首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45450 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-91842 | MEDIUM | 4.1 | 2026-09-15 | A vulnerability has been found in OpenBankProject OBP-API up to 1.10.1. This impacts the f | OpenBankProject OBP-API | 请参考厂商官方公告并升级修复。官方说明：https://github.com/OpenBankProject/OBP-A |
| CVE-2026-91836 | LOW | 2.8 | 2026-09-15 | A flaw has been found in OpenClaw ClawScan up to 0.1.6. This affects an unknown function o | OpenClaw ClawScan | 请参考厂商官方公告并升级修复。官方说明：https://github.com/openclaw/clawscan/ |
| CVE-2026-91835 | LOW | 2.8 | 2026-09-15 | A vulnerability was detected in OpenClaw ClawScan up to 0.1.6. The impacted element is the | OpenClaw ClawScan | 请参考厂商官方公告并升级修复。官方说明：https://github.com/openclaw/clawscan/ |
| CVE-2026-90650 | HIGH | 7.2 | 2026-09-15 | The MotoPress Hotel Booking plugin for WordPress is vulnerable to Stored Cross-Site Script | jetmonsters MotoPress Hotel Booking | 受影响版本 ≤ 6.2.4，请升级到修复版本。 |
| CVE-2026-90439 | MEDIUM | 6.5 | 2026-09-15 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. Wh | F5 NGINX Plus, F5 NGINX Open Source | 受影响版本 < 1.30.5，请升级到修复版本。 |
| CVE-2026-89025 | HIGH | 7.5 | 2026-09-15 | Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the i | Belden Hirschmann HiOS Switch Platform | 受影响版本 ≤ 10.3.07，请升级到修复版本。 |
| CVE-2026-88618 | MEDIUM | 6.5 | 2026-09-15 | 1024-lab SmartAdmin v3.30.0 contains a stored cross-site scripting vulnerability in its fi | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/1024-lab/smart-admin |
| CVE-2026-88617 | CRITICAL | 9.8 | 2026-09-15 | SmartAdmin v3.30.0 contains an authorization flaw in the configuration query endpoint. Thi | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/1024-lab/smart-admin |
| CVE-2026-88616 | HIGH | 8.8 | 2026-09-15 | An issue in RuoYi-Vue-Plus 6.0.0 allows a remote attacker to execute arbitrary code via th | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/dromara/RuoYi-Vue-Plu |
| CVE-2026-79551 | 待定 | 待定 | 2026-09-15 | Tenda Technology Co., Ltd NVR_4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded | n/a | 请参考厂商官方公告并升级修复。官方说明：http://tenda.com |
| CVE-2026-79425 | HIGH | 8.1 | 2026-09-15 | An authenticated Server-Side Request Forgery (SSRF) in the /adminapi/file/online_upload co | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/crmeb/CRMEB |
| CVE-2026-79303 | 待定 | 待定 | 2026-09-15 | kaiten from 57.192.20 to before 57.214.26 is vulnerable to SQL Injection. Dynamic SQL stat | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/4ybrick/CVE-2026-7930 |
| CVE-2026-63696 | CRITICAL | 9.1 | 2026-09-15 | Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Wi | Dell SmartFabric OS10 Software | 受影响版本 < 10.6.1.3，请升级到修复版本。 |
| CVE-2026-63695 | CRITICAL | 9.8 | 2026-09-15 | Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vu | Dell SmartFabric OS10 Software | 受影响版本 < 10.6.1.3，请升级到修复版本。 |
| CVE-2026-61549 | 待定 | 待定 | 2026-09-15 | Woodpecker is a CI/CD engine. From 1.0.0 until 3.16.0, pipeline/backend/kubernetes/backend | woodpecker-ci woodpecker | 请参考厂商官方公告并升级修复。官方说明：https://github.com/woodpecker-ci/woodpec |
| CVE-2026-59971 | CRITICAL | 10 | 2026-09-15 | MySQL MCP Server is a Model Context Protocol server that enables secure interaction with M | designcomputer mysql_mcp_server | 请参考厂商官方公告并升级修复。官方说明：https://github.com/designcomputer/mysql_ |
| CVE-2026-57586 | HIGH | 8.6 | 2026-09-15 | CodeRAG is a lightweight semantic code search and distillation utility for AI coding agent | naranor agent-coderag | 请参考厂商官方公告并升级修复。官方说明：https://github.com/naranor/agent-coderag |
| CVE-2026-55650 | MEDIUM | 4.4 | 2026-09-15 | Outerbase Studio is a lightweight browser-based database GUI supporting PostgreSQL, MySQL, | outerbase studio | 请参考厂商官方公告并升级修复。官方说明：https://github.com/outerbase/studio/comm |
| CVE-2026-55617 | 待定 | 待定 | 2026-09-15 | Hydro is a next-generation high-performance online judge platform. From 4.10.4 until 5.0.2 | hydro-dev Hydro | 请参考厂商官方公告并升级修复。官方说明：https://github.com/hydro-dev/Hydro/commi |
| CVE-2026-55178 | HIGH | 7.5 | 2026-09-15 | GeoLens is a self-hosted geospatial data catalog with semantic search, OGC and STAC APIs, | geolens-io geolens | 请参考厂商官方公告并升级修复。官方说明：https://github.com/geolens-io/geolens/co |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。