首页 / 漏洞情报库
🛡️ 漏洞情报库(CVE 查询与修复方法)
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息,含漏洞说明、受影响产品、修复方法(补丁/升级版本)。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报(每周一篇)
共 46044 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-81999 | HIGH | 8.7 | 2026-09-22 | Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vul | Adobe AEM 6.5 Forms JEE, Adobe AEM 6.5 L | 受影响版本 ≤ 6.5 LTS SP2,请升级到修复版本。 |
| CVE-2026-81998 | HIGH | 7.8 | 2026-09-22 | Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could resul | Adobe Substance3D - Modeler | 受影响版本 ≤ 1.22.6,请升级到修复版本。 |
| CVE-2026-81995 | CRITICAL | 9.1 | 2026-09-22 | Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerabili | Adobe AEM 6.5 Forms JEE, Adobe AEM 6.5 L | 受影响版本 ≤ 6.5 LTS SP2,请升级到修复版本。 |
| CVE-2026-79906 | HIGH | 7.8 | 2026-09-22 | Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could resul | Adobe Substance3D - Modeler | 受影响版本 ≤ 1.22.6,请升级到修复版本。 |
| CVE-2026-77558 | HIGH | 7.5 | 2026-09-22 | A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerabi | Ubiquiti Inc Dream Machines, Ubiquiti In | 受影响版本 < 5.1.26,请升级到修复版本。 |
| CVE-2026-77556 | HIGH | 7.5 | 2026-09-22 | A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerabi | Ubiquiti Inc Dream Machines, Ubiquiti In | 受影响版本 < 5.1.26,请升级到修复版本。 |
| CVE-2026-77555 | HIGH | 7.5 | 2026-09-22 | A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerab | Ubiquiti Inc Dream Machines, Ubiquiti In | 受影响版本 < 5.1.26,请升级到修复版本。 |
| CVE-2026-77544 | HIGH | 7.5 | 2026-09-22 | A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerab | Ubiquiti Inc Dream Machines, Ubiquiti In | 受影响版本 < 5.1.26,请升级到修复版本。 |
| CVE-2026-77399 | MEDIUM | 6.5 | 2026-09-22 | icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. Fr | collective icalendar | 请参考厂商官方公告并升级修复。官方说明:https://github.com/collective/icalendar/ |
| CVE-2026-77272 | MEDIUM | 5.4 | 2026-09-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence | sooperset mcp-atlassian | 请参考厂商官方公告并升级修复。官方说明:https://github.com/sooperset/mcp-atlassi |
| CVE-2026-77269 | MEDIUM | 6.5 | 2026-09-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence | sooperset mcp-atlassian | 请参考厂商官方公告并升级修复。官方说明:https://github.com/sooperset/mcp-atlassi |
| CVE-2026-77268 | MEDIUM | 5.5 | 2026-09-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence | sooperset mcp-atlassian | 请参考厂商官方公告并升级修复。官方说明:https://github.com/sooperset/mcp-atlassi |
| CVE-2026-77266 | MEDIUM | 6.5 | 2026-09-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence | sooperset mcp-atlassian | 请参考厂商官方公告并升级修复。官方说明:https://github.com/sooperset/mcp-atlassi |
| CVE-2026-77262 | HIGH | 8.6 | 2026-09-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence | sooperset mcp-atlassian | 请参考厂商官方公告并升级修复。官方说明:https://github.com/sooperset/mcp-atlassi |
| CVE-2026-77259 | HIGH | 7.7 | 2026-09-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence | sooperset mcp-atlassian | 请参考厂商官方公告并升级修复。官方说明:https://github.com/sooperset/mcp-atlassi |
| CVE-2026-77257 | 待定 | 待定 | 2026-09-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence | sooperset mcp-atlassian | 请参考厂商官方公告并升级修复。官方说明:https://github.com/sooperset/mcp-atlassi |
| CVE-2026-77256 | 待定 | 待定 | 2026-09-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence | sooperset mcp-atlassian | 请参考厂商官方公告并升级修复。官方说明:https://github.com/sooperset/mcp-atlassi |
| CVE-2026-77255 | HIGH | 8.6 | 2026-09-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence | sooperset mcp-atlassian | 请参考厂商官方公告并升级修复。官方说明:https://github.com/sooperset/mcp-atlassi |
| CVE-2026-77254 | CRITICAL | 9.1 | 2026-09-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence | sooperset mcp-atlassian | 请参考厂商官方公告并升级修复。官方说明:https://github.com/sooperset/mcp-atlassi |
| CVE-2026-77253 | HIGH | 7.1 | 2026-09-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence | sooperset mcp-atlassian | 请参考厂商官方公告并升级修复。官方说明:https://github.com/sooperset/mcp-atlassi |
💡 说明:数据源为 NVD、CISA(在野利用)、微软等官方公开情报,每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入,描述以英文原版为准,可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索,具体请以厂商官方公告为准。