首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 16605 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-24721 | MEDIUM | 6.5 | 2026-10-15 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a | QNAP Systems Inc. File Station 5 | 受影响版本 < 5.5.6.5243，请升级到修复版本。 |
| CVE-2026-24722 | MEDIUM | 6.5 | 2026-10-15 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a | QNAP Systems Inc. File Station 5 | 受影响版本 < 5.5.6.5243，请升级到修复版本。 |
| CVE-2026-24723 | MEDIUM | 6.5 | 2026-10-15 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a | QNAP Systems Inc. File Station 5 | 受影响版本 < 5.5.6.5243，请升级到修复版本。 |
| CVE-2026-39993 | 待定 | 待定 | 2026-10-15 | A relative path traversal vulnerability has been reported to affect Download Station. If a | QNAP Systems Inc. Download Station | 受影响版本 < 5.11.3.322，请升级到修复版本。 |
| CVE-2026-41544 | 待定 | 待定 | 2026-10-15 | A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker | QNAP Systems Inc. QcalAgent | 受影响版本 < 1.1.10，请升级到修复版本。 |
| CVE-2026-110933 | MEDIUM | 4.4 | 2026-10-15 | Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulati | Samsung Open Source Vyond | 受影响版本 < fb10a5c8b833df7f152d4a563a61d6090a1790d7，请升级到修复版本。 |
| CVE-2026-110934 | MEDIUM | 4.4 | 2026-10-15 | Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input | Samsung Open Source Vyond | 受影响版本 < be6e297b0c4836e20d73b2f8a40a561ea496ebaa，请升级到修复版本。 |
| CVE-2026-11905 | MEDIUM | 4.3 | 2026-10-15 | The Elementor Website Builder – more than just a page builder plugin for WordPress is vuln | elemntor Elementor Website Builder – mor | 受影响版本 ≤ 4.2.3，请升级到修复版本。 |
| CVE-2026-19377 | 待定 | 待定 | 2026-10-15 | Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the | Cato Networks Cato Client for Windows, C | 受影响版本 < 5.6.2，请升级到修复版本。 |
| CVE-2026-103324 | MEDIUM | 5.3 | 2026-10-15 | The Cardinity Payment Gateway for WooCommerce WordPress plugin before 3.4.2 does not prope | Unknown Cardinity Payment Gateway for Wo | 受影响版本 < 3.4.2，请升级到修复版本。 |
| CVE-2026-104643 | MEDIUM | 4.2 | 2026-10-15 | The Easy HTTPS Redirection (SSL) WordPress plugin before 2.0.2 does not perform capability | Unknown Easy HTTPS Redirection (SSL) | 受影响版本 < 2.0.2，请升级到修复版本。 |
| CVE-2026-106031 | MEDIUM | 6.5 | 2026-10-15 | The Spin Wheel WordPress plugin before 2.2.1 does not verify that a visitor actually perf | Unknown Spin Wheel | 受影响版本 < 2.2.1，请升级到修复版本。 |
| CVE-2026-109145 | CRITICAL | 9.8 | 2026-10-15 | The User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to | Unknown User Rights Access Manager | 受影响版本 ≤ 1.1.3，请升级到修复版本。 |
| CVE-2026-101306 | CRITICAL | 9.8 | 2026-10-15 | SCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor w | FreeBSD | 受影响版本 < p10，请升级到修复版本。 |
| CVE-2026-101307 | 待定 | 待定 | 2026-10-15 | When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counte | FreeBSD | 受影响版本 < p5，请升级到修复版本。 |
| CVE-2026-101308 | MEDIUM | 5.5 | 2026-10-15 | When an audio channel's buffer needs to be resized, the sound(4) driver checks that the bu | FreeBSD | 受影响版本 < p11，请升级到修复版本。 |
| CVE-2026-103304 | MEDIUM | 5.3 | 2026-10-15 | The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce | Unknown eaSYNC Booking | 受影响版本 < 1.3.31，请升级到修复版本。 |
| CVE-2025-68403 | 待定 | 待定 | 2026-10-15 | An external control of system or configuration setting vulnerability has been reported to | QNAP Systems Inc. QuRouter | 受影响版本 < 2.7.2.113，请升级到修复版本。 |
| CVE-2025-68404 | 待定 | 待定 | 2026-10-15 | A time-of-check time-of-use (toctou) race condition vulnerability has been reported to aff | QNAP Systems Inc. QuRouter | 受影响版本 < 2.6.4.001，请升级到修复版本。 |
| CVE-2026-101302 | MEDIUM | 6.5 | 2026-10-15 | TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, | FreeBSD | 受影响版本 < p10，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。