首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 16964 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-86859 | 待定 | 待定 | 2026-09-24 | ServiceNow has remediated an authorization bypass security issue that was identified in th | ServiceNow ServiceNow AI Platform | 受影响版本 < Australia Patch 5，请升级到修复版本。 |
| CVE-2026-86860 | 待定 | 待定 | 2026-09-24 | ServiceNow has remediated a missing authorization vulnerability that was identified in the | ServiceNow ServiceNow AI Platform | 受影响版本 < Australia Patch 5，请升级到修复版本。 |
| CVE-2026-89325 | HIGH | 7.8 | 2026-09-24 | An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agen | Rapid7 Insight Agent | 受影响版本 ≤ 0.0.261.0，请升级到修复版本。 |
| CVE-2026-96747 | MEDIUM | 5 | 2026-09-24 | The client-side field level encryption support in the MongoDB Python Driver can treat a ke | MongoDB Python Driver | 受影响版本 < 4.18.2，请升级到修复版本。 |
| CVE-2026-65827 | MEDIUM | 6.5 | 2026-09-24 | Docmost is open-source collaborative wiki and documentation software. From 0.21.0 until 0. | docmost | 请参考厂商官方公告并升级修复。官方说明：https://github.com/docmost/docmost/commi |
| CVE-2026-77293 | HIGH | 7.1 | 2026-09-24 | TREK is a collaborative travel planner. Prior to 3.3.0, the DELETE /api/trips/:tripId/coll | mauriceboe TREK | 请参考厂商官方公告并升级修复。官方说明：https://github.com/liketrek/TREK/commit/ |
| CVE-2026-77294 | HIGH | 8.1 | 2026-09-24 | TREK is a collaborative travel planner. Prior to 3.3.0, TREK allows an authenticated user | mauriceboe TREK | 请参考厂商官方公告并升级修复。官方说明：https://github.com/liketrek/TREK/commit/ |
| CVE-2026-77320 | MEDIUM | 5.3 | 2026-09-24 | TREK is a collaborative travel planner. Prior to 3.3.0, getSharedTripData in server/src/se | mauriceboe TREK | 请参考厂商官方公告并升级修复。官方说明：https://github.com/liketrek/TREK/commit/ |
| CVE-2026-77321 | MEDIUM | 4.3 | 2026-09-24 | TREK is a collaborative travel planner. Prior to 3.3.0, the get_trip_summary tool in serve | mauriceboe TREK | 请参考厂商官方公告并升级修复。官方说明：https://github.com/liketrek/TREK/commit/ |
| CVE-2026-81455 | HIGH | 8.6 | 2026-09-24 | Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Missing Authen | Dell ThinOS 10 | 受影响版本 < SecurityAddon_2605.10.2766_T10，请升级到修复版本。 |
| CVE-2026-56792 | MEDIUM | 4.4 | 2026-09-24 | Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authoriza | Dell Rugged Control Center (RCC) | 受影响版本 < 5.2.206，请升级到修复版本。 |
| CVE-2026-57440 | HIGH | 7.5 | 2026-09-24 | The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev | StarCitizenWiki mediawiki-extensions-Emb | 请参考厂商官方公告并升级修复。官方说明：https://github.com/StarCitizenWiki/media |
| CVE-2026-61823 | HIGH | 7.3 | 2026-09-24 | code16 Sharp is a Laravel-based framework for building content-management and administrati | code16 sharp | 请参考厂商官方公告并升级修复。官方说明：https://github.com/code16/sharp/commit/e |
| CVE-2026-61825 | HIGH | 8.7 | 2026-09-24 | code16 Sharp is a Laravel-based framework for building content-management and administrati | code16 sharp | 请参考厂商官方公告并升级修复。官方说明：https://github.com/code16/sharp/commit/e |
| CVE-2026-62286 | MEDIUM | 4.3 | 2026-09-24 | Dozzle is a realtime log viewer for docker containers. Prior to 10.6.7, streamEvents in in | amir20 dozzle | 请参考厂商官方公告并升级修复。官方说明：https://github.com/amir20/dozzle/commit/ |
| CVE-2026-95985 | HIGH | 8.8 | 2026-09-24 | The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthen | Amazon Kiro IDE | 受影响版本 < 1.0.242，请升级到修复版本。 |
| CVE-2026-97232 | MEDIUM | 6.3 | 2026-09-24 | A vulnerability was determined in volotat Anagnorisis up to 0.4.2. Affected by this vulner | volotat Anagnorisis | 请参考厂商官方公告并升级修复。官方说明：https://note-hxlab.wetolink.com/share/O7 |
| CVE-2026-97233 | LOW | 3.5 | 2026-09-24 | A vulnerability was identified in volotat Anagnorisis up to 0.4.11. Affected by this issue | volotat Anagnorisis | 请参考厂商官方公告并升级修复。官方说明：https://note-hxlab.wetolink.com/share/qA |
| CVE-2026-13016 | 待定 | 待定 | 2026-09-24 | ServiceNow has remediated a SQL injection vulnerability that was identified in the Service | ServiceNow ServiceNow AI Platform | 受影响版本 < Australia Patch 5，请升级到修复版本。 |
| CVE-2026-13248 | HIGH | 8.8 | 2026-09-24 | An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprin | Honeywell PD45 Industrial Printer | 受影响版本 < F10.22.030745，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。