首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 4975 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-79824 | HIGH | 8 | 2026-10-15 | A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to ov | Hewlett Packard Enterprise HPE NonStop P | 请参考厂商官方公告并升级修复。官方说明：https://support.hpe.com/hpesc/public/doc |
| CVE-2026-79825 | HIGH | 7.1 | 2026-10-15 | A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and m | Hewlett Packard Enterprise HPE NonStop N | 请参考厂商官方公告并升级修复。官方说明：https://support.hpe.com/hpesc/public/doc |
| CVE-2026-79826 | HIGH | 7.1 | 2026-10-15 | A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially | Hewlett Packard Enterprise HPE NonStop O | 请参考厂商官方公告并升级修复。官方说明：https://support.hpe.com/hpesc/public/doc |
| CVE-2026-79827 | HIGH | 7.1 | 2026-10-15 | A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution add | Hewlett Packard Enterprise HPE NonStop I | 请参考厂商官方公告并升级修复。官方说明：https://support.hpe.com/hpesc/public/doc |
| CVE-2026-79828 | HIGH | 7.1 | 2026-10-15 | A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution addr | Hewlett Packard Enterprise HPE NonStop D | 请参考厂商官方公告并升级修复。官方说明：https://support.hpe.com/hpesc/public/doc |
| CVE-2026-79829 | HIGH | 8.2 | 2026-10-15 | A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which m | Hewlett Packard Enterprise HPE NonStop H | 请参考厂商官方公告并升级修复。官方说明：https://support.hpe.com/hpesc/public/doc |
| CVE-2026-108491 | HIGH | 7.1 | 2026-10-15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | Everest Forms | 受影响版本 ≤ 3.6.1，请升级到修复版本。 |
| CVE-2026-50619 | 待定 | 待定 | 2026-10-15 | A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulne | QNAP Systems Inc. Qsirch | 受影响版本 < 7.0.3.0，请升级到修复版本。 |
| CVE-2026-53882 | 待定 | 待定 | 2026-10-15 | An improper link resolution before file access ('link following') vulnerability has been r | QNAP Systems Inc. Virtualization Station | 受影响版本 < 4.1.1.130，请升级到修复版本。 |
| CVE-2026-44084 | HIGH | 7.5 | 2026-10-15 | An authorization bypass through user-controlled key vulnerability has been reported to aff | QNAP Systems Inc. Video Station | 受影响版本 < 5.8.8，请升级到修复版本。 |
| CVE-2026-47786 | 待定 | 待定 | 2026-10-15 | An OS command injection vulnerability has been reported to affect HybridDesk Station. If e | QNAP Systems Inc. HybridDesk Station | 受影响版本 < 4.3.4，请升级到修复版本。 |
| CVE-2026-47790 | 待定 | 待定 | 2026-10-15 | A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a | QNAP Systems Inc. QuFTP Service | 受影响版本 < 1.6.5，请升级到修复版本。 |
| CVE-2026-50612 | 待定 | 待定 | 2026-10-15 | An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagi | QNAP Systems Inc. QuMagie | 受影响版本 < 2.9.2，请升级到修复版本。 |
| CVE-2026-34015 | MEDIUM | 6.5 | 2026-10-15 | A path traversal vulnerability has been reported to affect Video Station. If a remote atta | QNAP Systems Inc. Video Station | 受影响版本 < 5.8.8，请升级到修复版本。 |
| CVE-2026-39989 | 待定 | 待定 | 2026-10-15 | A server-side request forgery (SSRF) vulnerability has been reported to affect Download St | QNAP Systems Inc. Download Station | 受影响版本 < 5.11.2.321，请升级到修复版本。 |
| CVE-2026-39991 | 待定 | 待定 | 2026-10-15 | A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If | QNAP Systems Inc. Notes Station 3 | 受影响版本 < 3.9.12，请升级到修复版本。 |
| CVE-2026-39997 | 待定 | 待定 | 2026-10-15 | A missing authentication for critical function vulnerability has been reported to affect H | QNAP Systems Inc. HybridDesk Station | 受影响版本 < 4.2.22，请升级到修复版本。 |
| CVE-2026-41541 | 待定 | 待定 | 2026-10-15 | An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync | QNAP Systems Inc. Qsync Central | 受影响版本 < 5.3.0.2，请升级到修复版本。 |
| CVE-2026-41545 | 待定 | 待定 | 2026-10-15 | A relative path traversal vulnerability has been reported to affect QuMagie. If a remote a | QNAP Systems Inc. QuMagie | 受影响版本 < 2.9.1，请升级到修复版本。 |
| CVE-2026-26245 | HIGH | 8.8 | 2026-10-15 | A SQL injection vulnerability has been reported to affect Video Station. If a remote attac | QNAP Systems Inc. Video Station | 受影响版本 < 5.8.8，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。