首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 46044 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-83801 | MEDIUM | 5.4 | 2026-09-22 | Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.37 and | nautobot | 请参考厂商官方公告并升级修复。官方说明：https://github.com/nautobot/nautobot/com |
| CVE-2026-79767 | MEDIUM | 5.5 | 2026-09-22 | Gardener implements the automated management and operation of Kubernetes clusters as a ser | gardener | 请参考厂商官方公告并升级修复。官方说明：https://github.com/gardener/gardener/com |
| CVE-2026-77322 | HIGH | 7.5 | 2026-09-22 | SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.3, WSConnecti | emiago sipgo | 请参考厂商官方公告并升级修复。官方说明：https://github.com/emiago/sipgo/commit/7 |
| CVE-2026-76717 | MEDIUM | 5.3 | 2026-09-22 | A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for t | Hewlett Packard Enterprise (HPE) ALE | 受影响版本 ≤ 5.0.0.0，请升级到修复版本。 |
| CVE-2026-76716 | MEDIUM | 5.3 | 2026-09-22 | Multiple vulnerabilities exist in the Analytics and Location Engine (ALE) that may allow f | Hewlett Packard Enterprise (HPE) ALE | 受影响版本 ≤ 5.0.0.0，请升级到修复版本。 |
| CVE-2026-76715 | HIGH | 7.1 | 2026-09-22 | A vulnerability in an administrative component of Analytics and Location Engine (ALE) is v | Hewlett Packard Enterprise (HPE) ALE | 受影响版本 ≤ 5.0.0.0，请升级到修复版本。 |
| CVE-2026-76714 | HIGH | 7.2 | 2026-09-22 | Vulnerabilities in the Analytics and Location Engine web interface allows remote authentic | Hewlett Packard Enterprise (HPE) ALE | 受影响版本 ≤ 5.0.0.0，请升级到修复版本。 |
| CVE-2026-76713 | HIGH | 7.2 | 2026-09-22 | A vulnerability exists in the maintenance restore functionality of Analytics and Location | Hewlett Packard Enterprise (HPE) ALE | 受影响版本 ≤ 5.0.0.0，请升级到修复版本。 |
| CVE-2026-76712 | HIGH | 7.3 | 2026-09-22 | A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unaut | Hewlett Packard Enterprise (HPE) ALE | 受影响版本 ≤ 5.0.0.0，请升级到修复版本。 |
| CVE-2026-76711 | HIGH | 7.5 | 2026-09-22 | A vulnerability exists in an Analytics and Location Engine (ALE) component where the impac | Hewlett Packard Enterprise (HPE) ALE | 受影响版本 ≤ 5.0.0.0，请升级到修复版本。 |
| CVE-2026-76710 | HIGH | 7.5 | 2026-09-22 | A vulnerability exists in the Analytics and Location Engine (ALE) management interface tha | Hewlett Packard Enterprise (HPE) ALE | 受影响版本 ≤ 5.0.0.0，请升级到修复版本。 |
| CVE-2026-76709 | CRITICAL | 9.8 | 2026-09-22 | A vulnerability exists in the internal administrative component of Analytics and Location | Hewlett Packard Enterprise (HPE) ALE | 受影响版本 ≤ 5.0.0.0，请升级到修复版本。 |
| CVE-2026-76708 | CRITICAL | 9.8 | 2026-09-22 | A vulnerability exists in the Analytics and Location Engine (ALE) where the application an | Hewlett Packard Enterprise (HPE) ALE | 受影响版本 ≤ 5.0.0.0，请升级到修复版本。 |
| CVE-2026-75432 | 待定 | 待定 | 2026-09-22 | An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via th | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/jbeder/yaml-cpp/issue |
| CVE-2026-65829 | MEDIUM | 5.3 | 2026-09-22 | MPXJ is an open source library to read and write project plans from a variety of file form | joniles mpxj | 请参考厂商官方公告并升级修复。官方说明：https://github.com/joniles/mpxj/commit/4 |
| CVE-2026-63628 | 待定 | 待定 | 2026-09-22 | mppx is a TypeScript interface for machine payments protocol. Prior to 0.8.2, the fee-paye | wevm mppx | 请参考厂商官方公告并升级修复。官方说明：https://github.com/wevm/mppx/commit/24dd |
| CVE-2026-63627 | 待定 | 待定 | 2026-09-22 | mppx is a TypeScript interface for machine payments protocol. Prior to 0.8.2, FeePayerPoli | wevm mppx | 请参考厂商官方公告并升级修复。官方说明：https://github.com/wevm/mppx/commit/24dd |
| CVE-2026-63104 | HIGH | 8.1 | 2026-09-22 | Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that all | usekaneo kaneo | 受影响版本 < 2.12.2，请升级到修复版本。 |
| CVE-2026-62985 | HIGH | 7.5 | 2026-09-22 | request-filtering-agent is an http(s).Agent implementation that blocks requests to Private | azu request-filtering-agent | 请参考厂商官方公告并升级修复。官方说明：https://github.com/azu/request-filtering |
| CVE-2026-61570 | HIGH | 7.5 | 2026-09-22 | MPXJ is an open source library to read and write project plans from a variety of file form | joniles mpxj | 请参考厂商官方公告并升级修复。官方说明：https://github.com/joniles/mpxj/commit/6 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。