首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45358 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-90796 | MEDIUM | 6.3 | 2026-09-14 | A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects a | itsourcecode Leave Management System | 请参考厂商官方公告并升级修复。官方说明：https://github.com/lincenjun/submit/issu |
| CVE-2026-84445 | 待定 | 待定 | 2026-09-14 | gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers cre | grpc grpc-go | 微软官方漏洞（Mariner）修复：安装 Microsoft 官方补丁，详见 MSRC 更新指南。 |
| CVE-2026-76461 ⚠️ 在野 |
CRITICAL | 9.8 | 2026-09-14 | A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gate | Cisco Cisco Secure Email | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2026-76443 | CRITICAL | 9.8 | 2026-09-14 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | Cisco Cisco Secure Email, Cisco Cisco Se | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2026-76442 | HIGH | 7.5 | 2026-09-14 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | Cisco Cisco Secure Email, Cisco Cisco Se | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2026-76441 | CRITICAL | 9.8 | 2026-09-14 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | Cisco Cisco Secure Email and Web Manager | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2026-76440 | CRITICAL | 9.8 | 2026-09-14 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | Cisco Cisco Secure Email, Cisco Cisco Se | 请参考厂商官方公告并升级修复。官方说明：https://sec.cloudapps.cisco.com/security |
| CVE-2026-61701 | HIGH | 8.8 | 2026-09-14 | Laravel MagicLink creates links for authentication without a password or for accessing pri | cesargb laravel-magiclink | 请参考厂商官方公告并升级修复。官方说明：https://github.com/cesargb/laravel-magic |
| CVE-2026-59960 | HIGH | 7.5 | 2026-09-14 | Argos JavaScript provides official Argos SDKs for JavaScript. Prior to Argos core package | argos-ci argos-javascript | 请参考厂商官方公告并升级修复。官方说明：https://github.com/argos-ci/argos-javasc |
| CVE-2026-57579 | HIGH | 7.5 | 2026-09-14 | Alchemy is an open source content management system engine written in Ruby on Rails. Prior | AlchemyCMS alchemy_cms | 请参考厂商官方公告并升级修复。官方说明：https://github.com/AlchemyCMS/alchemy_cm |
| CVE-2026-57497 | MEDIUM | 5.3 | 2026-09-14 | webtransport-go is an implementation of the WebTransport protocol. Prior to 0.11.1, Sessio | quic-go webtransport-go | 请参考厂商官方公告并升级修复。官方说明：https://github.com/quic-go/webtransport- |
| CVE-2026-55837 | MEDIUM | 6.8 | 2026-09-14 | dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.20.0, the | dbt-labs dbt-mcp | 请参考厂商官方公告并升级修复。官方说明：https://github.com/dbt-labs/dbt-mcp/comm |
| CVE-2026-55451 | 待定 | 待定 | 2026-09-14 | gettext-converter provides gettext resource conversion utilities for JavaScript. Prior to | locize gettext-converter | 请参考厂商官方公告并升级修复。官方说明：https://github.com/locize/gettext-conver |
| CVE-2026-55416 | HIGH | 8.8 | 2026-09-14 | Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10 | pimcore | 请参考厂商官方公告并升级修复。官方说明：https://github.com/pimcore/pimcore/commi |
| CVE-2026-55102 | 待定 | 待定 | 2026-09-14 | hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to | kyndryl-open-source hashi-vault-js | 请参考厂商官方公告并升级修复。官方说明：https://github.com/kyndryl-open-source/h |
| CVE-2026-55073 | MEDIUM | 6.2 | 2026-09-14 | WeasyPrint helps web developers to create PDF documents. Prior to 70.0, server-side applic | Kozea WeasyPrint | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Kozea/WeasyPrint/comm |
| CVE-2026-55072 | HIGH | 8.5 | 2026-09-14 | Pimcore is an Open Source Data & Experience Management Platform. Prior to 2026.1.5, an aut | pimcore | 请参考厂商官方公告并升级修复。官方说明：https://github.com/pimcore/pimcore/commi |
| CVE-2026-54452 | 待定 | 待定 | 2026-09-14 | safeurl is a server-side request forgery protection library. Prior to 0.2.4, the privateNe | doyensec safeurl | 请参考厂商官方公告并升级修复。官方说明：https://github.com/doyensec/safeurl/comm |
| CVE-2026-54156 | HIGH | 7.5 | 2026-09-14 | node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to 2.166.0, the p | node-opcua | 请参考厂商官方公告并升级修复。官方说明：https://github.com/node-opcua/node-opcua |
| CVE-2026-54155 | HIGH | 7.7 | 2026-09-14 | node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to 2.166.0, the U | node-opcua | 请参考厂商官方公告并升级修复。官方说明：https://github.com/node-opcua/node-opcua |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。