首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 46149 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-19072 | CRITICAL | 9.9 | 2026-09-24 | Velociraptor stores the compiled VQL in the hunt object internally to avoid having to reco | Rapid7 Velociraptor | 受影响版本 < 0.77.2，请升级到修复版本。 |
| CVE-2026-97311 | MEDIUM | 4.3 | 2026-09-24 | A flaw was found in the Admin REST API of Keycloak, an identity and access management solu | Red Hat Red Hat Build of Keycloak, Red H | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-7169 | 待定 | 待定 | 2026-09-24 | a vulnerability involving an unchecked search path element in Evope Collector, versions pr | Evope Collector | 请参考厂商官方公告并升级修复。官方说明：https://www.incibe.es/en/incibe-cert/not |
| CVE-2026-4806 | MEDIUM | 6.5 | 2026-09-24 | The Custom Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthoriz | alexvtn Custom Thank You Page for WooCom | 受影响版本 ≤ 1.1.2，请升级到修复版本。 |
| CVE-2026-3253 | MEDIUM | 4.3 | 2026-09-24 | The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to unauthorize | mailerlite MailerLite – Signup forms (of | 受影响版本 ≤ 1.7.21，请升级到修复版本。 |
| CVE-2026-19532 | MEDIUM | 5.3 | 2026-09-24 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | HAVELSAN Inc. Liman MYS | 受影响版本 < 2.3.4-1124，请升级到修复版本。 |
| CVE-2026-16302 | MEDIUM | 4.3 | 2026-09-24 | The Spectra Legacy – Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Info | brainstormforce Spectra Legacy – Gutenbe | 受影响版本 ≤ 2.20.0，请升级到修复版本。 |
| CVE-2026-97179 | MEDIUM | 4.3 | 2026-09-24 | A security vulnerability has been detected in O2OA up to 9.5.3/10.0.2. This vulnerability | n/a O2OA | 请参考厂商官方公告并升级修复。官方说明：https://github.com/2H-K/myvuls/issues/3 |
| CVE-2026-79680 | 待定 | 待定 | 2026-09-24 | Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC | qt | 受影响版本 < 6.11.3，请升级到修复版本。 |
| CVE-2026-4638 | 待定 | 待定 | 2026-09-24 | PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that mult | Paessler GmbH PRTG Network Monitor | 受影响版本 < 26.2.120.1449，请升级到修复版本。 |
| CVE-2026-92905 | MEDIUM | 5.3 | 2026-09-24 | ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a | Zohocorp ManageEngine EventLog Analyzer, | 受影响版本 < 13071，请升级到修复版本。 |
| CVE-2026-57590 | HIGH | 8.1 | 2026-09-24 | A missing authorization vulnerability exists in the Task Group APIs of Apache DolphinSched | Apache Software Foundation Apache Dolphi | 受影响版本 < 3.4.3，请升级到修复版本。 |
| CVE-2026-4637 | 待定 | 待定 | 2026-09-24 | Paessler PRTG Network Monitor before version 26.2.120.1449 is affected by a reflected Cros | Paessler GmbH PRTG Network Monitor | 受影响版本 < 26.2.120.1449，请升级到修复版本。 |
| CVE-2026-18335 | MEDIUM | 5.4 | 2026-09-24 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vu | themeum Kirki – Freeform Page Builder, W | 受影响版本 ≤ 6.2.0，请升级到修复版本。 |
| CVE-2026-15731 | MEDIUM | 6.4 | 2026-09-24 | The WP Multilang – Translation and Multilingual Plugin plugin for WordPress is vulnerable | magazine3 WP Multilang – Translation and | 受影响版本 ≤ 2.4.31，请升级到修复版本。 |
| CVE-2026-12227 | CRITICAL | 9.8 | 2026-09-24 | The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclu | visualcomposer Visual Composer Website B | 受影响版本 ≤ 45.16.0，请升级到修复版本。 |
| CVE-2026-97185 | HIGH | 7.8 | 2026-09-24 | A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, | Red Hat Red Hat Enterprise Linux 10, Red | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-85682 | HIGH | 8.8 | 2026-09-24 | The YOP Poll plugin for WordPress is vulnerable to Origin Validation Error in all versions | yourownprogrammer YOP Poll | 受影响版本 ≤ 7.0.10，请升级到修复版本。 |
| CVE-2026-78313 | MEDIUM | 6.5 | 2026-09-24 | Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. | Deltaww DIAEnergie | 受影响版本 < 1.11.00.022，请升级到修复版本。 |
| CVE-2026-78312 | CRITICAL | 9.1 | 2026-09-24 | Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. | Deltaww DIAEnergie | 受影响版本 < 1.11.00.022，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。