首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 15900 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-101979 | HIGH | 8.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Jun | Juniper Networks Junos OS, Juniper Netwo | 受影响版本 < 25.4X300-D40-EVO，请升级到修复版本。 |
| CVE-2026-101981 | HIGH | 8.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Junipe | Juniper Networks Junos OS, Juniper Netwo | 受影响版本 < 25.4X300-D40-EVO，请升级到修复版本。 |
| CVE-2026-101949 | HIGH | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper N | Juniper Networks Junos OS, Juniper Netwo | 受影响版本 < 25.4X300-D40-EVO，请升级到修复版本。 |
| CVE-2026-101952 | HIGH | 7.5 | 2026-10-14 | An Improper Validation of Consistency within Input vulnerability in the routing protocol d | Juniper Networks Junos OS, Juniper Netwo | 受影响版本 < 25.4X300-D40-EVO，请升级到修复版本。 |
| CVE-2026-101954 | CRITICAL | 9.8 | 2026-10-14 | An Improper Authentication vulnerability in the J-Web management interface and its NETCONF | Juniper Networks Junos OS, Juniper Netwo | 受影响版本 < 25.4X300-D40-EVO，请升级到修复版本。 |
| CVE-2026-101959 | MEDIUM | 6.5 | 2026-10-14 | A Function Call With Incorrect Variable or Reference as Argument vulnerability in the rout | Juniper Networks Junos OS, Juniper Netwo | 受影响版本 < 25.4X300-D40-EVO，请升级到修复版本。 |
| CVE-2026-101961 | HIGH | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Jun | Juniper Networks Junos OS, Juniper Netwo | 受影响版本 < 25.4X300-D40-EVO，请升级到修复版本。 |
| CVE-2026-101962 | HIGH | 7.5 | 2026-10-14 | An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protoc | Juniper Networks Junos OS, Juniper Netwo | 受影响版本 < 25.4X300-D40-EVO，请升级到修复版本。 |
| CVE-2026-100413 | 待定 | 待定 | 2026-10-14 | SeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, th | seaweedfs | 请参考厂商官方公告并升级修复。官方说明：https://github.com/seaweedfs/seaweedfs/c |
| CVE-2026-93635 | MEDIUM | 5.3 | 2026-10-14 | LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthen | Zimbra Zimbra Collaboration Suite | 受影响版本 ≤ 10.1.21，请升级到修复版本。 |
| CVE-2026-93637 | LOW | 3.7 | 2026-10-14 | An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 a | Zimbra Zimbra Collaboration Suite | 受影响版本 ≤ 10.1.21，请升级到修复版本。 |
| CVE-2026-94200 | 待定 | 待定 | 2026-10-14 | Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_hands | Erlang OTP | 受影响版本 < *，请升级到修复版本。 |
| CVE-2026-96596 | 待定 | 待定 | 2026-10-14 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib | Erlang OTP, erlang rebar3, hexpm hex_cor | 受影响版本 < *，请升级到修复版本。 |
| CVE-2026-0322 ⚠️ 在野 |
HIGH | 7.2 | 2026-10-14 | A remote code execution (RCE) vulnerability in the management interface of Palo Alto Netwo | Palo Alto Networks Cloud NGFW, Palo Alto | 受影响版本 < 10.2.18-h12，请升级到修复版本。 |
| CVE-2026-77524 | CRITICAL | 9.9 | 2026-10-14 | KEDA is a Kubernetes-based Event Driven Autoscaling component. In version 2.20.2 and earli | kedacore keda | 请参考厂商官方公告并升级修复。官方说明：https://github.com/kedacore/keda/commit/ |
| CVE-2026-77564 | LOW | 3.3 | 2026-10-14 | Talos Linux is a Linux distribution built for Kubernetes deployments. Prior to 1.12.9 and | siderolabs talos | 请参考厂商官方公告并升级修复。官方说明：https://github.com/siderolabs/talos/comm |
| CVE-2026-86562 | HIGH | 7.8 | 2026-10-14 | A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors all | Red Hat Fast Datapath for RHEL 10, Red H | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-86563 | HIGH | 7.8 | 2026-10-14 | A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation c | Red Hat Fast Datapath for RHEL 10, Red H | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-86565 | HIGH | 8.2 | 2026-10-14 | A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight | Red Hat Fast Datapath for RHEL 10, Red H | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-92151 | HIGH | 7.5 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and oth | nasa fprime | 请参考厂商官方公告并升级修复。官方说明：https://github.com/nasa/fprime/commit/ca |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。