首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45678 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-54460 | CRITICAL | 9.8 | 2026-09-17 | OpenReception's appointment booking software provides an end-to-end encrypted appointment | open-reception appointment-booking-softw | 请参考厂商官方公告并升级修复。官方说明：https://github.com/open-reception/appoin |
| CVE-2026-54355 | 待定 | 待定 | 2026-09-17 | MapServer is a system for developing web-based GIS applications. From 6.0 until 8.6.4, Map | MapServer | 请参考厂商官方公告并升级修复。官方说明：https://github.com/MapServer/MapServer/c |
| CVE-2026-54354 | HIGH | 8.2 | 2026-09-17 | MapServer is a system for developing web-based GIS applications. Prior to 8.6.4, MapServer | MapServer | 请参考厂商官方公告并升级修复。官方说明：https://github.com/MapServer/MapServer/c |
| CVE-2026-54339 | HIGH | 7.7 | 2026-09-17 | Glean is a self-hosted RSS reader and personal knowledge management tool. Prior to 0.2.6, | LeslieLeung glean | 请参考厂商官方公告并升级修复。官方说明：https://github.com/LeslieLeung/glean/com |
| CVE-2026-54237 | 待定 | 待定 | 2026-09-17 | Wavelog is web-based amateur radio logging software. From 1.8 until 2.4.2, Wavelog exposes | wavelog | 请参考厂商官方公告并升级修复。官方说明：https://github.com/wavelog/wavelog/commi |
| CVE-2026-52483 | HIGH | 8.8 | 2026-09-17 | The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV route | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/FelpM/MitraStar_GPT-2 |
| CVE-2026-50277 | HIGH | 7.5 | 2026-09-17 | dd-trace-cpp is the Datadog distributed tracing library for C++. Prior to 2.1.0, dd-trace- | DataDog dd-trace-cpp | 请参考厂商官方公告并升级修复。官方说明：https://github.com/DataDog/dd-trace-cpp/ |
| CVE-2026-50275 | HIGH | 7.5 | 2026-09-17 | The Datadog PHP Tracer provides application performance monitoring and distributed tracing | DataDog dd-trace-php | 请参考厂商官方公告并升级修复。官方说明：https://github.com/DataDog/dd-trace-php/ |
| CVE-2026-50022 | MEDIUM | 5.8 | 2026-09-17 | Metacat is data repository software that helps researchers preserve, share, and discover d | NCEAS metacat | 请参考厂商官方公告并升级修复。官方说明：https://github.com/NCEAS/metacat/commit/ |
| CVE-2026-49137 | 待定 | 待定 | 2026-09-17 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | ||
| CVE-2026-48977 | 待定 | 待定 | 2026-09-17 | OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, Open | openslide | 请参考厂商官方公告并升级修复。官方说明：https://github.com/openslide/openslide/c |
| CVE-2026-45143 | CRITICAL | 9 | 2026-09-17 | Chamilo LMS is an open-source learning management system. From 2.0.0 through at least 2.1. | chamilo chamilo-lms | 请参考厂商官方公告并升级修复。官方说明：https://github.com/chamilo/chamilo-lms/c |
| CVE-2026-45140 | CRITICAL | 9.8 | 2026-09-17 | Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allo | chamilo chamilo-lms | 请参考厂商官方公告并升级修复。官方说明：https://github.com/chamilo/chamilo-lms/c |
| CVE-2026-15815 | HIGH | 8.8 | 2026-09-17 | Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting p | Grafana Grafana OSS, Grafana Grafana Ent | 受影响版本 ≤ 13.2.1，请升级到修复版本。 |
| CVE-2026-11314 | 待定 | 待定 | 2026-09-17 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | ||
| CVE-2026-10594 | 待定 | 待定 | 2026-09-17 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | ||
| CVE-2025-62167 | 待定 | 待定 | 2026-09-17 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-33626 | ||
| CVE-2025-55787 | CRITICAL | 9.8 | 2026-09-17 | In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists. | n/a | 请参考厂商官方公告并升级修复。官方说明：https://gist.github.com/NSW111/77ce627fa |
| CVE-2021-3030 | MEDIUM | 6.1 | 2026-09-17 | Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by impr | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/athosgonzaga/CVE-2021 |
| CVE-2026-93337 | HIGH | 7.8 | 2026-09-17 | NetworkManager-l2tp contains an improper input validation vulnerability that allows local | nm-l2tp NetworkManager-l2tp | 受影响版本 ≤ 1.52.4，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。