首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45534 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-92604 | HIGH | 8.1 | 2026-09-16 | Scirius through 3.8.0 contains an arbitrary file write vulnerability in the PCAP filestore | StamusNetworks scirius | 受影响版本 ≤ 3.8.0，请升级到修复版本。 |
| CVE-2026-92416 | MEDIUM | 4.3 | 2026-09-16 | A vulnerability has been found in Open5GS up to 2.8.0. Affected by this issue is the funct | n/a Open5GS | 请参考厂商官方公告并升级修复。官方说明：https://github.com/open5gs/open5gs/ |
| CVE-2026-92413 | MEDIUM | 4.3 | 2026-09-16 | A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Aff | Artifex MuPDF | 请参考厂商官方公告并升级修复。官方说明：https://artifex.com/ |
| CVE-2026-92406 | HIGH | 7.3 | 2026-09-16 | A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The im | SourceCodester Inventory and Monitoring | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Vivi-Xray/Xray-s-cve- |
| CVE-2026-88593 | 待定 | 待定 | 2026-09-16 | kkFileView 5.0.0 through 5.0.2 allows reflected XSS via the /onlinePreview endpoint. The O | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/sg-summer/cve/issues/ |
| CVE-2026-85387 | 待定 | 待定 | 2026-09-16 | Concrete CMS before 9.5.4 re-authorized OAuth REST API requests from the bearer token alon | Concrete CMS | 受影响版本 ≤ 9.5.3，请升级到修复版本。 |
| CVE-2026-84397 | MEDIUM | 5.4 | 2026-09-16 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability | Adobe Adobe Experience Manager as a Clou | 受影响版本 ≤ 6.5.24，请升级到修复版本。 |
| CVE-2026-69147 | MEDIUM | 6.5 | 2026-09-16 | vLLM is an inference and serving engine for large language models. Prior to 0.28.0, reques | vllm-project vllm | 请参考厂商官方公告并升级修复。官方说明：https://github.com/vllm-project/vllm/com |
| CVE-2026-51990 | CRITICAL | 9.8 | 2026-09-16 | An issue in Sogou Sogou Input Method < 16.3.0.3498 (fixed in 16.3.0.3498) allows a remote | n/a | 请参考厂商官方公告并升级修复。官方说明：http://sogou.com |
| CVE-2026-47094 | HIGH | 8.8 | 2026-09-16 | SIMAC MyPHR 1.1 contains an insecure direct object reference (IDOR) vulnerability that all | SIMAC MyPHR | 请参考厂商官方公告并升级修复。官方说明：https://gist.github.com/LnPaulin/33e9b08 |
| CVE-2026-18120 | 待定 | 待定 | 2026-09-16 | Concrete CMS before 9.5.3 exposed a legacy Express entry search endpoint that returned ent | Concrete CMS | 受影响版本 ≤ 9.5.2，请升级到修复版本。 |
| CVE-2026-92603 | MEDIUM | 6.5 | 2026-09-16 | ContiNew Admin through 4.1.0 contains an authorization bypass vulnerability in the persona | continew-org continew-admin | 受影响版本 ≤ 4.1.0，请升级到修复版本。 |
| CVE-2026-92602 | HIGH | 7.1 | 2026-09-16 | TDuck survey form through version 5.3 fails to validate webhook URLs or verify form owners | TDuckCloud tduck-survey-form | 受影响版本 ≤ 5.3，请升级到修复版本。 |
| CVE-2026-92601 | MEDIUM | 6.5 | 2026-09-16 | Guns through 8.3.5 contains an improper access control vulnerability in SysNoticeControlle | stylefeng Guns | 受影响版本 ≤ 8.3.5，请升级到修复版本。 |
| CVE-2026-92600 | MEDIUM | 6.5 | 2026-09-16 | Guns through 8.3.5 contains an information disclosure vulnerability in SysUserController w | stylefeng Guns | 受影响版本 ≤ 8.3.5，请升级到修复版本。 |
| CVE-2026-92405 | HIGH | 7.3 | 2026-09-16 | A security vulnerability has been detected in SourceCodester Inventory and Monitoring Syst | SourceCodester Inventory and Monitoring | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Vivi-Xray/Xray-s-cve- |
| CVE-2026-92402 | MEDIUM | 6.3 | 2026-09-16 | A security flaw has been discovered in ChangeWeDer crm up to c07bd4c97141521af6475034bc585 | ChangeWeDer crm | 请参考厂商官方公告并升级修复。官方说明：https://github.com/ChangeWeDer/crm/ |
| CVE-2026-92401 | HIGH | 7.3 | 2026-09-16 | A vulnerability was identified in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523bee | ChangeWeDer crm | 请参考厂商官方公告并升级修复。官方说明：https://github.com/ChangeWeDer/crm/ |
| CVE-2026-92399 | HIGH | 7.3 | 2026-09-16 | A vulnerability was determined in GPAC 26.07.0. This affects the function rmt_client_handl | n/a GPAC | 请参考厂商官方公告并升级修复。官方说明：https://github.com/gpac/gpac/ |
| CVE-2026-92398 | CRITICAL | 9.1 | 2026-09-16 | A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this issue i | Ruijie RG-EW3000GX | 请参考厂商官方公告并升级修复。官方说明：https://github.com/FoundTL/RG-EW3000GX/b |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。