Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in After | likeshop | 受影响版本 ≤ 3.5.1，请升级到修复版本。 |
| CVE-2026-111343 | MEDIUM | 4.3 | 2026-10-15 | pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user | pig-mesh pig | 受影响版本 ≤ 4.1.1，请升级到修复版本。 |
| CVE-2026-111344 | MEDIUM | 4.3 | 2026-10-15 | APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows au | apitable | 受影响版本 ≤ 1.14.0-beta，请升级到修复版本。 |
| CVE-2026-111345 | MEDIUM | 4.3 | 2026-10-15 | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any auth | polonel trudesk | 受影响版本 ≤ 1.2.11，请升级到修复版本。 |
| CVE-2026-111324 | MEDIUM | 5.3 | 2026-10-15 | rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauth | lejianwen rustdesk-api | 受影响版本 ≤ 2.7，请升级到修复版本。 |
| CVE-2026-111329 | CRITICAL | 9.8 | 2026-10-15 | JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 tha | juggleim | 受影响版本 ≤ 1.8.16，请升级到修复版本。 |
| CVE-2026-111330 | MEDIUM | 5.9 | 2026-10-15 | JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stor | juggleim | 受影响版本 ≤ 1.8.16，请升级到修复版本。 |
| CVE-2026-111331 | MEDIUM | 6.3 | 2026-10-15 | Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC | Dokploy | 受影响版本 ≤ 0.30.8，请升级到修复版本。 |
| CVE-2026-111332 | LOW | 3.7 | 2026-10-15 | OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows | AtalayaLabs OxiCloud | 受影响版本 ≤ 0.9.3，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。