首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45450 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-55863 | MEDIUM | 5.3 | 2026-09-15 | motionEye (mEye) is an online interface for a piece of software called "motion," which is | motioneye-project motioneye | 请参考厂商官方公告并升级修复。官方说明：https://github.com/motioneye-project/mot |
| CVE-2026-55692 | HIGH | 7.5 | 2026-09-15 | The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev | StarCitizenWiki mediawiki-extensions-Emb | 请参考厂商官方公告并升级修复。官方说明：https://github.com/StarCitizenWiki/media |
| CVE-2026-55691 | HIGH | 8.6 | 2026-09-15 | The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev | StarCitizenWiki mediawiki-extensions-Emb | 请参考厂商官方公告并升级修复。官方说明：https://github.com/StarCitizenWiki/media |
| CVE-2026-55690 | HIGH | 7.5 | 2026-09-15 | The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev | StarCitizenWiki mediawiki-extensions-Emb | 请参考厂商官方公告并升级修复。官方说明：https://github.com/StarCitizenWiki/media |
| CVE-2026-55149 | HIGH | 7.5 | 2026-09-15 | Vouch Proxy is an SSO and OAuth/OIDC login solution for Nginx using the auth_request modul | vouch vouch-proxy | 请参考厂商官方公告并升级修复。官方说明：https://github.com/vouch/vouch-proxy/com |
| CVE-2026-54561 | MEDIUM | 6.2 | 2026-09-15 | MCP Memory Keeper is an MCP server for persistent context management in AI coding assistan | mkreyman mcp-memory-keeper | 请参考厂商官方公告并升级修复。官方说明：https://github.com/mkreyman/mcp-memory-k |
| CVE-2026-54503 | MEDIUM | 4.3 | 2026-09-15 | plone.app.textfield provides a zope.schema-style field type called RichText for storing a | plone plone.app.textfield | 请参考厂商官方公告并升级修复。官方说明：https://github.com/plone/plone.app.textf |
| CVE-2026-53710 | CRITICAL | 10 | 2026-09-15 | MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. | IBM mcp-context-forge | 请参考厂商官方公告并升级修复。官方说明：https://github.com/IBM/mcp-context-forge |
| CVE-2026-53658 | 待定 | 待定 | 2026-09-15 | Fabric CA is a Certificate Authority for Hyperledger Fabric. Prior to 1.5.21, when fabric- | hyperledger fabric-ca | 请参考厂商官方公告并升级修复。官方说明：https://github.com/hyperledger/fabric-ca |
| CVE-2026-46488 | 待定 | 待定 | 2026-09-15 | motionEye (mEye) is an online interface for a piece of software called "motion," which is | motioneye-project motioneye | 请参考厂商官方公告并升级修复。官方说明：https://github.com/motioneye-project/mot |
| CVE-2026-44778 | 待定 | 待定 | 2026-09-15 | Inspektor Gadget is a set of tools and framework for data collection and system inspection | inspektor-gadget | 请参考厂商官方公告并升级修复。官方说明：https://github.com/inspektor-gadget/insp |
| CVE-2026-21588 | 待定 | 待定 | 2026-09-15 | This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, | Atlassian Confluence Data Center | 请参考厂商官方公告并升级修复。官方说明：https://confluence.atlassian.com/pages/v |
| CVE-2026-21587 | 待定 | 待定 | 2026-09-15 | This High severity Improper Authorization vulnerability was introduced in version 11.3.0 o | Atlassian Jira Service Management Data C | 请参考厂商官方公告并升级修复。官方说明：https://confluence.atlassian.com/pages/v |
| CVE-2026-21586 | 待定 | 待定 | 2026-09-15 | This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, | Atlassian Confluence Data Center | 请参考厂商官方公告并升级修复。官方说明：https://confluence.atlassian.com/pages/v |
| CVE-2026-19780 | HIGH | 8.8 | 2026-09-15 | Koha Eval Code Injection Remote Code Execution Vulnerability. This vulnerability allows re | Koha | 请参考厂商官方公告并升级修复。官方说明：https://www.zerodayinitiative.com/adviso |
| CVE-2026-18111 | 待定 | 待定 | 2026-09-15 | Concrete CMS 9 before 9.5.3 was vulnerable to stored cross-site scripting (XSS) in the Fea | Concrete CMS | 受影响版本 ≤ 9.5.2，请升级到修复版本。 |
| CVE-2026-18110 | 待定 | 待定 | 2026-09-15 | Concrete CMS 9 (9.0.0 through 9.5.2) does not perform an authorization check on the user s | Concrete CMS | 受影响版本 ≤ 9.5.2，请升级到修复版本。 |
| CVE-2024-58385 | CRITICAL | 9.8 | 2026-09-15 | Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability in the fillbacksetti | Yonyou U8 CRM | 请参考厂商官方公告并升级修复。官方说明：https://cn-sec.com/archives/3234745.html |
| CVE-2023-54398 | CRITICAL | 9.8 | 2026-09-15 | Yonyou U8 Cloud contains an unauthenticated Java deserialization vulnerability in the nc.i | Yonyou U8 Cloud | 请参考厂商官方公告并升级修复。官方说明：https://avd.aliyun.com/detail?id=AVD-202 |
| CVE-2026-91992 | MEDIUM | 5.9 | 2026-09-15 | Tornado before 6.5.7 contains a credential leak vulnerability in CurlAsyncHTTPClient where | tornadoweb tornado | 受影响版本 < 6.5.7，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。