首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 17377 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-86507 | MEDIUM | 6.1 | 2026-09-28 | Improper neutralization of input in Apache Roller 6.1.5 allows an anonymous remote attacke | Apache Software Foundation Apache Roller | 请参考厂商官方公告并升级修复。官方说明：https://github.com/apache/roller/pull/18 |
| CVE-2026-86530 | HIGH | 7.2 | 2026-09-28 | BUFFALO Wi-Fi products handle some web form input improperly to assemble command line stri | BUFFALO INC. WSR-300HP, BUFFALO INC. WEX | 受影响版本 < Ver.1.71，请升级到修复版本。 |
| CVE-2026-101014 | HIGH | 7.3 | 2026-09-28 | A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by | Trusted Domain Project OpenDMARC | 请参考厂商官方公告并升级修复。官方说明：https://github.com/trusteddomainproject/ |
| CVE-2026-101015 | HIGH | 7.3 | 2026-09-28 | A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this is | Trusted Domain Project OpenDMARC | 请参考厂商官方公告并升级修复。官方说明：https://vuldb.com/cve/CVE-2026-101015 |
| CVE-2026-82546 | MEDIUM | 6.1 | 2026-09-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Ap | Apache Software Foundation Apache Roller | 请参考厂商官方公告并升级修复。官方说明：https://github.com/apache/roller/pull/17 |
| CVE-2026-91204 | MEDIUM | 6.1 | 2026-09-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Ap | Apache Software Foundation Apache Roller | 请参考厂商官方公告并升级修复。官方说明：https://github.com/apache/roller/pull/19 |
| CVE-2026-91206 | MEDIUM | 6.1 | 2026-09-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Ap | Apache Software Foundation Apache Roller | 请参考厂商官方公告并升级修复。官方说明：https://github.com/apache/roller/pull/19 |
| CVE-2026-82385 | MEDIUM | 6.5 | 2026-09-28 | Exposure of Sensitive Information to an Unauthorized Actor in Apache Roller 6.1.5 allows a | Apache Software Foundation Apache Roller | 请参考厂商官方公告并升级修复。官方说明：https://github.com/apache/roller/pull/17 |
| CVE-2026-82386 | HIGH | 7.7 | 2026-09-28 | Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a webl | Apache Software Foundation Apache Roller | 请参考厂商官方公告并升级修复。官方说明：https://github.com/apache/roller/pull/17 |
| CVE-2026-82387 | MEDIUM | 5.4 | 2026-09-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Ap | Apache Software Foundation Apache Roller | 请参考厂商官方公告并升级修复。官方说明：https://github.com/apache/roller/pull/17 |
| CVE-2026-101013 | HIGH | 7.3 | 2026-09-28 | A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up t | mathurvishal CloudClassroom-PHP-Project | 请参考厂商官方公告并升级修复。官方说明：https://github.com/vinniboy021-blip/Advi |
| CVE-2026-82348 | HIGH | 7.7 | 2026-09-28 | Authorization Bypass Through User-Controlled Key in Apache Roller 6.1.5 allows an authenti | Apache Software Foundation Apache Roller | 请参考厂商官方公告并升级修复。官方说明：https://github.com/apache/roller/pull/16 |
| CVE-2026-82375 | HIGH | 7.4 | 2026-09-28 | Server-Side Request Forgery (SSRF) in Apache Roller 6.1.5 allows an authenticated user wit | Apache Software Foundation Apache Roller | 请参考厂商官方公告并升级修复。官方说明：https://github.com/apache/roller/pull/16 |
| CVE-2026-82376 | HIGH | 7.7 | 2026-09-28 | Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a user | Apache Software Foundation Apache Roller | 请参考厂商官方公告并升级修复。官方说明：https://github.com/apache/roller/pull/16 |
| CVE-2026-82377 | CRITICAL | 9.9 | 2026-09-28 | Missing Authorization in Apache Roller 6.1.5 allows an authenticated user to read, modify, | Apache Software Foundation Apache Roller | 请参考厂商官方公告并升级修复。官方说明：https://github.com/apache/roller/pull/16 |
| CVE-2026-82378 | CRITICAL | 9 | 2026-09-28 | Incorrect Authorization in the OAuth 1.0a authorization endpoint of Apache Roller 6.1.5 al | Apache Software Foundation Apache Roller | 请参考厂商官方公告并升级修复。官方说明：https://github.com/apache/roller/pull/16 |
| CVE-2026-82379 | HIGH | 7.7 | 2026-09-28 | Authentication Bypass by Capture-replay in Apache Roller 6.1.5 allows an attacker who capt | Apache Software Foundation Apache Roller | 请参考厂商官方公告并升级修复。官方说明：https://github.com/apache/roller/pull/16 |
| CVE-2026-82380 | HIGH | 8.1 | 2026-09-28 | Cross-Site Request Forgery (CSRF) in Apache Roller 6.1.5 allows a remote attacker to cause | Apache Software Foundation Apache Roller | 请参考厂商官方公告并升级修复。官方说明：https://github.com/apache/roller/pull/16 |
| CVE-2026-82381 | MEDIUM | 5.4 | 2026-09-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Ap | Apache Software Foundation Apache Roller | 请参考厂商官方公告并升级修复。官方说明：https://github.com/apache/roller/pull/16 |
| CVE-2026-82382 | MEDIUM | 6.1 | 2026-09-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Ap | Apache Software Foundation Apache Roller | 请参考厂商官方公告并升级修复。官方说明：https://github.com/apache/roller/pull/16 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。