首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45696 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-10841 | MEDIUM | 4.2 | 2026-09-18 | IBM WebSphere Application Server 8.5, 9.0, and Liberty are vulnerable to HTTP request smug | IBM CICS TX Advanced | 请参考厂商官方公告并升级修复。官方说明：https://www.ibm.com/support/pages/node/7 |
| CVE-2026-10751 | HIGH | 7.5 | 2026-09-18 | IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbi | IBM MQ | 受影响版本 ≤ 9.4.5.1 CD，请升级到修复版本。 |
| CVE-2026-10747 | CRITICAL | 10 | 2026-09-18 | IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially | IBM MQ Appliance | 受影响版本 ≤ 10.0.0.1 only，请升级到修复版本。 |
| CVE-2026-10744 | HIGH | 7.5 | 2026-09-18 | IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cau | IBM MQ for HPE NonStop | 受影响版本 ≤ 8.1.0.40，请升级到修复版本。 |
| CVE-2026-10575 | HIGH | 8.8 | 2026-09-18 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially e | IBM MQ | 受影响版本 ≤ 9.4.5.1 CD，请升级到修复版本。 |
| CVE-2026-10030 | HIGH | 7.1 | 2026-09-18 | IBM MQ Console allows authenticated non-administrative users to create and start queue man | IBM MQ | 受影响版本 ≤ 9.4.5.1 CD，请升级到修复版本。 |
| CVE-2026-10027 | HIGH | 8.1 | 2026-09-18 | IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary cod | IBM MQ | 受影响版本 ≤ 9.4.5.1 CD，请升级到修复版本。 |
| CVE-2025-61682 | HIGH | 8.6 | 2026-09-18 | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and | SemanticMediaWiki | 请参考厂商官方公告并升级修复。官方说明：https://github.com/SemanticMediaWiki/Sem |
| CVE-2025-53837 | CRITICAL | 9.9 | 2026-09-18 | XWiki Rendering is a generic rendering system that converts textual input in a given synta | xwiki xwiki-rendering | 请参考厂商官方公告并升级修复。官方说明：https://github.com/xwiki/xwiki-rendering |
| CVE-2025-36421 | MEDIUM | 5.9 | 2026-09-18 | IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in | IBM Controller | 受影响版本 ≤ 11.1.3 FP1，请升级到修复版本。 |
| CVE-2025-36178 | MEDIUM | 5.4 | 2026-09-18 | IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow an aut | IBM Controller | 受影响版本 ≤ 11.1.3 FP1，请升级到修复版本。 |
| CVE-2025-36147 | MEDIUM | 6.1 | 2026-09-18 | IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3. | IBM Financial Transaction Manager for SW | 受影响版本 ≤ 3.2.4.16，请升级到修复版本。 |
| CVE-2025-36076 | MEDIUM | 4.3 | 2026-09-18 | IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensi | IBM Cognos Analytics | 受影响版本 ≤ 12.0.4 FP2，请升级到修复版本。 |
| CVE-2025-36045 | MEDIUM | 4.3 | 2026-09-18 | IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of | IBM TS4300 | 受影响版本 ≤ 1.7.1.1，请升级到修复版本。 |
| CVE-2025-33147 | MEDIUM | 5.9 | 2026-09-18 | IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow | IBM Cognos Analytics | 受影响版本 ≤ 12.0.4 FP2，请升级到修复版本。 |
| CVE-2025-33141 | MEDIUM | 6.5 | 2026-09-18 | IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to o | IBM QRadar | 受影响版本 ≤ 7.5.0 UP15 Interim Fix 006，请升级到修复版本。 |
| CVE-2025-15399 | CRITICAL | 10 | 2026-09-18 | IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and AR | IBM Common Licensing | 请参考厂商官方公告并升级修复。官方说明：https://www.ibm.com/support/pages/node/7 |
| CVE-2025-14754 | HIGH | 8.8 | 2026-09-18 | IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary comman | IBM Cloud Pak for Data | 请参考厂商官方公告并升级修复。官方说明：https://www.ibm.com/support/pages/node/7 |
| CVE-2025-14753 | HIGH | 7.5 | 2026-09-18 | IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the | IBM Cloud Pak for Data | 请参考厂商官方公告并升级修复。官方说明：https://www.ibm.com/support/pages/node/7 |
| CVE-2026-93685 | MEDIUM | 5.4 | 2026-09-18 | A flaw was found in the multicluster-observability-addon. A remote attacker can access a d | Red Hat Red Hat Advanced Cluster Managem | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。