首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45356 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-82766 | HIGH | 8.8 | 2026-09-14 | Improper neutralization of special elements used in an OS command ('OS Command Injection') | Contec Co., Ltd. SGA1000 | 受影响版本 < 1.02，请升级到修复版本。 |
| CVE-2026-82765 | HIGH | 8.1 | 2026-09-14 | Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 ser | Contec Co., Ltd. FXA5000, Contec Co., Lt | 受影响版本 < 1.20.00，请升级到修复版本。 |
| CVE-2026-82764 | MEDIUM | 4.3 | 2026-09-14 | Cross-site request forgery vulnerability exists in multiple Contec products. If a user vie | Contec Co., Ltd. FXA5000, Contec Co., Lt | 受影响版本 < 1.01.00，请升级到修复版本。 |
| CVE-2026-82763 | MEDIUM | 5.4 | 2026-09-14 | Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX30 | Contec Co., Ltd. FXA5000, Contec Co., Lt | 受影响版本 < 1.20.00，请升级到修复版本。 |
| CVE-2026-82762 | HIGH | 8.8 | 2026-09-14 | Improper neutralization of special elements used in an OS command ('OS Command Injection') | Contec Co., Ltd. FXA5000, Contec Co., Lt | 受影响版本 < 1.20.00，请升级到修复版本。 |
| CVE-2026-71198 | 待定 | 待定 | 2026-09-14 | In OpenStack Glance before 32.0.1, the location API does not validate destination hosts wh | OpenStack Glance | 受影响版本 < 32.0.1，请升级到修复版本。 |
| CVE-2026-68955 | HIGH | 7.8 | 2026-09-14 | The installer for Rakuten Kobo Desktop Application (Windows version) insecurely loads Dyna | Rakuten Kobo Inc. The installer for Raku | 请参考厂商官方公告并升级修复。官方说明：https://help.kobo.com/hc/en-us/articles/ |
| CVE-2026-25832 | LOW | 3.7 | 2026-09-14 | In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRet | TrustedFirmware Mbed TLS | 受影响版本 < 4.1.2，请升级到修复版本。 |
| CVE-2025-26790 | LOW | 3.7 | 2026-09-14 | Withsecure Atlant with Capricorn engine before 2025-01-20_02 allows a Remote Denial of Ser | WithSecure Atlant | 受影响版本 < Capricorn 2025-01-20_02，请升级到修复版本。 |
| CVE-2024-23176 | MEDIUM | 5.4 | 2026-09-14 | An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Spe | MediaWiki MassMessage | 受影响版本 < 1.40.2，请升级到修复版本。 |
| CVE-2023-51769 | MEDIUM | 6.1 | 2026-09-14 | Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exceptio | Frappe | 受影响版本 < 14.49.0，请升级到修复版本。 |
| CVE-2023-50462 | MEDIUM | 5.3 | 2026-09-14 | An issue was discovered in the content_consent (aka Content Consent) extension through 2.0 | TYPO3 content_consent | 受影响版本 < 2.0.2，请升级到修复版本。 |
| CVE-2023-50461 | HIGH | 8.8 | 2026-09-14 | An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for T | TYPO3 direct_mail | 受影响版本 < 9.5.2，请升级到修复版本。 |
| CVE-2023-50460 | MEDIUM | 5.4 | 2026-09-14 | An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend | TYPO3 femanager | 受影响版本 < 7.2.3，请升级到修复版本。 |
| CVE-2023-50459 | MEDIUM | 5.4 | 2026-09-14 | An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to | TYPO3 femanager | 受影响版本 < 7.2.3，请升级到修复版本。 |
| CVE-2026-90687 | MEDIUM | 6.3 | 2026-09-14 | A vulnerability was determined in GPAC up to f1219cde. This vulnerability affects the func | n/a GPAC | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Ech06/CVE_submit/blob |
| CVE-2026-90686 | MEDIUM | 5.3 | 2026-09-14 | A vulnerability was found in GPAC up to f1219cde. This affects the function gf_bt_report o | n/a GPAC | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Ech06/CVE_submit/blob |
| CVE-2026-90685 | LOW | 2.8 | 2026-09-14 | A vulnerability has been found in GPAC up to f1219cde. Affected by this issue is the funct | n/a GPAC | 请参考厂商官方公告并升级修复。官方说明：https://github.com/gpac/gpac/ |
| CVE-2026-16726 | 待定 | 待定 | 2026-09-14 | Buffer overflow vulnerability in Panasonic Industry USB Driver for MINAS A5/A6 allows att | panasonic PANATERM v6, panasonic PANATER | 受影响版本 ≤ 15.0.0.591，请升级到修复版本。 |
| CVE-2023-46273 | HIGH | 8.8 | 2026-09-14 | Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10 | extremenetworks IQ Engine | 受影响版本 < 10.6r5，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。