首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 4632 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-111855 | HIGH | 7.5 | 2026-10-17 | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal | Tektronix 3 Series MDO | 受影响版本 < 1.21.1，请升级到修复版本。 |
| CVE-2026-104734 | HIGH | 7.2 | 2026-10-17 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vu | themeum Kirki – Freeform Page Builder, W | 受影响版本 ≤ 6.3.2，请升级到修复版本。 |
| CVE-2026-111823 | CRITICAL | 9.8 | 2026-10-17 | Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering | Mage mage-ai | 受影响版本 ≤ 0.9.80，请升级到修复版本。 |
| CVE-2026-111853 | HIGH | 8.8 | 2026-10-17 | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command inj | Tektronix 3 Series MDO | 受影响版本 < 1.21.1，请升级到修复版本。 |
| CVE-2026-89085 | MEDIUM | 6.6 | 2026-10-16 | A flaw was found in parted. A heap-based buffer overflow can occur when processing a speci | Red Hat Red Hat Enterprise Linux 10, Red | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-89088 | MEDIUM | 5.5 | 2026-10-16 | A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system | Red Hat Red Hat Enterprise Linux 10, Red | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-89096 | MEDIUM | 5.9 | 2026-10-16 | A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of | Red Hat Red Hat Enterprise Linux 10, Red | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-110756 | 待定 | 待定 | 2026-10-16 | Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending wh | 受影响版本 < 1.65，请升级到修复版本。 | |
| CVE-2026-110757 | 待定 | 待定 | 2026-10-16 | Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used | 受影响版本 < 1.65，请升级到修复版本。 | |
| CVE-2026-110758 | 待定 | 待定 | 2026-10-16 | Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field und | 受影响版本 < 1.65，请升级到修复版本。 | |
| CVE-2026-110759 | 待定 | 待定 | 2026-10-16 | Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for | 受影响版本 < 1.65，请升级到修复版本。 | |
| CVE-2026-111802 | MEDIUM | 6.6 | 2026-10-16 | A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected | Red Hat Red Hat Enterprise Linux 10, Red | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-17591 | LOW | 3.6 | 2026-10-16 | A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potenti | Red Hat Red Hat Hardened Images, Red Hat | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-107346 | 待定 | 待定 | 2026-10-16 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | ||
| CVE-2026-110752 | 待定 | 待定 | 2026-10-16 | Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry | 受影响版本 < 1.65，请升级到修复版本。 | |
| CVE-2026-110753 | 待定 | 待定 | 2026-10-16 | Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns | 受影响版本 < 1.65，请升级到修复版本。 | |
| CVE-2026-110754 | 待定 | 待定 | 2026-10-16 | Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails t | 受影响版本 < 1.65，请升级到修复版本。 | |
| CVE-2026-110755 | 待定 | 待定 | 2026-10-16 | Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed | 受影响版本 < 1.65，请升级到修复版本。 | |
| CVE-2026-68498 | HIGH | 7.5 | 2026-10-16 | StreamReadConstraints.maxNameLength (default 50,000 characters) is intended to bound how m | FasterXML jackson-core | 受影响版本 < 3.2.2，请升级到修复版本。 |
| CVE-2026-96626 | HIGH | 8.5 | 2026-10-16 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prio | getarcaneapp arcane | 请参考厂商官方公告并升级修复。官方说明：https://github.com/getarcaneapp/arcane/c |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。