首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 17411 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-102273 | HIGH | 7.4 | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, Py | jpadilla pyjwt | 请参考厂商官方公告并升级修复。官方说明：https://github.com/jpadilla/pyjwt/commit |
| CVE-2026-102274 | MEDIUM | 5.9 | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. From 2.9.0 until 2.14.0, PyJ | jpadilla pyjwt | 请参考厂商官方公告并升级修复。官方说明：https://github.com/jpadilla/pyjwt/commit |
| CVE-2026-101918 | MEDIUM | 5.3 | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. From 2.0.0a1 until 2.15.0, P | jpadilla pyjwt | 请参考厂商官方公告并升级修复。官方说明：https://github.com/jpadilla/pyjwt/commit |
| CVE-2026-102005 | MEDIUM | 5.5 | 2026-09-28 | Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default | Wind River Inc VxWorks 7 | 请参考厂商官方公告并升级修复。官方说明：https://support2.windriver.com/index.php |
| CVE-2026-102006 | MEDIUM | 5.5 | 2026-09-28 | In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the p | Wind River Systems Inc VxWorks 7 | 请参考厂商官方公告并升级修复。官方说明：https://support2.windriver.com/index.php |
| CVE-2026-102265 | MEDIUM | 5.3 | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, Py | jpadilla pyjwt | 请参考厂商官方公告并升级修复。官方说明：https://github.com/jpadilla/pyjwt/commit |
| CVE-2026-100370 | MEDIUM | 4.7 | 2026-09-28 | DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+. Prior to version 1.0.15, the isDa | rhukster dom-sanitizer | 请参考厂商官方公告并升级修复。官方说明：https://github.com/rhukster/dom-sanitize |
| CVE-2026-100371 | 待定 | 待定 | 2026-09-28 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and | InvoicePlane | 请参考厂商官方公告并升级修复。官方说明：https://github.com/InvoicePlane/InvoiceP |
| CVE-2026-100392 | 待定 | 待定 | 2026-09-28 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and | InvoicePlane | 请参考厂商官方公告并升级修复。官方说明：https://github.com/InvoicePlane/InvoiceP |
| CVE-2026-101144 | MEDIUM | 6.3 | 2026-09-28 | A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an un | Eleveo Call Recording Software | 请参考厂商官方公告并升级修复。官方说明：https://drive.google.com/file/d/16y5IDrR |
| CVE-2026-101145 | MEDIUM | 4.3 | 2026-09-28 | A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability | Eleveo Call Recording Software | 请参考厂商官方公告并升级修复。官方说明：https://drive.google.com/file/d/1DZ44Uq3 |
| CVE-2026-101146 | MEDIUM | 4.3 | 2026-09-28 | A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects | Eleveo Quality Management | 请参考厂商官方公告并升级修复。官方说明：https://drive.google.com/file/d/18fGYUBe |
| CVE-2026-101187 | CRITICAL | 9.1 | 2026-09-28 | A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects t | Ziroom ZHOME A0101 | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Wlz1112/ZHOME_A0101/b |
| CVE-2026-101916 | HIGH | 7.4 | 2026-09-28 | @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C+ | grpc grpc-node | 请参考厂商官方公告并升级修复。官方说明：https://github.com/grpc/grpc-node/commit |
| CVE-2026-101917 | MEDIUM | 5.3 | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT get_s | jpadilla pyjwt | 请参考厂商官方公告并升级修复。官方说明：https://github.com/jpadilla/pyjwt/commit |
| CVE-2026-87741 | HIGH | 8.8 | 2026-09-28 | The ConvertPlus plugin for WordPress is vulnerable to Deserialization of Untrusted Data in | Brainstorm Force ConvertPlus | 受影响版本 ≤ 3.6.3，请升级到修复版本。 |
| CVE-2026-93355 | HIGH | 8.1 | 2026-09-28 | LiteLLM contains a weak authentication vulnerability that allows an attacker holding a val | BerriAI litellm | 受影响版本 ≤ f4308bc124eebc783dfc51790ce8db27ed21ae00，请升级到修复版本。 |
| CVE-2026-96760 | 待定 | 待定 | 2026-09-28 | Authlib (v1.7.2 and below) contains a signature verification bypass vulnerability. The Jso | Authlib | 请参考厂商官方公告并升级修复。官方说明：https://github.com/authlib/authlib |
| CVE-2026-101142 | MEDIUM | 6.3 | 2026-09-28 | A vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulner | Eleveo Quality Management | 请参考厂商官方公告并升级修复。官方说明：https://drive.google.com/file/d/1n6_L39u |
| CVE-2026-101143 | MEDIUM | 4.3 | 2026-09-28 | A vulnerability was found in Eleveo Quality Management 9.7.0. Affected by this issue is so | Eleveo Quality Management | 请参考厂商官方公告并升级修复。官方说明：https://drive.google.com/file/d/1qKulZLn |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。