首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 46478 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-100610 | HIGH | 7.5 | 2026-09-26 | Flowise through 3.1.4 exposes GET /api/v1/upsert-history/:id and PATCH /api/v1/upsert-hist | FlowiseAI Flowise | 受影响版本 ≤ 3.1.4，请升级到修复版本。 |
| CVE-2026-100609 | MEDIUM | 6.8 | 2026-09-26 | Flowise (npm packages `flowise` and `flowise-components`) through 3.1.4 looks up credentia | FlowiseAI Flowise | 受影响版本 ≤ 3.1.4，请升级到修复版本。 |
| CVE-2026-100608 | HIGH | 8.3 | 2026-09-26 | Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When t | FlowiseAI Flowise | 受影响版本 ≤ 3.1.4，请升级到修复版本。 |
| CVE-2026-100607 | HIGH | 7.7 | 2026-09-26 | Flowise through 3.1.4 resolves SSO and local-password users solely by email without storin | FlowiseAI Flowise | 受影响版本 ≤ 3.1.4，请升级到修复版本。 |
| CVE-2026-100606 | HIGH | 7.7 | 2026-09-26 | Flowise through 3.1.4 (Enterprise/platform mode with SSO enabled) contains an authenticati | FlowiseAI Flowise | 受影响版本 ≤ 3.1.4，请升级到修复版本。 |
| CVE-2026-100605 | HIGH | 7.1 | 2026-09-26 | Flowise through 3.1.4 contains missing route-level RBAC checks on chat message endpoints t | FlowiseAI Flowise | 受影响版本 ≤ 3.1.4，请升级到修复版本。 |
| CVE-2026-100604 | MEDIUM | 5.4 | 2026-09-26 | ClawHub (openclaw/clawhub) contains an incorrect authorization vulnerability in the ClawHu | openclaw clawhub | 受影响版本 < 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650，请升级到修复版本。 |
| CVE-2026-100603 | MEDIUM | 5.4 | 2026-09-26 | ClawHub (openclaw/clawhub) application/backend contains a flaw in the skill report moderat | openclaw clawhub | 受影响版本 < 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650，请升级到修复版本。 |
| CVE-2026-100602 | MEDIUM | 6.5 | 2026-09-26 | ClawHub (openclaw/clawhub application/backend) contains a missing authorization check in t | openclaw clawhub | 受影响版本 < 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650，请升级到修复版本。 |
| CVE-2026-100601 | MEDIUM | 5.3 | 2026-09-26 | ClawHub (openclaw/clawhub) application/backend contains a server-side request forgery vuln | openclaw clawhub | 受影响版本 < 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650，请升级到修复版本。 |
| CVE-2026-100600 | MEDIUM | 5.3 | 2026-09-26 | ClawHub (the openclaw/clawhub application/backend) does not bind anonymous HTTP API reques | openclaw clawhub | 受影响版本 < 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650，请升级到修复版本。 |
| CVE-2026-100315 | HIGH | 7.3 | 2026-09-26 | A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfb | mathurvishal CloudClassroom-PHP-Project | 请参考厂商官方公告并升级修复。官方说明：https://github.com/vinniboy021-blip/Advi |
| CVE-2026-100314 | HIGH | 7.3 | 2026-09-26 | A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up t | mathurvishal CloudClassroom-PHP-Project | 请参考厂商官方公告并升级修复。官方说明：https://github.com/vinniboy021-blip/Advi |
| CVE-2026-100313 | MEDIUM | 4.3 | 2026-09-26 | A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098b | mathurvishal CloudClassroom-PHP-Project | 请参考厂商官方公告并升级修复。官方说明：https://github.com/vinniboy021-blip/Advi |
| CVE-2026-98163 | 待定 | 待定 | 2026-09-26 | In the Linux kernel, the following vulnerability has been resolved: cgroup: Avoid iterati | Linux | 受影响版本 ≤ *，请升级到修复版本。 |
| CVE-2026-100312 | MEDIUM | 6.3 | 2026-09-26 | A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project up to 5dade | mathurvishal CloudClassroom-PHP-Project | 请参考厂商官方公告并升级修复。官方说明：https://github.com/JaconiasDev/Advisory- |
| CVE-2026-100311 | LOW | 3.5 | 2026-09-26 | A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098b | mathurvishal CloudClassroom-PHP-Project | 请参考厂商官方公告并升级修复。官方说明：https://github.com/raffarj/CVE/tree/main |
| CVE-2026-96533 | MEDIUM | 5.8 | 2026-09-26 | The Testimonials Widget WordPress plugin through 4.0.4 does not validate a user-supplied U | Unknown Testimonials Widget | 受影响版本 ≤ 4.0.4，请升级到修复版本。 |
| CVE-2026-96532 | HIGH | 7.5 | 2026-09-26 | The Testimonials Widget WordPress plugin through 4.0.4 does not perform a capability or ow | Unknown Testimonials Widget | 受影响版本 ≤ 4.0.4，请升级到修复版本。 |
| CVE-2026-96531 | MEDIUM | 6.8 | 2026-09-26 | The Optimole WordPress plugin before 4.2.13 does not escape unrecognized attributes of it | Unknown Optimole | 受影响版本 < 4.2.13，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。