首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 4632 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-96627 | HIGH | 8.8 | 2026-10-16 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prio | getarcaneapp arcane | 请参考厂商官方公告并升级修复。官方说明：https://github.com/getarcaneapp/arcane/c |
| CVE-2026-96628 | MEDIUM | 4.3 | 2026-10-16 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prio | getarcaneapp arcane | 请参考厂商官方公告并升级修复。官方说明：https://github.com/getarcaneapp/arcane/c |
| CVE-2026-106549 | 待定 | 待定 | 2026-10-16 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | ||
| CVE-2026-49410 | HIGH | 8.1 | 2026-10-16 | OpenHuman is an open-source agent harness available as a desktop application and Rust libr | tinyhumansai openhuman | 请参考厂商官方公告并升级修复。官方说明：https://github.com/tinyhumansai/openhuma |
| CVE-2026-62438 | MEDIUM | 6.1 | 2026-10-16 | A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially d | Red Hat Red Hat Enterprise Linux 10, Red | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-62439 | HIGH | 7 | 2026-10-16 | A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculat | Red Hat Red Hat Enterprise Linux 10, Red | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-96542 | MEDIUM | 5 | 2026-10-16 | Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Antic | Electronic Arts EA Javelin Anticheat (EA | 请参考厂商官方公告并升级修复。官方说明：https://catsandmalware.com/blog/eight-by |
| CVE-2026-108372 | 待定 | 待定 | 2026-10-16 | Open and provider-neutral, LoopX is a lightweight state kernel and local-first control pla | huangruiteng loopx | 请参考厂商官方公告并升级修复。官方说明：https://github.com/loopx-project/loopx/c |
| CVE-2026-111044 | HIGH | 7.6 | 2026-10-16 | Sunshine is a self-hosted game stream host for Moonlight. From 2026.329.165800 until 2026. | LizardByte Sunshine | 请参考厂商官方公告并升级修复。官方说明：https://github.com/LizardByte/Sunshine/c |
| CVE-2026-108373 | MEDIUM | 6.5 | 2026-10-16 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.118.0 and | frappe erpnext | 请参考厂商官方公告并升级修复。官方说明：https://github.com/frappe/erpnext/commit |
| CVE-2026-108374 | HIGH | 7.7 | 2026-10-16 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.121.0 and | frappe erpnext | 请参考厂商官方公告并升级修复。官方说明：https://github.com/frappe/erpnext/commit |
| CVE-2026-55796 | MEDIUM | 6.5 | 2026-10-16 | Frappe HR is an open-source human resources management solution (HRMS). Prior to 15.60.3 a | frappe hrms | 请参考厂商官方公告并升级修复。官方说明：https://github.com/frappe/hrms/commit/d8 |
| CVE-2026-64862 | MEDIUM | 6.5 | 2026-10-16 | Frappe HR is an open-source human resources management solution (HRMS). Prior to 15.58.3 a | frappe hrms | 请参考厂商官方公告并升级修复。官方说明：https://github.com/frappe/hrms/commit/62 |
| CVE-2026-96620 | 待定 | 待定 | 2026-10-16 | Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is p | anthropics claude-agent-sdk-python | 请参考厂商官方公告并升级修复。官方说明：https://github.com/anthropics/claude-age |
| CVE-2026-69076 | 待定 | 待定 | 2026-10-16 | Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact mos | Apache Software Foundation Apache Kylin | 受影响版本 ≤ 5.0.4，请升级到修复版本。 |
| CVE-2026-69077 | 待定 | 待定 | 2026-10-16 | Exposure of unauthorized cross-project job manipulation vulnerability in Apache Kylin. Imp | Apache Software Foundation Apache Kylin | 受影响版本 ≤ 5.0.4，请升级到修复版本。 |
| CVE-2026-69080 | 待定 | 待定 | 2026-10-16 | Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin. This | Apache Software Foundation Apache Kylin | 受影响版本 ≤ 5.0.4，请升级到修复版本。 |
| CVE-2026-61726 | HIGH | 8.1 | 2026-10-16 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopp | TandoorRecipes recipes | 请参考厂商官方公告并升级修复。官方说明：https://github.com/TandoorRecipes/recipe |
| CVE-2026-68572 | 待定 | 待定 | 2026-10-16 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Kylin. | Apache Software Foundation Apache Kylin | 受影响版本 ≤ 5.0.4，请升级到修复版本。 |
| CVE-2026-68573 | 待定 | 待定 | 2026-10-16 | Improper Authentication vulnerability in Apache Kylin. Unauthenticated user may access to | Apache Software Foundation Apache Kylin | 受影响版本 ≤ 5.0.4，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。