首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 4632 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-111652 | MEDIUM | 5.3 | 2026-10-16 | Engineercms through 2.0.5 contains a missing authorization vulnerability in AttachControll | 3xxx engineercms | 受影响版本 ≤ 2.0.5，请升级到修复版本。 |
| CVE-2026-111643 | CRITICAL | 9.8 | 2026-10-16 | Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that all | l429609201 misaka_danmu_server | 受影响版本 ≤ 2.8.9，请升级到修复版本。 |
| CVE-2026-111644 | HIGH | 7.3 | 2026-10-16 | Misaka Danmu Server through 2.8.9 contains a missing authentication vulnerability that all | l429609201 misaka_danmu_server | 受影响版本 ≤ 2.8.9，请升级到修复版本。 |
| CVE-2026-111645 | MEDIUM | 5.4 | 2026-10-16 | MrDoc through 1.1.1 contains a missing object-level authorization vulnerability in the Imp | zmister2016 MrDoc | 受影响版本 ≤ 1.1.1，请升级到修复版本。 |
| CVE-2026-111646 | MEDIUM | 5.9 | 2026-10-16 | SurveyKing before 1.13.0 contains a missing authorization vulnerability that allows unauth | javahuang SurveyKing | 受影响版本 < 1.13.0，请升级到修复版本。 |
| CVE-2026-111647 | MEDIUM | 4.3 | 2026-10-16 | PickMall lilishop through 5.0.0 contains an insecure direct object reference vulnerability | PickMall lilishop | 受影响版本 ≤ 5.0.0，请升级到修复版本。 |
| CVE-2026-111637 | MEDIUM | 5.3 | 2026-10-16 | NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthen | Blair2004 NexoPOS | 受影响版本 ≤ 6.2.4，请升级到修复版本。 |
| CVE-2026-111638 | HIGH | 7.7 | 2026-10-16 | sshportal through 1.19.5 contains a missing authorization vulnerability in the management | moul sshportal | 受影响版本 ≤ 1.19.5，请升级到修复版本。 |
| CVE-2026-111639 | HIGH | 8.1 | 2026-10-16 | bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/goo | mlogclub bbs-go | 受影响版本 ≤ 4.4.6，请升级到修复版本。 |
| CVE-2026-111640 | MEDIUM | 5.4 | 2026-10-16 | DooTask through 1.9.66 contains a missing authorization vulnerability in WebSocketDialog:: | kuaifan dootask | 受影响版本 ≤ 1.9.66，请升级到修复版本。 |
| CVE-2026-111641 | CRITICAL | 9.8 | 2026-10-16 | FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unaut | fastapiadmin | 受影响版本 ≤ 3.0，请升级到修复版本。 |
| CVE-2026-111642 | HIGH | 8.8 | 2026-10-16 | FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/se | fastapiadmin | 受影响版本 ≤ 3.0，请升级到修复版本。 |
| CVE-2026-111635 | MEDIUM | 4.3 | 2026-10-16 | Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenti | helicalinsight | 受影响版本 ≤ 7.0.0，请升级到修复版本。 |
| CVE-2026-111636 | HIGH | 8.1 | 2026-10-16 | OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allow | OpenBMB StaffDeck | 受影响版本 ≤ 0.5.6，请升级到修复版本。 |
| CVE-2026-111630 | MEDIUM | 5.4 | 2026-10-16 | abp-next-admin 10.2.0 through 10.6.0 contains an insecure direct object reference vulnerab | colinin abp-next-admin | 受影响版本 ≤ 10.6.0，请升级到修复版本。 |
| CVE-2026-111631 | MEDIUM | 5.4 | 2026-10-16 | Distributor before 2.3.2 contains a missing authorization vulnerability that allows Contri | 10up Distributor | 受影响版本 < 2.3.2，请升级到修复版本。 |
| CVE-2026-111632 | MEDIUM | 5.4 | 2026-10-16 | Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows authen | aureuserp | 受影响版本 ≤ 1.6.0，请升级到修复版本。 |
| CVE-2026-111633 | HIGH | 8.6 | 2026-10-16 | ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenti | SeriaWei ZKEACMS | 受影响版本 ≤ 4.4，请升级到修复版本。 |
| CVE-2026-111634 | HIGH | 8.1 | 2026-10-16 | Helical Insight through 7.0.0 contains an sql injection vulnerability that allows authenti | helicalinsight | 受影响版本 ≤ 7.0.0，请升级到修复版本。 |
| CVE-2026-111624 | LOW | 3.7 | 2026-10-16 | Umbraco CMS before 17.7.1 and 18.2.1 contains a missing authorization vulnerability that a | umbraco Umbraco-CMS | 受影响版本 < 18.2.1，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。