首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 17377 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-82383 | HIGH | 8.2 | 2026-09-28 | Missing Authentication for Critical Function in Apache Roller 6.1.5 allows an unauthentica | Apache Software Foundation Apache Roller | 请参考厂商官方公告并升级修复。官方说明：https://github.com/apache/roller/pull/17 |
| CVE-2026-82384 | CRITICAL | 9.8 | 2026-09-28 | Deserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote | Apache Software Foundation Apache Roller | 请参考厂商官方公告并升级修复。官方说明：https://github.com/apache/roller/pull/17 |
| CVE-2026-101010 | MEDIUM | 4.7 | 2026-09-28 | A vulnerability was identified in aaPanel BaoTa up to 11.8.0. The impacted element is the | aaPanel BaoTa | 请参考厂商官方公告并升级修复。官方说明：https://gist.github.com/zuesdevil/e9760c |
| CVE-2026-101011 | MEDIUM | 4.7 | 2026-09-28 | A security flaw has been discovered in aaPanel BaoTa up to 11.8.0. This affects the functi | aaPanel BaoTa | 请参考厂商官方公告并升级修复。官方说明：https://gist.github.com/zuesdevil/ec002a |
| CVE-2026-101012 | HIGH | 7.3 | 2026-09-28 | A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098b | mathurvishal CloudClassroom-PHP-Project | 请参考厂商官方公告并升级修复。官方说明：https://github.com/vinniboy021-blip/Advi |
| CVE-2026-101008 | CRITICAL | 9.1 | 2026-09-28 | A vulnerability was found in aaPanel BaoTa up to 11.8.0. Impacted is the function merge_sp | aaPanel BaoTa | 请参考厂商官方公告并升级修复。官方说明：https://gist.github.com/zuesdevil/56b734 |
| CVE-2026-101009 | HIGH | 8.4 | 2026-09-28 | A vulnerability was determined in aaPanel BaoTa up to 11.8.0. The affected element is the | aaPanel BaoTa | 请参考厂商官方公告并升级修复。官方说明：https://gist.github.com/zuesdevil/ba0b8a |
| CVE-2026-84744 | MEDIUM | 6.5 | 2026-09-28 | The WPForms Lite WordPress plugin from 1.5.0.1 to 2.0.2 does not remove shortcode delimite | Unknown WPForms | 受影响版本 < 2.0.2.1，请升级到修复版本。 |
| CVE-2026-86838 | MEDIUM | 5.3 | 2026-09-28 | The Bookly WordPress plugin before 28.3 does not validate client-supplied booking quantity | Unknown Bookly | 受影响版本 < 28.3，请升级到修复版本。 |
| CVE-2026-88828 | MEDIUM | 5.4 | 2026-09-28 | The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforc | Unknown Blacklist Manager | 受影响版本 < 2.3.2，请升级到修复版本。 |
| CVE-2026-89300 | MEDIUM | 5.3 | 2026-09-28 | The WP Verify API WordPress plugin through 1.0.0 does not have any authorisation check in | Unknown WP Verify API | 受影响版本 ≤ 1.0.0，请升级到修复版本。 |
| CVE-2026-89303 | MEDIUM | 6.4 | 2026-09-28 | The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape | Unknown Post Voting System | 受影响版本 ≤ 1.0，请升级到修复版本。 |
| CVE-2026-89411 | MEDIUM | 5.3 | 2026-09-28 | The Paymattic WordPress plugin from 4.6.20 before 4.6.26 does not verify that a confirmed | Unknown Paymattic | 受影响版本 < 4.6.26，请升级到修复版本。 |
| CVE-2026-92996 | MEDIUM | 5.3 | 2026-09-28 | The Verge3D WordPress plugin from 4.1.0 through 4.13.0 does not verify with the payment pr | Unknown Verge3D Publishing and E-Commerc | 受影响版本 ≤ 4.13.0，请升级到修复版本。 |
| CVE-2026-93000 | MEDIUM | 6.8 | 2026-09-28 | The SPS-Suite WordPress plugin through 1.4.0 does not sanitise the search query before usi | Unknown SPS-Suite | 受影响版本 ≤ 1.4.0，请升级到修复版本。 |
| CVE-2026-101004 | MEDIUM | 5.3 | 2026-09-28 | A security vulnerability has been detected in notionnext-org NotionNext up to 4.10.10. Aff | notionnext-org NotionNext | 请参考厂商官方公告并升级修复。官方说明：https://vuldb.com/cve/CVE-2026-101004 |
| CVE-2026-100750 | 待定 | 待定 | 2026-09-28 | Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joom | regularlabs.com Modules Anywhere (Pro) e | 请参考厂商官方公告并升级修复。官方说明：https://www.regularlabs.com/ |
| CVE-2026-100751 | 待定 | 待定 | 2026-09-28 | Joomla Extension - regularlabs.com - Privileged stored XSS via data-rlta-url attributes in | regularlabs.com Tabs & Accordions (Free, | 请参考厂商官方公告并升级修复。官方说明：https://www.regularlabs.com/ |
| CVE-2026-101005 | HIGH | 7.3 | 2026-09-28 | A vulnerability was detected in October CMS up to 4.3.4. This affects the function validat | n/a October CMS | 请参考厂商官方公告并升级修复。官方说明：https://github.com/0xGenesi/CVE/blob/mai |
| CVE-2026-101006 | MEDIUM | 4.3 | 2026-09-28 | A flaw has been found in Frappe HR up to 16.15.0. This vulnerability affects the function | Frappe HR | 请参考厂商官方公告并升级修复。官方说明：https://vuldb.com/cve/CVE-2026-101006 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。