首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45444 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-90850 | LOW | 2.4 | 2026-09-15 | A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this | PHPGurukul Hostel Management System | 请参考厂商官方公告并升级修复。官方说明：https://github.com/usernamevnq/CVEs/issu |
| CVE-2026-90849 | HIGH | 7.3 | 2026-09-15 | A security vulnerability has been detected in SourceCodester College Notes Gallery Managem | SourceCodester College Notes Gallery Man | 请参考厂商官方公告并升级修复。官方说明：https://github.com/akaiwen/cve/issues/1 |
| CVE-2026-90848 | MEDIUM | 4.3 | 2026-09-15 | A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknow | Governikus AusweisApp | 请参考厂商官方公告并升级修复。官方说明：https://vuldb.com/cve/CVE-2026-90848 |
| CVE-2026-91752 | HIGH | 7.5 | 2026-09-15 | GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the p | GNU libextractor | 受影响版本 < 1.15，请升级到修复版本。 |
| CVE-2026-91751 | HIGH | 8.3 | 2026-09-15 | Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and new_id parameters in | flextype | 受影响版本 ≤ 1.0.0-alpha.3，请升级到修复版本。 |
| CVE-2026-91750 | MEDIUM | 6.5 | 2026-09-15 | WeKnora before 0.7.0 fails to re-validate HTTP redirect targets in the POST /api/v1/knowle | Tencent WeKnora | 受影响版本 < 0.7.0，请升级到修复版本。 |
| CVE-2026-90847 | CRITICAL | 9.1 | 2026-09-15 | A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unkno | EFM ipTIME C200E | 请参考厂商官方公告并升级修复。官方说明：https://drive.google.com/file/d/19WVo2tO |
| CVE-2026-90846 | HIGH | 7.3 | 2026-09-15 | A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is | PHPGurukul Daily Expense Tracker System | 请参考厂商官方公告并升级修复。官方说明：https://github.com/usernamevnq/CVEs/issu |
| CVE-2026-90845 | LOW | 3.5 | 2026-09-15 | A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects s | PHPGurukul Daily Expense Tracker System | 请参考厂商官方公告并升级修复。官方说明：https://github.com/usernamevnq/CVEs/issu |
| CVE-2026-90844 | HIGH | 7.3 | 2026-09-15 | A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1. This vulnerab | PHPGurukul Daily Expense Tracker System | 请参考厂商官方公告并升级修复。官方说明：https://github.com/usernamevnq/CVEs/issu |
| CVE-2026-90843 | HIGH | 8.3 | 2026-09-15 | A security vulnerability has been detected in SabyasachiRana WebMap up to 8b95fe4dc301a3c0 | SabyasachiRana WebMap | 请参考厂商官方公告并升级修复。官方说明：https://calledstriker.gitbook.io/blog/se |
| CVE-2026-85657 | MEDIUM | 5.4 | 2026-09-15 | The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Auth | publishpress Co-Authors, Multiple Author | 受影响版本 ≤ 4.15.0，请升级到修复版本。 |
| CVE-2026-85575 | MEDIUM | 6.4 | 2026-09-15 | The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with | roxnor ShopEngine Elementor WooCommerce | 受影响版本 ≤ 4.9.5，请升级到修复版本。 |
| CVE-2026-90842 | LOW | 3.7 | 2026-09-15 | A weakness has been identified in PHPGurukul Blood Donor Management System 1.0. Affected b | PHPGurukul Blood Donor Management System | 请参考厂商官方公告并升级修复。官方说明：https://github.com/usernamevnq/CVEs/issu |
| CVE-2026-90841 | HIGH | 7.3 | 2026-09-15 | A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affec | PHPGurukul Blood Donor Management System | 请参考厂商官方公告并升级修复。官方说明：https://github.com/usernamevnq/CVEs/issu |
| CVE-2026-90840 | HIGH | 7.3 | 2026-09-15 | A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected i | PHPGurukul Blood Donor Management System | 请参考厂商官方公告并升级修复。官方说明：https://github.com/usernamevnq/CVEs/issu |
| CVE-2026-91201 | MEDIUM | 5.4 | 2026-09-14 | DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard target origin in | arc53 DocsGPT | 受影响版本 ≤ 0.20.0，请升级到修复版本。 |
| CVE-2026-91200 | HIGH | 8.8 | 2026-09-14 | DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from | devspace | 受影响版本 ≤ 6.3.21，请升级到修复版本。 |
| CVE-2026-91199 | MEDIUM | 5 | 2026-09-14 | Refly through 1.1.0 contains a server-side request forgery vulnerability in the POST /v1/m | refly-ai refly | 受影响版本 ≤ 1.1.0，请升级到修复版本。 |
| CVE-2026-91198 | MEDIUM | 5.3 | 2026-09-14 | GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse | growthbook | 受影响版本 ≤ 5.0.1，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。