首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 16153 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-108758 | HIGH | 8.2 | 2026-10-11 | Easy!Appointments through 1.6.0 contains an authorization bypass vulnerability in Booking: | alextselegidis easyappointments | 受影响版本 ≤ 1.6.0，请升级到修复版本。 |
| CVE-2026-108759 | MEDIUM | 6.8 | 2026-10-11 | mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-e | EricLBuehler mistral.rs | 受影响版本 ≤ 0.9.4，请升级到修复版本。 |
| CVE-2026-108760 | HIGH | 7.6 | 2026-10-11 | LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthe | llama-farm llamafarm | 受影响版本 ≤ 0.0.34，请升级到修复版本。 |
| CVE-2026-108681 | MEDIUM | 4.3 | 2026-10-11 | A security flaw has been discovered in zhayujie CowAgent up to 2.1.7. Impacted is an unkno | zhayujie CowAgent | 请参考厂商官方公告并升级修复。官方说明：https://github.com/hackerguopeng/cve/tre |
| CVE-2026-108697 | MEDIUM | 4.3 | 2026-10-11 | CoreShop through 2026.2.2 contains a missing authorization vulnerability that allows low-p | CoreShop | 受影响版本 ≤ 2026.2.2，请升级到修复版本。 |
| CVE-2026-108753 | CRITICAL | 9.4 | 2026-10-11 | Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-ho | agnaistic agnai | 受影响版本 ≤ 1.0.555，请升级到修复版本。 |
| CVE-2026-108754 | LOW | 3.3 | 2026-10-11 | GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client pro | tbphp gpt-load | 受影响版本 ≤ 1.4.11，请升级到修复版本。 |
| CVE-2026-108755 | MEDIUM | 5.3 | 2026-10-11 | Hatchet through 0.110.5 contains an allocation of resources without limits vulnerability t | hatchet-dev hatchet | 受影响版本 ≤ 0.110.5，请升级到修复版本。 |
| CVE-2026-108756 | MEDIUM | 5.4 | 2026-10-11 | Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Tele | Abilityai trinity | 受影响版本 ≤ 0.9.5，请升级到修复版本。 |
| CVE-2026-108757 | MEDIUM | 6.5 | 2026-10-11 | Nexting pinclaw OpenClaw channel plugin through 0.3.0 contains a missing authentication vu | Nexting pinclaw | 受影响版本 ≤ 0.3.0，请升级到修复版本。 |
| CVE-2026-108748 | MEDIUM | 5.3 | 2026-10-11 | Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerabilit | quarkiverse quarkus-langchain4j | 受影响版本 ≤ 1.14.1，请升级到修复版本。 |
| CVE-2026-108749 | LOW | 3.7 | 2026-10-11 | docling-serve 1.14.0 through 1.36.0 contains a missing authentication vulnerability that a | docling-project docling-serve | 受影响版本 ≤ 1.36.0，请升级到修复版本。 |
| CVE-2026-108750 | MEDIUM | 4.3 | 2026-10-11 | OpenDocMan 2.4.0 through 2.10.0 contains a decompression bomb vulnerability that allows au | OpenDocMan | 受影响版本 ≤ 2.10.0，请升级到修复版本。 |
| CVE-2026-108751 | MEDIUM | 4.4 | 2026-10-11 | MoAI-ADK through 3.1.2 contains an improper link resolution vulnerability in the moai init | modu-ai moai-adk | 受影响版本 ≤ 3.1.2，请升级到修复版本。 |
| CVE-2026-108752 | MEDIUM | 4.2 | 2026-10-11 | JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authen | jupyterhub | 受影响版本 ≤ 6.0.1，请升级到修复版本。 |
| CVE-2026-108741 | LOW | 3.1 | 2026-10-11 | Shepherd (shepherd-ai) through 0.3.1 contains a server-side request forgery guard bypass i | shepherd-agents Shepherd | 受影响版本 ≤ 0.3.1，请升级到修复版本。 |
| CVE-2026-108742 | MEDIUM | 4.3 | 2026-10-11 | CloudBeaver through 25.3.5 contains a missing authorization vulnerability in the initConne | DBeaver CloudBeaver | 受影响版本 ≤ 25.3.5，请升级到修复版本。 |
| CVE-2026-108744 | HIGH | 7 | 2026-10-11 | pbi-cli 3.10.1 through 3.12.0 contains an OS command injection vulnerability in desktop_sy | MinaSaad1 pbi-cli | 受影响版本 ≤ 3.12.0，请升级到修复版本。 |
| CVE-2026-108745 | LOW | 3.1 | 2026-10-11 | CloudBeaver through 25.3.5 contains a missing authorization vulnerability in WebSQLResultS | DBeaver CloudBeaver | 受影响版本 ≤ 25.3.5，请升级到修复版本。 |
| CVE-2026-108746 | HIGH | 8.8 | 2026-10-11 | Vearch 3.5.2 through 3.5.9 contains an incorrect authorization vulnerability in Role.HasPe | Vearch | 受影响版本 ≤ 3.5.9，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。