首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45534 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-20282 | MEDIUM | 4.9 | 2026-09-16 | A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write | Cisco Cisco Identity Services Engine Sof | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2026-20250 | HIGH | 8.6 | 2026-09-16 | A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive | Cisco Cisco Secure Firewall Adaptive Sec | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2026-20249 | HIGH | 8.6 | 2026-09-16 | A vulnerability in the certification authentication feature of Internet Key Exchange versi | Cisco Cisco Secure Firewall Adaptive Sec | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2026-20248 | MEDIUM | 6.8 | 2026-09-16 | A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Secur | Cisco Cisco Secure Firewall Adaptive Sec | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2026-20247 | HIGH | 7.5 | 2026-09-16 | A vulnerability in Cisco ISE could allow an unauthenticated, remote attacker to conduct SQ | Cisco Cisco Identity Services Engine Sof | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2026-20235 | MEDIUM | 4.9 | 2026-09-16 | A vulnerability in the API of Cisco Identity Services Engine (ISE) could allow an authenti | Cisco Cisco Identity Services Engine Sof | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2026-20222 | HIGH | 7.4 | 2026-09-16 | A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security App | Cisco Cisco Secure Firewall Adaptive Sec | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2026-20154 | HIGH | 8.6 | 2026-09-16 | A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Sec | Cisco Cisco Secure Firewall Adaptive Sec | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2026-20135 | HIGH | 8.6 | 2026-09-16 | A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD | Cisco Cisco Secure Firewall Threat Defen | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2026-20121 | MEDIUM | 5.3 | 2026-09-16 | A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation | Cisco Cisco Secure Firewall Adaptive Sec | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2026-20120 | MEDIUM | 5.8 | 2026-09-16 | A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation | Cisco Cisco Secure Firewall Adaptive Sec | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2026-20072 | MEDIUM | 4.9 | 2026-09-16 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenti | Cisco Cisco Identity Services Engine Sof | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2026-20071 | LOW | 3.8 | 2026-09-16 | A vulnerability in the SSID bring-your-own-device (BYOD) onboarding workflow of Cisco ISE | Cisco Cisco Identity Services Engine Sof | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2025-56566 | 待定 | 待定 | 2026-09-16 | MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/RIFTI-Offensive-Secur |
| CVE-2025-56565 | 待定 | 待定 | 2026-09-16 | DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/RIFTI-Offensive-Secur |
| CVE-2025-56563 | CRITICAL | 9.8 | 2026-09-16 | A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tr | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/RIFTI-Offensive-Secur |
| CVE-2026-92808 | 待定 | 待定 | 2026-09-16 | A server-side request forgery (SSRF) vulnerability exists in the UnifiedLogin service of A | Altium Altium Enterprise Server | 受影响版本 < 8.1.1，请升级到修复版本。 |
| CVE-2026-92526 | MEDIUM | 6.3 | 2026-09-16 | A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown | itsourcecode Leave Management System | 请参考厂商官方公告并升级修复。官方说明：https://github.com/ltranquility/submit_r |
| CVE-2026-92475 | MEDIUM | 5.3 | 2026-09-16 | A weakness has been identified in GPAC 26.08-DEV. This impacts the function wait_for_heade | n/a GPAC | 请参考厂商官方公告并升级修复。官方说明：https://github.com/gpac/gpac/ |
| CVE-2026-92474 | LOW | 3.3 | 2026-09-16 | A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gf_inline | n/a GPAC | 请参考厂商官方公告并升级修复。官方说明：https://github.com/gpac/gpac/ |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。