首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 17411 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-101098 | MEDIUM | 4.3 | 2026-09-28 | A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affec | ag-ui-protocol ag-ui | 请参考厂商官方公告并升级修复。官方说明：https://github.com/ag-ui-protocol/ag-ui/ |
| CVE-2026-101891 | 待定 | 待定 | 2026-09-28 | An improper access control vulnerability in an internal API service on WatchGuard Access P | WatchGuard WatchGuard AP | 受影响版本 < 3.4.8，请升级到修复版本。 |
| CVE-2026-101894 | CRITICAL | 9.1 | 2026-09-28 | The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the defa | XhmikosR decompress, kevva decompress | 请参考厂商官方公告并升级修复。官方说明：https://github.com/XhmikosR/decompress/c |
| CVE-2026-48100 | 待定 | 待定 | 2026-09-28 | Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory compliant transacti | polybase payy | 请参考厂商官方公告并升级修复。官方说明：https://github.com/polybase/payy/securit |
| CVE-2026-54160 | HIGH | 8.2 | 2026-09-28 | Network UPS Tools is a collection of programs which provide a common interface for monitor | networkupstools nut | 请参考厂商官方公告并升级修复。官方说明：https://github.com/networkupstools/nut/c |
| CVE-2026-55096 | HIGH | 7.1 | 2026-09-28 | fast-mcp-telegram is a Telegram MCP Server. Prior to version 30.1, the send_message/send_m | leshchenko1979 fast-mcp-telegram | 请参考厂商官方公告并升级修复。官方说明：https://github.com/leshchenko1979/fast-m |
| CVE-2026-101081 | CRITICAL | 9.1 | 2026-09-28 | A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects th | D-Link DI-8400 | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Vivi-Xray/Xray-s-cve- |
| CVE-2026-93348 | HIGH | 8.1 | 2026-09-28 | Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through | unslothai unsloth-zoo, unslothai unsloth | 受影响版本 < 2026.8.20，请升级到修复版本。 |
| CVE-2026-97399 | LOW | 3.7 | 2026-09-28 | The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 arch | The GNU C Library glibc | 受影响版本 < 2.45，请升级到修复版本。 |
| CVE-2026-101079 | LOW | 2.8 | 2026-09-28 | A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this v | agentverus agentverus-scanner | 请参考厂商官方公告并升级修复。官方说明：https://github.com/agentverus/agentverus |
| CVE-2026-101080 | MEDIUM | 4.8 | 2026-09-28 | A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2. This affects t | Tencent AI-Infra-Guard | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Tencent/AI-Infra-Guar |
| CVE-2026-101861 | MEDIUM | 4.1 | 2026-09-28 | Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerabil | langflow-ai langflow | 受影响版本 < 1.12.0，请升级到修复版本。 |
| CVE-2026-12342 | CRITICAL | 9.6 | 2026-09-28 | This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user r | SailPoint Technologies IdentityIQ | 受影响版本 ≤ 8.3p5，请升级到修复版本。 |
| CVE-2026-88804 | CRITICAL | 9.6 | 2026-09-28 | An unauthenticated update of public UI settings could be used by remote attackers to execu | SUSE Rancher | 受影响版本 < 2.11.18，请升级到修复版本。 |
| CVE-2026-88805 | HIGH | 8.1 | 2026-09-28 | Incorrect credential cleaning on logout could be used by remote attackers to keep access c | SUSE Rancher | 受影响版本 < 2.15.2，请升级到修复版本。 |
| CVE-2026-88808 | HIGH | 8.8 | 2026-09-28 | A vulnerability has been identified within Rancher Manager where the Fleet agent wrote res | SUSE Rancher | 受影响版本 < 0.14.11，请升级到修复版本。 |
| CVE-2026-91154 | 待定 | 待定 | 2026-09-28 | Missing Authentication for Critical Function (CWE-306) in the product cache revalidation S | MarcosCamara01 Ecommerce Template | 受影响版本 < ec97209，请升级到修复版本。 |
| CVE-2026-80359 | MEDIUM | 6.8 | 2026-09-28 | Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-C | Dell Boot Optimized Server Storage (BOSS | 受影响版本 < 2.2.13.2038，请升级到修复版本。 |
| CVE-2026-93538 | HIGH | 7.1 | 2026-09-28 | A cross-tenant authorization issue was discovered in SUSE Rancher Fleet. During agent-init | SUSE Rancher | 受影响版本 < 0.12.19，请升级到修复版本。 |
| CVE-2026-93539 | MEDIUM | 5.4 | 2026-09-28 | A vulnerability was discovered in Fleet's Git webhook receiver (the gitjob webhook service | SUSE Rancher | 受影响版本 < 0.16.2，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。