首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45492 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-86108 | HIGH | 8 | 2026-09-16 | Insufficient validation of inputs supplied through affected VeloCloud Edge management and | Arista Networks VeloCloud Edge | 受影响版本 < 5.2.0，请升级到修复版本。 |
| CVE-2026-73450 | MEDIUM | 6.9 | 2026-09-16 | On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an u | Arista Networks EOS | 受影响版本 < 4.33.0，请升级到修复版本。 |
| CVE-2026-92299 | HIGH | 7.4 | 2026-09-16 | @jitsi/electron-sdk before 10.0.5 exposes getDesktopSources() via contextBridge without re | Jitsi @jitsi/electron-sdk | 受影响版本 < 10.0.5，请升级到修复版本。 |
| CVE-2026-92298 | MEDIUM | 4.8 | 2026-09-16 | EspoCRM through 10.0.8 uses PHP's rand() function to generate tokens for lead-capture opt- | EspoCRM | 受影响版本 ≤ 10.0.8，请升级到修复版本。 |
| CVE-2026-92217 | MEDIUM | 6.3 | 2026-09-16 | A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the functio | a2ui-project a2ui | 请参考厂商官方公告并升级修复。官方说明：https://github.com/a2ui-project/a2ui/ |
| CVE-2026-92216 | MEDIUM | 4.3 | 2026-09-16 | A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the | a2ui-project a2ui | 请参考厂商官方公告并升级修复。官方说明：https://github.com/a2ui-project/a2ui/ |
| CVE-2026-92215 | HIGH | 7.3 | 2026-09-16 | A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnera | a2ui-project a2ui | 请参考厂商官方公告并升级修复。官方说明：https://github.com/a2ui-project/a2ui/ |
| CVE-2026-92214 | LOW | 3.5 | 2026-09-16 | A flaw has been found in a2ui-project a2ui up to 0.10.7. Affected is an unknown function o | a2ui-project a2ui | 请参考厂商官方公告并升级修复。官方说明：https://github.com/a2ui-project/a2ui/ |
| CVE-2026-92213 | MEDIUM | 5.5 | 2026-09-16 | A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function | a2ui-project a2ui | 请参考厂商官方公告并升级修复。官方说明：https://github.com/a2ui-project/a2ui/ |
| CVE-2026-92184 | MEDIUM | 6.3 | 2026-09-16 | A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the functio | ag-ui-protocol ag-ui | 请参考厂商官方公告并升级修复。官方说明：https://github.com/ag-ui-protocol/ag-ui/ |
| CVE-2026-73460 | MEDIUM | 6.1 | 2026-09-16 | On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthent | Arista Networks EOS | 受影响版本 ≤ 4.36.1F，请升级到修复版本。 |
| CVE-2026-73459 | HIGH | 7.4 | 2026-09-16 | On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacke | Arista Networks EOS | 受影响版本 ≤ 4.36.1F，请升级到修复版本。 |
| CVE-2026-73446 | HIGH | 7.4 | 2026-09-16 | On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, a | Arista Networks EOS | 受影响版本 < 4.32.0F，请升级到修复版本。 |
| CVE-2026-15640 | 待定 | 待定 | 2026-09-16 | Under certain conditions a valid SAML IdP response may be used to impersonate another Secr | Delinea Secret Server (On-Prem) | 受影响版本 ≤ 12.1.3，请升级到修复版本。 |
| CVE-2026-15639 | 待定 | 待定 | 2026-09-16 | An attacker can craft a malicious link that, if used by a legitimate user, may cause the u | Delinea Secret Server (On-Prem) | 受影响版本 ≤ 11.9.48，请升级到修复版本。 |
| CVE-2026-15638 | 待定 | 待定 | 2026-09-16 | An unauthenticated user with access to Secret Server could leverage a padding oracle to de | Delinea Secret Server (On-Prem) | 受影响版本 ≤ 12.1.3，请升级到修复版本。 |
| CVE-2026-85893 | HIGH | 8.8 | 2026-09-15 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to eleva | Microsoft Microsoft Edge (Chromium-based | 受影响版本 < 153.0.4234.32，请升级到修复版本。 微软官方漏洞（Microsoft Edge (Chrom |
| CVE-2026-69486 | HIGH | 8.8 | 2026-09-15 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attac | Microsoft Microsoft Edge (Chromium-based | 受影响版本 < 153.0.4234.32，请升级到修复版本。 微软官方漏洞（Microsoft Edge (Chrom |
| CVE-2025-11395 | MEDIUM | 5.5 | 2026-09-15 | A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman l | Red Hat Red Hat Enterprise Linux 10, Red | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-92259 | MEDIUM | 5.5 | 2026-09-15 | Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attacke | Samsung Opensource Escargot | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Samsung/escargot/pull |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。