首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45444 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-53957 | HIGH | 7.7 | 2026-09-15 | Contentful MCP Server is a Model Context Protocol server for the Contentful Management API | contentful contentful-mcp-server, @conte | 请参考厂商官方公告并升级修复。官方说明：https://github.com/contentful/contentful |
| CVE-2026-52724 | 待定 | 待定 | 2026-09-15 | Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernet | kumahq kuma | 请参考厂商官方公告并升级修复。官方说明：https://github.com/kumahq/kuma/commit/2d |
| CVE-2026-50166 | 待定 | 待定 | 2026-09-15 | Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernet | kumahq kuma | 请参考厂商官方公告并升级修复。官方说明：https://github.com/kumahq/kuma/commit/2d |
| CVE-2026-49446 | MEDIUM | 6.1 | 2026-09-15 | Cosmos provides users the ability self-host a home server by acting as a secure gateway to | azukaar Cosmos-Server | 请参考厂商官方公告并升级修复。官方说明：https://github.com/azukaar/Cosmos-Server |
| CVE-2026-49254 | 待定 | 待定 | 2026-09-15 | Dragonfly is an open source P2P-based file distribution and image acceleration system. Pri | dragonflyoss dragonfly | 请参考厂商官方公告并升级修复。官方说明：https://github.com/dragonflyoss/dragonfl |
| CVE-2026-48987 | MEDIUM | 6.5 | 2026-09-15 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev1 | pyload | 请参考厂商官方公告并升级修复。官方说明：https://github.com/pyload/pyload/commit/ |
| CVE-2026-48737 | MEDIUM | 4.9 | 2026-09-15 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev1 | pyload | 请参考厂商官方公告并升级修复。官方说明：https://github.com/pyload/pyload/commit/ |
| CVE-2026-48722 | MEDIUM | 5.5 | 2026-09-15 | Nextflow is a DSL for data-driven computational pipelines. From 25.09.2-edge until 25.10.6 | nextflow-io nextflow | 请参考厂商官方公告并升级修复。官方说明：https://github.com/nextflow-io/nextflow/ |
| CVE-2026-47780 | 待定 | 待定 | 2026-09-15 | free5GC is an open-source implementation of the 5G core network. In 4.2.3 and earlier, Han | free5gc | 请参考厂商官方公告并升级修复。官方说明：https://github.com/free5gc/free5gc/secur |
| CVE-2026-46495 | 待定 | 待定 | 2026-09-15 | OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.1, the JMX RMI connector in | OpenIdentityPlatform OpenDJ, org.openide | 请参考厂商官方公告并升级修复。官方说明：https://github.com/OpenIdentityPlatform/ |
| CVE-2026-39919 | CRITICAL | 9.8 | 2026-09-15 | Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG | Artifex Software Ghostscript | 受影响版本 < 10.08.0，请升级到修复版本。 |
| CVE-2026-25827 | LOW | 2.3 | 2026-09-15 | An issue was discovered in Keyfactor SignServer before 7.6.0. A number of properties were | n/a | 请参考厂商官方公告并升级修复。官方说明：https://keyfactor.com |
| CVE-2026-25826 | 待定 | 待定 | 2026-09-15 | An issue was discovered in Keyfactor SignServer before 7.6.0. The attribute ATTRIBUTESFILE | n/a | 请参考厂商官方公告并升级修复。官方说明：https://keyfactor.com |
| CVE-2026-25825 | 待定 | 待定 | 2026-09-15 | An issue was discovered in Keyfactor SignServer before 7.6.0. The output file to which Sig | n/a | 请参考厂商官方公告并升级修复。官方说明：https://keyfactor.com |
| CVE-2026-77179 | 待定 | 待定 | 2026-09-15 | On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks w | Docker Docker Sandboxes | 受影响版本 < 0.42.0，请升级到修复版本。 |
| CVE-2026-16141 | HIGH | 8.1 | 2026-09-15 | OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unaut | OpenBMC phosphor-net-ipmid | 受影响版本 ≤ ba6efc502e6b1fabb8ed1ca677ae5eedd64b6361，请升级到修复版本。 |
| CVE-2026-16140 | HIGH | 8.8 | 2026-09-15 | OpenBMC's IPMI implementation, phosphor-net-ipmid, is vulnerable to a logic flaw where the | OpenBMC phosphor-net-ipmid | 受影响版本 ≤ ba6efc502e6b1fabb8ed1ca677ae5eedd64b6361，请升级到修复版本。 |
| CVE-2026-92079 | 待定 | 待定 | 2026-09-15 | Mitigation bypass in the Widget: Win32 component. This vulnerability was fixed in Firefox | Mozilla Firefox, Mozilla Thunderbird | 受影响版本 ≤ *，请升级到修复版本。 |
| CVE-2026-92078 | 待定 | 待定 | 2026-09-15 | Denial-of-service in the Security component. This vulnerability was fixed in Firefox 156, | Mozilla Firefox, Mozilla Thunderbird | 受影响版本 ≤ *，请升级到修复版本。 |
| CVE-2026-92077 | 待定 | 待定 | 2026-09-15 | Denial-of-service in the SVG component. This vulnerability was fixed in Firefox 156, Firef | Mozilla Firefox, Mozilla Thunderbird | 受影响版本 ≤ *，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。