首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 17022 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-76144 | 待定 | 待定 | 2026-10-01 | An unrestricted file upload vulnerability caused by insufficient file extension and integr | Genians, Inc Genian SSL PNS (frodo-core) | 受影响版本 < 5.0.0，请升级到修复版本。 |
| CVE-2026-76145 | 待定 | 待定 | 2026-10-01 | An improper privilege management vulnerability in Genian SSL PNS allows an attacker to esc | Genians, Inc Genian SSL PNS (frodo-core) | 受影响版本 < 5.0.0，请升级到修复版本。 |
| CVE-2026-76146 | 待定 | 待定 | 2026-10-01 | An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only | Genians, Inc Genian SSL PNS (xenics_auth | 受影响版本 < 1.0.1，请升级到修复版本。 |
| CVE-2026-76147 | 待定 | 待定 | 2026-10-01 | A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integri | Genians, Inc Genian NAC 4.0.175 Release, | 受影响版本 < 148807，请升级到修复版本。 |
| CVE-2026-103536 | HIGH | 7.3 | 2026-10-01 | A vulnerability was identified in ZongXR Supermarket 1.0.0.0. Affected by this vulnerabili | ZongXR Supermarket | 请参考厂商官方公告并升级修复。官方说明：https://github.com/ZongXR/SuperMarket/ |
| CVE-2026-103538 | MEDIUM | 6.5 | 2026-10-01 | A security flaw has been discovered in ZongXR SuperMarket 1.0.0.0. Affected by this issue | ZongXR SuperMarket | 请参考厂商官方公告并升级修复。官方说明：https://github.com/ZongXR/SuperMarket/ |
| CVE-2026-103539 | MEDIUM | 5.4 | 2026-10-01 | A weakness has been identified in ZongXR SuperMarket 1.0.0.0. This affects the function st | ZongXR SuperMarket | 请参考厂商官方公告并升级修复。官方说明：https://github.com/ZongXR/SuperMarket/ |
| CVE-2026-12241 | MEDIUM | 5.4 | 2026-10-01 | The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is | mihail-barinov Advanced Woo Labels – Pro | 受影响版本 ≤ 2.51，请升级到修复版本。 |
| CVE-2026-76142 | 待定 | 待定 | 2026-10-01 | Insufficient authentication and access control on the internal-only IPC SOAP endpoint of t | Genians, Inc Genian NAC 5.0.75 LTS Relea | 受影响版本 < 148670，请升级到修复版本。 |
| CVE-2026-92245 | HIGH | 7.5 | 2026-10-01 | The Simply Schedule Appointments plugin for WordPress is vulnerable to Sensitive Informati | croixhaug Simply Schedule Appointments | 受影响版本 ≤ 1.6.12.32，请升级到修复版本。 |
| CVE-2026-96561 | HIGH | 7.2 | 2026-10-01 | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vuln | tigroumeow AI Engine – The Chatbot, AI F | 受影响版本 ≤ 3.8.0，请升级到修复版本。 |
| CVE-2026-92537 | MEDIUM | 5.3 | 2026-10-01 | The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to | satollo Newsletter – Send awesome emails | 受影响版本 ≤ 9.3.9，请升级到修复版本。 |
| CVE-2026-103534 | MEDIUM | 6.3 | 2026-10-01 | A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the fun | David-Crty databasement | 请参考厂商官方公告并升级修复。官方说明：https://github.com/David-Crty/databaseme |
| CVE-2026-103641 | MEDIUM | 5.5 | 2026-10-01 | A flaw was found in GEGL. The Radiance HDR loader reads past the end of a memory-mapped im | Red Hat Red Hat Enterprise Linux 10, Red | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-91109 | MEDIUM | 6.5 | 2026-10-01 | The Simply Schedule Appointments plugin for WordPress is vulnerable to Insecure Direct Obj | croixhaug Simply Schedule Appointments | 受影响版本 ≤ 1.6.12.31，请升级到修复版本。 |
| CVE-2026-13313 | 待定 | 待定 | 2026-10-01 | An Active Debug Code vulnerability in certain ASUS router models allows a remote authentic | ASUS Router | 请参考厂商官方公告并升级修复。官方说明：https://www.asus.com/security-advisory |
| CVE-2026-14157 | 待定 | 待定 | 2026-10-01 | Use of an Externally Controlled Format String in the ASUS Router modules allow a remote au | ASUS Router | 请参考厂商官方公告并升级修复。官方说明：https://www.asus.com/security-advisory |
| CVE-2026-93495 | 待定 | 待定 | 2026-10-01 | Improper initialization in an ASUS certain motherboard allows an physically proximate user | ASUS Motherboard(PRIME Z390-A ), ASUS Mo | 请参考厂商官方公告并升级修复。官方说明：https://www.asus.com/security-advisory |
| CVE-2026-101887 | LOW | 3.5 | 2026-10-01 | BlueALSA (bluez-alsa/bluealsad) contains a division-by-zero vulnerability in the LC3plus s | arkq bluez-alsa | 受影响版本 < 1a84465dd860d1be9dcf62339c6273e9e0632dd2，请升级到修复版本。 |
| CVE-2026-103533 | MEDIUM | 4.1 | 2026-10-01 | A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the functio | David-Crty databasement | 请参考厂商官方公告并升级修复。官方说明：https://github.com/David-Crty/databaseme |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。