首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45543 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-20072 | MEDIUM | 4.9 | 2026-09-16 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenti | Cisco Cisco Identity Services Engine Sof | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2026-20071 | LOW | 3.8 | 2026-09-16 | A vulnerability in the SSID bring-your-own-device (BYOD) onboarding workflow of Cisco ISE | Cisco Cisco Identity Services Engine Sof | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2025-56566 | 待定 | 待定 | 2026-09-16 | MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/RIFTI-Offensive-Secur |
| CVE-2025-56565 | 待定 | 待定 | 2026-09-16 | DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/RIFTI-Offensive-Secur |
| CVE-2025-56563 | CRITICAL | 9.8 | 2026-09-16 | A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tr | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/RIFTI-Offensive-Secur |
| CVE-2026-92808 | 待定 | 待定 | 2026-09-16 | A server-side request forgery (SSRF) vulnerability exists in the UnifiedLogin service of A | Altium Altium Enterprise Server | 受影响版本 < 8.1.1，请升级到修复版本。 |
| CVE-2026-92526 | MEDIUM | 6.3 | 2026-09-16 | A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown | itsourcecode Leave Management System | 请参考厂商官方公告并升级修复。官方说明：https://github.com/ltranquility/submit_r |
| CVE-2026-92475 | MEDIUM | 5.3 | 2026-09-16 | A weakness has been identified in GPAC 26.08-DEV. This impacts the function wait_for_heade | n/a GPAC | 请参考厂商官方公告并升级修复。官方说明：https://github.com/gpac/gpac/ |
| CVE-2026-92474 | LOW | 3.3 | 2026-09-16 | A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gf_inline | n/a GPAC | 请参考厂商官方公告并升级修复。官方说明：https://github.com/gpac/gpac/ |
| CVE-2026-89084 | 待定 | 待定 | 2026-09-16 | HP has identified potential security vulnerabilities in the HP Advance software that may e | HP Inc HP AC Print & Scan, HP Inc HP Out | 受影响版本 < |
| CVE-2026-89083 | 待定 | 待定 | 2026-09-16 | HP has identified potential security vulnerabilities in the HP Advance software that may e | HP Inc HP AC Print & Scan, HP Inc HP Out | 受影响版本 < |
| CVE-2026-89082 | 待定 | 待定 | 2026-09-16 | HP has identified potential security vulnerabilities in the HP Advance software that may e | HP Inc HP AC Print & Scan, HP Inc HP Out | 受影响版本 < |
| CVE-2026-88592 | CRITICAL | 9.1 | 2026-09-16 | kkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF). The cross-origin | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/sg-summer/cve/issues/ |
| CVE-2026-87976 | 待定 | 待定 | 2026-09-16 | Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing ex | Apache Software Foundation Apache NiFi R | 受影响版本 ≤ 2.11.0，请升级到修复版本。 |
| CVE-2026-87116 | MEDIUM | 6.5 | 2026-09-16 | Tanium addressed a server-side request forgery vulnerability in Threat Response. | Tanium Threat Response | 受影响版本 < 4.17.292，请升级到修复版本。 |
| CVE-2026-87113 | MEDIUM | 6.3 | 2026-09-16 | Tanium addressed an improper access controls vulnerability in Threat Response. | Tanium Threat Response | 受影响版本 < 4.17.291，请升级到修复版本。 |
| CVE-2026-87105 | HIGH | 8.8 | 2026-09-16 | Tanium addressed a SQL injection vulnerability in Threat Response. | Tanium Threat Response | 受影响版本 < 4.17.289，请升级到修复版本。 |
| CVE-2026-87076 | MEDIUM | 6.5 | 2026-09-16 | Tanium addressed an information disclosure vulnerability in Discover. | Tanium Discover | 受影响版本 < 4.19.114，请升级到修复版本。 |
| CVE-2026-87026 | LOW | 3.8 | 2026-09-16 | Tanium addressed an improper access controls vulnerability in Threat Response. | Tanium Threat Response | 受影响版本 < 4.17.292，请升级到修复版本。 |
| CVE-2026-87024 | HIGH | 7.2 | 2026-09-16 | Tanium addressed a SQL injection vulnerability in Asset. | Tanium Asset | 受影响版本 < 1.39.153，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。