首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45534 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-91843 | CRITICAL | 9.8 | 2026-09-16 | A stack overflow during the unauthenticated login process may allow an attacker to run arb | checkpoint Quantum Security Management | 请参考厂商官方公告并升级修复。官方说明：https://support.checkpoint.com/results/s |
| CVE-2026-89030 | MEDIUM | 4.3 | 2026-09-16 | Adenion Blog2Social plugin for WordPress before 9.1.0 exposes the email addresses of all r | Adenion Blog2Social | 受影响版本 < 9.1.0，请升级到修复版本。 |
| CVE-2026-89029 | MEDIUM | 4.3 | 2026-09-16 | Adenion Blog2Social plugin for WordPress before 9.1.0 allows low-privileged users to enume | Adenion Blog2Social | 受影响版本 < 9.1.0，请升级到修复版本。 |
| CVE-2026-89028 | HIGH | 7.5 | 2026-09-16 | MikroTik RouterOS before 7.24 contains a heap memory corruption vulnerability in the users | MikroTik RouterOS | 受影响版本 ≤ 7.11.2，请升级到修复版本。 |
| CVE-2026-85104 | 待定 | 待定 | 2026-09-16 | In Sooma 2GEN brain stimulator, an attacker within Bluetooth range can make unauthenticate | Sooma Sooma tDCS Home Therapy | 请参考厂商官方公告并升级修复。官方说明：https://shop.soomamedical.com/pages/all- |
| CVE-2026-81736 | HIGH | 7.5 | 2026-09-16 | If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried | ISC BIND 9 | 受影响版本 ≤ 9.20.27-S1，请升级到修复版本。 |
| CVE-2026-81563 | HIGH | 7.5 | 2026-09-16 | A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HT | ISC BIND 9 | 受影响版本 ≤ 9.20.27-S1，请升级到修复版本。 |
| CVE-2026-78301 | MEDIUM | 5.8 | 2026-09-16 | A malformed zone may contain an NS or DNAME node above its origin, which `named` treats as | ISC BIND 9 | 受影响版本 ≤ 9.20.27-S1，请升级到修复版本。 |
| CVE-2026-77692 | HIGH | 7.5 | 2026-09-16 | An attacker can cause `named` to abort by sending a crafted DNS-over-HTTPS request with a | ISC BIND 9 | 受影响版本 ≤ 9.20.27-S1，请升级到修复版本。 |
| CVE-2026-73177 | 待定 | 待定 | 2026-09-16 | Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity | Advantech EKI-1242IEIMS, Advantech EKI-1 | 受影响版本 ≤ 1.06.01，请升级到修复版本。 |
| CVE-2026-61598 | 待定 | 待定 | 2026-09-16 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust- | djust-org djust | 请参考厂商官方公告并升级修复。官方说明：https://github.com/djust-org/djust/relea |
| CVE-2026-61590 | HIGH | 7.4 | 2026-09-16 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust- | djust-org djust | 请参考厂商官方公告并升级修复。官方说明：https://github.com/djust-org/djust/relea |
| CVE-2026-56719 | MEDIUM | 6.5 | 2026-09-16 | MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspac | MikroTik RouterOS | 受影响版本 ≤ 7.11.2，请升级到修复版本。 |
| CVE-2026-19941 | MEDIUM | 5.9 | 2026-09-16 | An inapplicable NSEC record may be accepted by a `named` resolver as proof that no wildcar | ISC BIND 9 | 受影响版本 ≤ 9.20.27-S1，请升级到修复版本。 |
| CVE-2026-19667 | HIGH | 7.5 | 2026-09-16 | If an attacker-controlled authoritative server can produce a negative answer that is exact | ISC BIND 9 | 受影响版本 ≤ 9.20.27-S1，请升级到修复版本。 |
| CVE-2026-19662 | MEDIUM | 5.9 | 2026-09-16 | An attacker may be able to cause a `named` resolver to abort. The attack requires inducing | ISC BIND 9 | 受影响版本 ≤ 9.20.27-S1，请升级到修复版本。 |
| CVE-2026-92361 | MEDIUM | 4.3 | 2026-09-16 | A security vulnerability has been detected in ag-ui-protocol ag-ui 1.0. This affects an un | ag-ui-protocol ag-ui | 请参考厂商官方公告并升级修复。官方说明：https://github.com/ag-ui-protocol/ag-ui/ |
| CVE-2026-92360 | MEDIUM | 6.3 | 2026-09-16 | A weakness has been identified in ag-ui-protocol ag-ui 1.0. The impacted element is the fu | ag-ui-protocol ag-ui | 请参考厂商官方公告并升级修复。官方说明：https://github.com/ag-ui-protocol/ag-ui/ |
| CVE-2026-92359 | LOW | 3.1 | 2026-09-16 | A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. The affected element is | ag-ui-protocol ag-ui | 请参考厂商官方公告并升级修复。官方说明：https://github.com/ag-ui-protocol/ag-ui/ |
| CVE-2026-88817 | 待定 | 待定 | 2026-09-16 | An authenticated, non-guest user of Curiosity Workspace could enroll themselves as an admi | Curiosity GmbH Curiosity Workspace | 请参考厂商官方公告并升级修复。官方说明：https://docs.curiosity.ai/security/advis |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。