首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45358 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-15924 | MEDIUM | 5.9 | 2026-09-14 | Zephyr's TLS socket layer in subsys/net/lib/sockets/sockets_tls.c keeps a single process-g | zephyrproject zephyr | 受影响版本 < 4.4.2，请升级到修复版本。 |
| CVE-2026-15887 | MEDIUM | 5.4 | 2026-09-14 | IBM WebSphere Application Server 9.0, and 8.5 is affected by blind server-side request for | IBM WebSphere Application Server | 请参考厂商官方公告并升级修复。官方说明：https://www.ibm.com/support/pages/node/7 |
| CVE-2026-15634 | MEDIUM | 6.5 | 2026-09-14 | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liber | IBM WebSphere Application Server | 请参考厂商官方公告并升级修复。官方说明：https://www.ibm.com/support/pages/node/7 |
| CVE-2026-15412 | MEDIUM | 6.5 | 2026-09-14 | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liber | IBM WebSphere Application Server | 请参考厂商官方公告并升级修复。官方说明：https://www.ibm.com/support/pages/node/7 |
| CVE-2026-15396 | MEDIUM | 6.5 | 2026-09-14 | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liber | IBM WebSphere Application Server | 请参考厂商官方公告并升级修复。官方说明：https://www.ibm.com/support/pages/node/7 |
| CVE-2026-90812 | MEDIUM | 4.3 | 2026-09-14 | A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. | cosmicstack-labs mercury-agent | 请参考厂商官方公告并升级修复。官方说明：https://github.com/cosmicstack-labs/merc |
| CVE-2026-90811 | LOW | 3.3 | 2026-09-14 | A weakness has been identified in cosmicstack-labs mercury-agent up to 1.2.0. This affects | cosmicstack-labs mercury-agent | 请参考厂商官方公告并升级修复。官方说明：https://github.com/cosmicstack-labs/merc |
| CVE-2026-90810 | MEDIUM | 6.3 | 2026-09-14 | A security flaw has been discovered in cosmicstack-labs mercury-agent up to 1.1.13. The im | cosmicstack-labs mercury-agent | 请参考厂商官方公告并升级修复。官方说明：https://github.com/cosmicstack-labs/merc |
| CVE-2026-90809 | HIGH | 7.3 | 2026-09-14 | A vulnerability was identified in HKUDS nanobot up to 0.2.1. The affected element is the f | HKUDS nanobot | 请参考厂商官方公告并升级修复。官方说明：https://github.com/HKUDS/nanobot/ |
| CVE-2026-90808 | MEDIUM | 6.3 | 2026-09-14 | A vulnerability was determined in HKUDS nanobot up to 0.2.1. Impacted is the function Exec | HKUDS nanobot | 请参考厂商官方公告并升级修复。官方说明：https://github.com/HKUDS/nanobot/ |
| CVE-2026-89023 | HIGH | 8.6 | 2026-09-14 | ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authoriz | ThemeAtelier Domain For Sale | 受影响版本 < 3.5.2，请升级到修复版本。 |
| CVE-2026-89021 | MEDIUM | 6.9 | 2026-09-14 | MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container p | MikroTik RouterOS | 受影响版本 < 7.24.2，请升级到修复版本。 |
| CVE-2026-89020 | MEDIUM | 4.3 | 2026-09-14 | MikroTik RouterOS before 7.23.4 (long-term) and 7.24.2 (stable) contains a stack-based buf | MikroTik RouterOS | 受影响版本 < 7.24.2，请升级到修复版本。 |
| CVE-2026-86830 | HIGH | 7.2 | 2026-09-14 | Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM | AWS iam-identity-center-team | 受影响版本 < 1.5.1，请升级到修复版本。 |
| CVE-2026-82519 | MEDIUM | 4.3 | 2026-09-14 | Really Simple Security plugin for WordPress before 9.8.2 contains a missing authorization | reallysimpleplugins Really Simple Securi | 受影响版本 < 9.8.2，请升级到修复版本。 |
| CVE-2026-82049 | 待定 | 待定 | 2026-09-14 | In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vuln | Python Software Foundation CPython | 受影响版本 < 3.14.0，请升级到修复版本。 |
| CVE-2026-82035 | HIGH | 7.1 | 2026-09-14 | PyMuPDF through 1.28.2, fixed in commit b2c8f3a, contains a path traversal vulnerability i | PyMuPDF | 受影响版本 ≤ 1.8.2，请升级到修复版本。 |
| CVE-2026-77884 | 待定 | 待定 | 2026-09-14 | Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachab | Brain Trust Gallery - Private Photo Vaul | 请参考厂商官方公告并升级修复。官方说明：https://fluidattacks.com/advisories/suic |
| CVE-2026-59178 | CRITICAL | 9.8 | 2026-09-14 | ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. | esphome device-builder | 请参考厂商官方公告并升级修复。官方说明：https://github.com/esphome/device-builde |
| CVE-2026-19543 | MEDIUM | 6.2 | 2026-09-14 | IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and AR | IBM Common Licensing | 请参考厂商官方公告并升级修复。官方说明：https://www.ibm.com/support/pages/node/7 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。