首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45358 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-57127 | CRITICAL | 9.8 | 2026-09-14 | PraisonAI is a multi-agent teams system. Prior to 4.6.58, recipe serve installs APIKeyAuth | MervinPraison PraisonAI | 请参考厂商官方公告并升级修复。官方说明：https://github.com/MervinPraison/Praison |
| CVE-2026-57124 | CRITICAL | 9.8 | 2026-09-14 | PraisonAI is a multi-agent teams system. Prior to 4.6.59, the default UI host applications | MervinPraison PraisonAI | 请参考厂商官方公告并升级修复。官方说明：https://github.com/MervinPraison/Praison |
| CVE-2026-57122 | HIGH | 8.6 | 2026-09-14 | PraisonAI is a multi-agent teams system. Prior to 4.6.59, the WhatsApp and Linear bot webh | MervinPraison PraisonAI | 请参考厂商官方公告并升级修复。官方说明：https://github.com/MervinPraison/Praison |
| CVE-2026-57119 | HIGH | 7.5 | 2026-09-14 | PraisonAI is a multi-agent teams system. Prior to 4.6.59, the unauthenticated Jobs API acc | MervinPraison PraisonAI | 请参考厂商官方公告并升级修复。官方说明：https://github.com/MervinPraison/Praison |
| CVE-2026-56839 | HIGH | 7.3 | 2026-09-14 | PraisonAI is a multi-agent teams system. Prior to 4.6.59, the CODE_TOOLS wrappers keep _wo | MervinPraison PraisonAI | 请参考厂商官方公告并升级修复。官方说明：https://github.com/MervinPraison/Praison |
| CVE-2026-55795 | 待定 | 待定 | 2026-09-14 | Craft Commerce is an ecommerce platform for Craft CMS. From 4.0.0 until 4.11.2 and 5.6.5, | craftcms commerce | 请参考厂商官方公告并升级修复。官方说明：https://github.com/craftcms/commerce/com |
| CVE-2026-55236 | MEDIUM | 5.9 | 2026-09-14 | langgraph-api implements the LangGraph API for rapid development and testing. Prior to 0.1 | langchain-ai langgraph-api | 请参考厂商官方公告并升级修复。官方说明：https://github.com/langchain-ai/docs/blo |
| CVE-2026-55235 | MEDIUM | 5.9 | 2026-09-14 | langgraph-api implements the LangGraph API for rapid development and testing. Prior to 0.1 | langchain-ai langgraph-api | 请参考厂商官方公告并升级修复。官方说明：https://github.com/langchain-ai/docs/blo |
| CVE-2026-54542 | LOW | 3.7 | 2026-09-14 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross | nimiq core-rs-albatross | 请参考厂商官方公告并升级修复。官方说明：https://github.com/nimiq/core-rs-albatro |
| CVE-2026-54541 | LOW | 3.7 | 2026-09-14 | Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross | nimiq core-rs-albatross | 请参考厂商官方公告并升级修复。官方说明：https://github.com/nimiq/core-rs-albatro |
| CVE-2026-54529 | MEDIUM | 5.3 | 2026-09-14 | SQLAdmin is a flexible Admin interface for SQLAlchemy models. Prior to 0.27.1, ModelView.s | smithyhq sqladmin | 请参考厂商官方公告并升级修复。官方说明：https://github.com/smithyhq/sqladmin/com |
| CVE-2026-53708 | MEDIUM | 6.6 | 2026-09-14 | ContextForge is an AI gateway, registry, and proxy that provides centralized discovery, gu | IBM mcp-context-forge, IBM mcp-contextfo | 请参考厂商官方公告并升级修复。官方说明：https://github.com/IBM/mcp-context-forge |
| CVE-2026-4103 | MEDIUM | 6.4 | 2026-09-14 | Insufficient HTML sanitization in the Publisher Portal and Developer Portal allows untrust | WSO2 WSO2 API Control Plane, WSO2 WSO2 A | 受影响版本 < 4.6.0.18，请升级到修复版本。 |
| CVE-2026-47701 | HIGH | 7.7 | 2026-09-14 | The OpenTelemetry Operator is a Kubernetes Operator for the OpenTelemetry Collector. Prior | open-telemetry opentelemetry-operator | 请参考厂商官方公告并升级修复。官方说明：https://github.com/open-telemetry/opente |
| CVE-2025-24890 | MEDIUM | 6.8 | 2026-09-14 | gitoxide is an implementation of git written in Rust. Prior to 0.13.3, the gix-sec crate o | GitoxideLabs gitoxide | 微软官方漏洞（Mariner）修复：安装 Microsoft 官方补丁，详见 MSRC 更新指南。 |
| CVE-2026-90791 | MEDIUM | 6.3 | 2026-09-14 | A vulnerability was detected in GPAC up to f1219cde. This vulnerability affects the functi | n/a GPAC | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Ech06/CVE_submit/blob |
| CVE-2026-90790 | MEDIUM | 6.3 | 2026-09-14 | A security vulnerability has been detected in a2aproject a2a-python up to 1.1.3. This affe | a2aproject a2a-python | 请参考厂商官方公告并升级修复。官方说明：https://github.com/a2aproject/a2a-python |
| CVE-2026-90789 | HIGH | 7.3 | 2026-09-14 | A weakness has been identified in itsourcecode Leave Management System 1.0. Affected by th | itsourcecode Leave Management System | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Relax-1626/submit/iss |
| CVE-2026-82438 | HIGH | 8.1 | 2026-09-14 | Description Three separate mechanisms allowed a web page on an unrelated origin to read r | Apache Software Foundation Apache Storm | 受影响版本 < 3.1.0，请升级到修复版本。 |
| CVE-2026-82437 | MEDIUM | 4.3 | 2026-09-14 | Description The Logviewer offers `logs.users` and `logs.groups` so operators can control | Apache Software Foundation Apache Storm | 受影响版本 < 3.1.0，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。