首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45678 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-92993 | MEDIUM | 6.3 | 2026-09-17 | A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is th | Dromara mayfly-go | 请参考厂商官方公告并升级修复。官方说明：https://gist.github.com/xufengnian/b9566 |
| CVE-2026-92943 | HIGH | 8.1 | 2026-09-17 | Improper validation of certificate with host mismatch in the MQTT client TLS connection la | AWS AWSIoTPythonSDK | 受影响版本 ≤ 1.6.0，请升级到修复版本。 |
| CVE-2026-92758 | MEDIUM | 5.5 | 2026-09-17 | If logging mode is set to DEBUG or a malformed MongoDB connection string is used, applicat | MongoDB Inc. MongoDB Entity Framework Co | 受影响版本 < 10.0.4，请升级到修复版本。 |
| CVE-2026-92757 | MEDIUM | 5.5 | 2026-09-17 | Applications built on MongoDB Entity Framework Core Provider which place a database name i | MongoDB Inc. MongoDB Entity Framework Co | 受影响版本 < 10.0.4，请升级到修复版本。 |
| CVE-2026-92756 | MEDIUM | 5.5 | 2026-09-17 | Applications built on MongoDB Entity Framework Core Provider which combine independent enc | MongoDB Inc. MongoDB Entity Framework Co | 受影响版本 < 10.0.3，请升级到修复版本。 |
| CVE-2026-57846 | 待定 | 待定 | 2026-09-17 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | ||
| CVE-2026-54752 | CRITICAL | 9.6 | 2026-09-17 | NetBox Device Type Library is a collection of community-sourced device type definitions fo | netbox-community devicetype-library | 请参考厂商官方公告并升级修复。官方说明：https://github.com/netbox-community/devi |
| CVE-2026-54716 | HIGH | 7.5 | 2026-09-17 | Valhalla is an open source routing engine and accompanying libraries for use with OpenStre | valhalla | 请参考厂商官方公告并升级修复。官方说明：https://github.com/valhalla/valhalla/sec |
| CVE-2026-54692 | HIGH | 7.8 | 2026-09-17 | SAIL is a cross-platform library for loading and saving images with support for animation, | HappySeaFox sail | 请参考厂商官方公告并升级修复。官方说明：https://github.com/HappySeaFox/sail/comm |
| CVE-2026-54627 | CRITICAL | 9.8 | 2026-09-17 | SAIL is a cross-platform library for loading and saving images with support for animation, | HappySeaFox sail | 请参考厂商官方公告并升级修复。官方说明：https://github.com/HappySeaFox/sail/comm |
| CVE-2026-54626 | CRITICAL | 9.8 | 2026-09-17 | SAIL is a cross-platform library for loading and saving images with support for animation, | HappySeaFox sail | 请参考厂商官方公告并升级修复。官方说明：https://github.com/HappySeaFox/sail/comm |
| CVE-2026-54618 | CRITICAL | 9.4 | 2026-09-17 | Obsidian Web MCP is a secure remote MCP server for Obsidian vaults. Prior to 0.2.0, /oauth | jimprosser obsidian-web-mcp | 请参考厂商官方公告并升级修复。官方说明：https://github.com/jimprosser/obsidian-w |
| CVE-2026-54594 | 待定 | 待定 | 2026-09-17 | OmniBlocks is a monorepo for the OmniBlocks project. Prior to the June 6, 2026 workflow re | OmniBlocks monorepo | 请参考厂商官方公告并升级修复。官方说明：https://github.com/OmniBlocks/monorepo/c |
| CVE-2026-54495 | MEDIUM | 4.3 | 2026-09-17 | The OpenFeature Operator allows users to expose feature flags to applications. In version | open-feature open-feature-operator | 请参考厂商官方公告并升级修复。官方说明：https://github.com/open-feature/open-fea |
| CVE-2026-50285 | HIGH | 7.5 | 2026-09-17 | Pomerium is an identity and context-aware access proxy. Prior to 0.32.8, decodeQueryString | pomerium | 请参考厂商官方公告并升级修复。官方说明：https://github.com/pomerium/pomerium/com |
| CVE-2026-50125 | HIGH | 7.5 | 2026-09-17 | MKP is a Model Context Protocol server for Kubernetes. Prior to 0.4.1, cmd/server/main.go | StacklokLabs mkp | 请参考厂商官方公告并升级修复。官方说明：https://github.com/StacklokLabs/mkp/comm |
| CVE-2026-45726 | HIGH | 7.6 | 2026-09-17 | Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. From 1.3.0 until 1 | siderolabs omni | 请参考厂商官方公告并升级修复。官方说明：https://github.com/siderolabs/omni/commi |
| CVE-2026-45723 | LOW | 2.7 | 2026-09-17 | Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and | siderolabs omni | 请参考厂商官方公告并升级修复。官方说明：https://github.com/siderolabs/omni/commi |
| CVE-2026-45720 | HIGH | 7 | 2026-09-17 | Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and | siderolabs omni | 请参考厂商官方公告并升级修复。官方说明：https://github.com/siderolabs/omni/commi |
| CVE-2026-92992 | MEDIUM | 6.3 | 2026-09-17 | A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected | Dromara mayfly-go | 请参考厂商官方公告并升级修复。官方说明：https://gist.github.com/xufengnian/b9566 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。