首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45492 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-61554 | HIGH | 7.5 | 2026-09-15 | emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, th | jm33-m0 emp3r0r | 请参考厂商官方公告并升级修复。官方说明：https://github.com/jm33-m0/emp3r0r/relea |
| CVE-2026-54544 | HIGH | 7.2 | 2026-09-15 | Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API | ShaneIsrael fireshare | 请参考厂商官方公告并升级修复。官方说明：https://github.com/ShaneIsrael/fireshare |
| CVE-2026-54337 | CRITICAL | 9.8 | 2026-09-15 | Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argu | ShaneIsrael fireshare | 请参考厂商官方公告并升级修复。官方说明：https://github.com/ShaneIsrael/fireshare |
| CVE-2026-19655 | MEDIUM | 6.5 | 2026-09-15 | On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) r | Arista Networks EOS | 受影响版本 ≤ 4.33.9M，请升级到修复版本。 |
| CVE-2026-18426 | 待定 | 待定 | 2026-09-15 | Concrete CMS 9.0.0 through 9.5.2 did not enforce a block-level edit-permission check on th | Concrete CMS | 受影响版本 ≤ 9.5.2，请升级到修复版本。 |
| CVE-2026-92240 | 待定 | 待定 | 2026-09-15 | A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP respo | Mozilla Thunderbird | 受影响版本 ≤ *，请升级到修复版本。 |
| CVE-2026-92239 | 待定 | 待定 | 2026-09-15 | A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnera | Mozilla Thunderbird | 受影响版本 ≤ *，请升级到修复版本。 |
| CVE-2026-92238 | 待定 | 待定 | 2026-09-15 | A maliciously constructed mail header could lead to multiple fields being parsed as one, o | Mozilla Thunderbird | 受影响版本 ≤ *，请升级到修复版本。 |
| CVE-2026-89040 | CRITICAL | 9.8 | 2026-09-15 | Tencent Mass Service Engine in Cluster (MSEC) allows a remote, unauthenticated attacker to | Tencent Mass Service Engine in Cluster ( | 受影响版本 < *，请升级到修复版本。 |
| CVE-2026-89027 | MEDIUM | 6.5 | 2026-09-15 | miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains | miniOrange JWT Authentication for WP RES | 受影响版本 < 4.8.0，请升级到修复版本。 |
| CVE-2026-88975 | HIGH | 7.5 | 2026-09-15 | Http4s is a Scala interface for HTTP services. Prior to 0.23.37 and 1.0.0-M48, Ember’s HTT | http4s | 请参考厂商官方公告并升级修复。官方说明：https://github.com/http4s/http4s/commit/ |
| CVE-2026-88922 | MEDIUM | 6.7 | 2026-09-15 | The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalati | HashiCorp Shared library | 受影响版本 < 2.2.4，请升级到修复版本。 |
| CVE-2026-88743 | 待定 | 待定 | 2026-09-15 | Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in director tag | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/hekk-one/CVE |
| CVE-2026-88742 | 待定 | 待定 | 2026-09-15 | Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in the client a | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/hekk-one/CVE |
| CVE-2026-87289 | HIGH | 7.5 | 2026-09-15 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webse | Oracle Corporation Helidon | 受影响版本 ≤ 4.5.4，请升级到修复版本。 |
| CVE-2026-87288 | HIGH | 8.1 | 2026-09-15 | Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The | Oracle Corporation Oracle GraalVM | 请参考厂商官方公告并升级修复。官方说明：https://www.oracle.com/security-alerts/o |
| CVE-2026-87287 | HIGH | 8.1 | 2026-09-15 | Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The | Oracle Corporation Oracle GraalVM | 请参考厂商官方公告并升级修复。官方说明：https://www.oracle.com/security-alerts/o |
| CVE-2026-87286 | HIGH | 8.1 | 2026-09-15 | Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The | Oracle Corporation Oracle GraalVM | 请参考厂商官方公告并升级修复。官方说明：https://www.oracle.com/security-alerts/o |
| CVE-2026-87285 | MEDIUM | 6 | 2026-09-15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor | Oracle Corporation Oracle VM VirtualBox | 请参考厂商官方公告并升级修复。官方说明：https://www.oracle.com/security-alerts/c |
| CVE-2026-87284 | LOW | 3.2 | 2026-09-15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Cor | Oracle Corporation Oracle VM VirtualBox | 请参考厂商官方公告并升级修复。官方说明：https://www.oracle.com/security-alerts/c |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。