首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 16605 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-106504 | MEDIUM | 6.5 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backst | backstage, @backstage plugin-scaffolder- | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
| CVE-2026-106505 | HIGH | 7.7 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, | backstage, @backstage plugin-techdocs-no | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
| CVE-2026-106506 | MEDIUM | 5.3 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backst | backstage, @backstage plugin-scaffolder- | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
| CVE-2026-106507 | MEDIUM | 5.3 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backs | backstage, @backstage/plugin-techdocs-no | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
| CVE-2026-106508 | MEDIUM | 5.3 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backs | backstage, @backstage plugin-techdocs-no | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
| CVE-2026-106509 | HIGH | 7.7 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backs | backstage, @backstage plugin-techdocs-no | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
| CVE-2026-106587 | LOW | 3.6 | 2026-10-06 | In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes i | OpenBSD OpenSSH | 受影响版本 < 10.6，请升级到修复版本。 |
| CVE-2026-106588 | LOW | 3.1 | 2026-10-06 | In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of | OpenBSD OpenSSH | 受影响版本 ≤ 10.6，请升级到修复版本。 |
| CVE-2026-106589 | LOW | 2.9 | 2026-10-06 | In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer | OpenBSD OpenSSH | 受影响版本 ≤ 10.6，请升级到修复版本。 |
| CVE-2026-106500 | HIGH | 8.5 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0. | backstage, @backstage plugin-scaffolder- | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
| CVE-2026-106501 | CRITICAL | 9.6 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0. | backstage, @backstage plugin-scaffolder- | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
| CVE-2026-43598 | 待定 | 待定 | 2026-10-06 | Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could a | AMD AMD Instinct™ MI210, AMD AMD Instinc | 请参考厂商官方公告并升级修复。官方说明：https://www.amd.com/en/resources/product |
| CVE-2026-101023 | CRITICAL | 9.1 | 2026-10-06 | Gitea's OAuth2 token endpoint verified the signature and grant of a token submitted with t | Gitea | 受影响版本 ≤ 28.0.0，请升级到修复版本。 |
| CVE-2026-104633 | MEDIUM | 6.5 | 2026-10-06 | When migrating a repository from another Gitea instance, Gitea used the page size reported | Gitea | 受影响版本 ≤ 28.0.0，请升级到修复版本。 |
| CVE-2026-105267 | HIGH | 8.1 | 2026-10-06 | The Gitea web route for deleting tags (`POST /{owner}/{repo}/tags/delete`) requires only w | Gitea | 受影响版本 ≤ 28.0.0，请升级到修复版本。 |
| CVE-2026-105268 | MEDIUM | 4.3 | 2026-10-06 | The Gitea API routes for issue attachments (`/api/v1/repos/{owner}/{repo}/issues/{index}/a | Gitea | 受影响版本 ≤ 28.0.0，请升级到修复版本。 |
| CVE-2026-106496 | LOW | 3.1 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backst | backstage, @backstage plugin-catalog-bac | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
| CVE-2026-106497 | MEDIUM | 4.3 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backst | backstage, @backstage plugin-catalog-bac | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
| CVE-2026-106498 | HIGH | 7.7 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 3.5.1, 3.6.2, 3.7. | backstage, @backstage plugin-catalog-bac | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
| CVE-2026-106499 | MEDIUM | 4.9 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backst | backstage, @backstage plugin-scaffolder- | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。