首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45534 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-84860 | HIGH | 8.8 | 2026-09-16 | ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authorization Bypass Spring | Scada-LTS | 请参考厂商官方公告并升级修复。官方说明：https://www.tenable.com/security/researc |
| CVE-2026-84859 | MEDIUM | 6.5 | 2026-09-16 | ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Blind SQL Injecti | Scada-LTS | 请参考厂商官方公告并升级修复。官方说明：https://www.tenable.com/security/researc |
| CVE-2026-84858 | HIGH | 8.8 | 2026-09-16 | ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execu | Scada-LTS | 请参考厂商官方公告并升级修复。官方说明：https://www.tenable.com/security/researc |
| CVE-2026-82964 | HIGH | 8.8 | 2026-09-16 | Improper preservation of permissions in the Avast sandbox minifilter driver (aswSnx.sys) o | Gen Digital Avast Free Antivirus, Avast | 受影响版本 < 26.8，请升级到修复版本。 |
| CVE-2026-82410 | 待定 | 待定 | 2026-09-16 | Pocketbase is an open source web backend written in go. Prior to 0.22.48 and 0.39.7, Pocke | pocketbase | 请参考厂商官方公告并升级修复。官方说明：https://github.com/pocketbase/pocketbase |
| CVE-2026-80274 | HIGH | 7.5 | 2026-09-16 | If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authorita | ISC BIND 9 | 受影响版本 ≤ 9.20.27-S1，请升级到修复版本。 |
| CVE-2026-79651 | HIGH | 7.5 | 2026-09-16 | A flaw was found in the theme localization endpoints of the keycloak-services component, w | Red Hat Red Hat build of Keycloak 26.4, | 受影响版本 < *，请升级到修复版本。 |
| CVE-2026-77412 | 待定 | 待定 | 2026-09-16 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readField in read.go reads | rabbitmq amqp091-go | 请参考厂商官方公告并升级修复。官方说明：https://github.com/rabbitmq/amqp091-go/c |
| CVE-2026-77411 | 待定 | 待定 | 2026-09-16 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readLongstr in read.go ret | rabbitmq amqp091-go | 请参考厂商官方公告并升级修复。官方说明：https://github.com/rabbitmq/amqp091-go/c |
| CVE-2026-77410 | 待定 | 待定 | 2026-09-16 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.recvContent in cha | rabbitmq amqp091-go | 请参考厂商官方公告并升级修复。官方说明：https://github.com/rabbitmq/amqp091-go/c |
| CVE-2026-77409 | 待定 | 待定 | 2026-09-16 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.dispatch in channe | rabbitmq amqp091-go | 请参考厂商官方公告并升级修复。官方说明：https://github.com/rabbitmq/amqp091-go/c |
| CVE-2026-77408 | 待定 | 待定 | 2026-09-16 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, the writeShortstr function | rabbitmq amqp091-go | 请参考厂商官方公告并升级修复。官方说明：https://github.com/rabbitmq/amqp091-go/c |
| CVE-2026-77407 | 待定 | 待定 | 2026-09-16 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, PlainAuth values defined i | rabbitmq amqp091-go | 请参考厂商官方公告并升级修复。官方说明：https://github.com/rabbitmq/amqp091-go/c |
| CVE-2026-77406 | 待定 | 待定 | 2026-09-16 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.Qos in channel.go | rabbitmq amqp091-go | 请参考厂商官方公告并升级修复。官方说明：https://github.com/rabbitmq/amqp091-go/c |
| CVE-2026-77405 | 待定 | 待定 | 2026-09-16 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, tlsConfigFromURI in uri.go | rabbitmq amqp091-go | 请参考厂商官方公告并升级修复。官方说明：https://github.com/rabbitmq/amqp091-go/c |
| CVE-2026-77404 | 待定 | 待定 | 2026-09-16 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, URI.String in uri.go conca | rabbitmq amqp091-go | 请参考厂商官方公告并升级修复。官方说明：https://github.com/rabbitmq/amqp091-go/c |
| CVE-2026-77403 | 待定 | 待定 | 2026-09-16 | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Connection.openTune in con | rabbitmq amqp091-go | 请参考厂商官方公告并升级修复。官方说明：https://github.com/rabbitmq/amqp091-go/c |
| CVE-2026-77401 | MEDIUM | 6.8 | 2026-09-16 | Zope AccessControl provides a general security framework for use in Zope. Prior to 7.4, ap | zopefoundation AccessControl | 请参考厂商官方公告并升级修复。官方说明：https://github.com/zopefoundation/Access |
| CVE-2026-77119 | MEDIUM | 5.9 | 2026-09-16 | A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity pro | ISC BIND 9 | 受影响版本 ≤ 9.20.27-S1，请升级到修复版本。 |
| CVE-2026-76825 | HIGH | 8.4 | 2026-09-16 | RestrictedPython is a tool that helps define a subset of the Python language for accepting | zopefoundation RestrictedPython | 请参考厂商官方公告并升级修复。官方说明：https://github.com/zopefoundation/Restri |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。