首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 4649 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-112195 | MEDIUM | 4.7 | 2026-10-19 | A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unk | n/a FusionPBX | 请参考厂商官方公告并升级修复。官方说明：https://github.com/jasonbernier/Dialplan |
| CVE-2026-11828 | MEDIUM | 5.9 | 2026-10-19 | IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle acces | IBM MQ Operator, IBM MQ Advanced contain | 受影响版本 ≤ 10.0.0.0-r4，请升级到修复版本。 |
| CVE-2026-11829 | MEDIUM | 6.5 | 2026-10-19 | IBM MQ could allow an authenticated attacker to cause a denial of service due to improper | IBM MQ Operator, IBM MQ Advanced contain | 受影响版本 ≤ 10.0.0.0-r4，请升级到修复版本。 |
| CVE-2026-11831 | MEDIUM | 5.4 | 2026-10-19 | IBM MQ could allow an authenticated attacker to cause a limited denial of service and obta | IBM MQ Operator, IBM MQ Advanced contain | 受影响版本 ≤ 10.0.0.0-r4，请升级到修复版本。 |
| CVE-2026-111749 | 待定 | 待定 | 2026-10-19 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3 | aio-libs aiohttp | 请参考厂商官方公告并升级修复。官方说明：https://github.com/aio-libs/aiohttp/comm |
| CVE-2026-111750 | 待定 | 待定 | 2026-10-19 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3 | aio-libs aiohttp | 请参考厂商官方公告并升级修复。官方说明：https://github.com/aio-libs/aiohttp/comm |
| CVE-2026-111862 | CRITICAL | 9.8 | 2026-10-19 | Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of ve | RankMath Rank Math SEO PRO | 请参考厂商官方公告并升级修复。官方说明：https://rankmath.com/changelog/ |
| CVE-2026-112159 | MEDIUM | 5.5 | 2026-10-19 | A security vulnerability has been detected in JumpServer up to 4.10.19. The affected eleme | n/a JumpServer | 请参考厂商官方公告并升级修复。官方说明：https://gist.github.com/Seikruun/b628bb6 |
| CVE-2026-111063 | 待定 | 待定 | 2026-10-19 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3 | aio-libs aiohttp | 请参考厂商官方公告并升级修复。官方说明：https://github.com/aio-libs/aiohttp/comm |
| CVE-2026-111064 | 待定 | 待定 | 2026-10-19 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3 | aio-libs aiohttp | 请参考厂商官方公告并升级修复。官方说明：https://github.com/aio-libs/aiohttp/comm |
| CVE-2026-111065 | 待定 | 待定 | 2026-10-19 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3 | aio-libs aiohttp | 请参考厂商官方公告并升级修复。官方说明：https://github.com/aio-libs/aiohttp/comm |
| CVE-2026-111066 | 待定 | 待定 | 2026-10-19 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 | aio-libs aiohttp | 请参考厂商官方公告并升级修复。官方说明：https://github.com/aio-libs/aiohttp/comm |
| CVE-2026-111748 | 待定 | 待定 | 2026-10-19 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3 | aio-libs aiohttp | 请参考厂商官方公告并升级修复。官方说明：https://github.com/aio-libs/aiohttp/comm |
| CVE-2026-10574 | HIGH | 8.8 | 2026-10-19 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially e | IBM MQ Operator, IBM MQ Advanced contain | 受影响版本 ≤ 10.0.0.0-r4，请升级到修复版本。 |
| CVE-2026-10743 | HIGH | 8.8 | 2026-10-19 | IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memor | IBM MQ Operator, IBM MQ Advanced contain | 受影响版本 ≤ 10.0.0.0-r4，请升级到修复版本。 |
| CVE-2026-111059 | MEDIUM | 6.1 | 2026-10-19 | Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashbo | mljar mercury | 请参考厂商官方公告并升级修复。官方说明：https://github.com/mljar/mercury/commit/ |
| CVE-2026-111061 | MEDIUM | 4.3 | 2026-10-19 | russh is a Rust SSH client and server library that includes an SSH agent protocol implemen | Eugeny russh | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Eugeny/russh/commit/4 |
| CVE-2025-7043 | MEDIUM | 5.4 | 2026-10-19 | The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh tok | WSO2 WSO2 API Manager, WSO2 WSO2 Univers | 受影响版本 < 1.1.5.4，请升级到修复版本。 |
| CVE-2025-7203 | MEDIUM | 4.9 | 2026-10-19 | The Management Console and product files expose sensitive data, including remote log serve | WSO2 WSO2 Universal Gateway, WSO2 WSO2 T | 受影响版本 < 1.3.83.7，请升级到修复版本。 |
| CVE-2026-103038 | 待定 | 待定 | 2026-10-19 | PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Hos | StreamSoft PingTools Network Utilities | 请参考厂商官方公告并升级修复。官方说明：https://fluidattacks.com/advisories/yand |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。