首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45492 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-86462 | CRITICAL | 9.1 | 2026-09-16 | Apache Airflow FAB provider: changing a user's password through the Admin user-edit PATCH | Apache Software Foundation Apache Airflo | 受影响版本 < 3.9.0，请升级到修复版本。 |
| CVE-2026-86338 | 待定 | 待定 | 2026-09-16 | Ash field_policies are documented to protect against filter-based information disclosure: | ash-project ash | 受影响版本 < b3d4503241f3deacb5ceb955e10a4fa927da0f67，请升级到修复版本。 |
| CVE-2026-85501 | MEDIUM | 5.3 | 2026-09-16 | Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researc | NLnet Labs Unbound | 受影响版本 < 1.26.1，请升级到修复版本。 |
| CVE-2026-82720 | MEDIUM | 5.9 | 2026-09-16 | NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability wh | NLnet Labs Unbound | 受影响版本 < 1.26.1，请升级到修复版本。 |
| CVE-2026-82717 | 待定 | 待定 | 2026-09-16 | In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can pr | NLnet Labs Unbound | 受影响版本 < 1.26.1，请升级到修复版本。 |
| CVE-2026-82311 | CRITICAL | 9.8 | 2026-09-16 | Apache Airflow FAB provider: resetting a user's password does not delete that user's exist | Apache Software Foundation Apache Airflo | 受影响版本 < 3.9.0，请升级到修复版本。 |
| CVE-2026-81642 | 待定 | 待定 | 2026-09-16 | In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC | NLnet Labs Unbound | 受影响版本 < 1.26.1，请升级到修复版本。 |
| CVE-2026-81634 | HIGH | 7.5 | 2026-09-16 | In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP | NLnet Labs Unbound | 受影响版本 < 1.26.1，请升级到修复版本。 |
| CVE-2026-80225 | MEDIUM | 5.3 | 2026-09-16 | In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is | NLnet Labs Unbound | 受影响版本 < 1.26.1，请升级到修复版本。 |
| CVE-2026-78227 | MEDIUM | 6.5 | 2026-09-16 | NLnet Labs Unbound 1.22.0 up to and including 1.26.1, has a use-after-free vulnerability w | NLnet Labs Unbound | 受影响版本 < 1.26.1，请升级到修复版本。 |
| CVE-2026-77955 | MEDIUM | 4.4 | 2026-09-16 | In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configu | NLnet Labs Unbound | 受影响版本 < 1.26.1，请升级到修复版本。 |
| CVE-2026-77860 | LOW | 3.7 | 2026-09-16 | In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expi | NLnet Labs Unbound | 受影响版本 < 1.26.1，请升级到修复版本。 |
| CVE-2026-73464 | HIGH | 8.8 | 2026-09-16 | On affected platforms running Arista EOS with gRPC Network Management Interface (gNMI) ena | Arista Networks EOS | 受影响版本 ≤ 4.36.0.1F，请升级到修复版本。 |
| CVE-2026-73463 | MEDIUM | 5.3 | 2026-09-16 | On affected platforms running Arista EOS, when multiple gRPC Network Security Interface (g | Arista Networks EOS | 受影响版本 ≤ 4.31.10M，请升级到修复版本。 |
| CVE-2026-73461 | HIGH | 8 | 2026-09-16 | On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC r | Arista Networks EOS | 受影响版本 ≤ 4.36.0.1F，请升级到修复版本。 |
| CVE-2026-73454 | HIGH | 8.1 | 2026-09-16 | On affected platforms running Arista EOS with gRPC Network Security Interface (gNSI) Crede | Arista Networks EOS | 受影响版本 ≤ 4.36.0.1F，请升级到修复版本。 |
| CVE-2026-73445 | MEDIUM | 4.9 | 2026-09-16 | On affected platforms running Arista EOS, an issue with the gRPC Network Security Interfac | Arista Networks EOS | 受影响版本 < 4.32.0F，请升级到修复版本。 |
| CVE-2026-73439 | HIGH | 7.5 | 2026-09-16 | On affected platforms running Arista EOS, if OpenConfig is configured and running a gNMI s | Arista Networks EOS | 受影响版本 ≤ 4.36.0.1F，请升级到修复版本。 |
| CVE-2026-2380 | HIGH | 7.4 | 2026-09-16 | On affected platforms running Arista EOS with OpenConfig-related services (i.e., gNMI, gNS | Arista Networks EOS | 受影响版本 < 4.33.0F，请升级到修复版本。 |
| CVE-2026-92355 | 待定 | 待定 | 2026-09-16 | In affected versions of Octopus Server, a user with permission to modify non built-in exte | Octopus Deploy Octopus Server | 受影响版本 < 2026.3.11816，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。