首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 16153 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-109168 | MEDIUM | 6.5 | 2026-10-12 | lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that | dromara lamp-cloud | 受影响版本 ≤ 5.10.1，请升级到修复版本。 |
| CVE-2026-109171 | MEDIUM | 4.3 | 2026-10-12 | yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any aut | guchengwuyue yshop-crm | 受影响版本 ≤ 2.1.3，请升级到修复版本。 |
| CVE-2026-108951 | MEDIUM | 6.5 | 2026-10-12 | LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows aut | lavalite cms | 受影响版本 ≤ 10.1.2，请升级到修复版本。 |
| CVE-2026-108952 | MEDIUM | 4.6 | 2026-10-12 | RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC v | RT-Thread | 受影响版本 ≤ 5.3.0，请升级到修复版本。 |
| CVE-2026-108953 | HIGH | 7.8 | 2026-10-12 | mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP | cfdude mac-shell-mcp | 受影响版本 < 2.0.0，请升级到修复版本。 |
| CVE-2026-109164 | HIGH | 7.1 | 2026-10-12 | TDuck survey form through 6.0 contains an insecure direct object reference vulnerability t | TDuckCloud tduck-survey-form | 受影响版本 ≤ 6.0，请升级到修复版本。 |
| CVE-2026-109165 | MEDIUM | 4.3 | 2026-10-12 | TDuck survey form through 6.0 contains a broken access control vulnerability that allows a | TDuckCloud tduck-survey-form | 受影响版本 ≤ 6.0，请升级到修复版本。 |
| CVE-2026-108836 | HIGH | 7.3 | 2026-10-12 | A vulnerability has been found in Ollama up to 0.34.1. The affected element is the functio | n/a Ollama | 请参考厂商官方公告并升级修复。官方说明：https://github.com/aLtEr6/test.git |
| CVE-2026-108889 | MEDIUM | 4.4 | 2026-10-12 | A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerab | Yungengxin Cloud Billing | 请参考厂商官方公告并升级修复。官方说明：https://vuldb.com/cve/CVE-2026-108889 |
| CVE-2026-108950 | MEDIUM | 5.3 | 2026-10-12 | Open Source Social Network (OSSN) through 10.1 contains a missing authorization vulnerabil | opensource-socialnetwork | 受影响版本 ≤ 10.1，请升级到修复版本。 |
| CVE-2026-108831 | MEDIUM | 6.3 | 2026-10-12 | A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vul | meetecho janus-gateway | 请参考厂商官方公告并升级修复。官方说明：https://vuldb.com/cve/CVE-2026-108831 |
| CVE-2026-108834 | MEDIUM | 4.3 | 2026-10-12 | A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some u | Cairo-dock Glx-Dock | 请参考厂商官方公告并升级修复。官方说明：https://vuldb.com/cve/CVE-2026-108834 |
| CVE-2026-108835 | MEDIUM | 4.4 | 2026-10-12 | A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9. Impacted is the | Yungengxin Yun Jia Security Guard | 请参考厂商官方公告并升级修复。官方说明：https://vuldb.com/cve/CVE-2026-108835 |
| CVE-2026-105081 | LOW | 3.6 | 2026-10-12 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symboli | ImageMagick | 受影响版本 < 6.9.13-58，请升级到修复版本。 |
| CVE-2026-85499 | 待定 | 待定 | 2026-10-12 | Improper Authorization vulnerability in Apache SkyWalking BanyanDB. The Canopy includes | Apache Software Foundation Apache SkyWal | 受影响版本 < 0.11.1，请升级到修复版本。 |
| CVE-2026-108827 | MEDIUM | 4.1 | 2026-10-12 | A vulnerability was determined in Zen Cart up to 2.2.2. Affected is the function zen_call_ | n/a Zen Cart | 请参考厂商官方公告并升级修复。官方说明：https://cdkkx.github.io/posts/GHSA-xrv3- |
| CVE-2026-108828 | MEDIUM | 4.1 | 2026-10-12 | A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the fu | n/a Zen Cart | 请参考厂商官方公告并升级修复。官方说明：https://cdkkx.github.io/posts/GHSA-233f- |
| CVE-2026-108829 | MEDIUM | 4.7 | 2026-10-12 | A security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is som | n/a Zen Cart | 请参考厂商官方公告并升级修复。官方说明：https://cdkkx.github.io/posts/GHSA-g443- |
| CVE-2026-108830 | MEDIUM | 4.2 | 2026-10-12 | A weakness has been identified in meetecho janus-gateway up to 1.4.2. This affects an unkn | meetecho janus-gateway | 请参考厂商官方公告并升级修复。官方说明：https://github.com/meetecho/janus-gatewa |
| CVE-2026-105412 | HIGH | 7.1 | 2026-10-12 | An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an att | Dassault Systèmes Tuleap Enterprise Edit | 受影响版本 ≤ 17.5-35，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。