首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 44941 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-68487 | CRITICAL | 9.9 | 2026-09-10 | Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authent | WebPros Plesk | 受影响版本 ≤ 18.0.79.10，请升级到修复版本。 |
| CVE-2026-65639 | 待定 | 待定 | 2026-09-10 | OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allow | WebPros ConfigServer Security & Firewall | 受影响版本 < *，请升级到修复版本。 |
| CVE-2026-65638 | 待定 | 待定 | 2026-09-10 | Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthen | WebPros ConfigServer Security & Firewall | 受影响版本 < *，请升级到修复版本。 |
| CVE-2026-52098 | CRITICAL | 9.8 | 2026-09-10 | An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/ | n/a | |
| CVE-2026-52097 | MEDIUM | 6.8 | 2026-09-10 | An issue in AppFlowy 0.11.8 allows a remote attacker to execute arbitrary code via the afL | n/a | |
| CVE-2026-88959 | HIGH | 8.8 | 2026-09-10 | Anchor CMS through 0.12.7 fails to enforce role-based access control in admin user-managem | anchorcms Anchor CMS | 受影响版本 ≤ 0.12.7，请升级到修复版本。 |
| CVE-2026-88940 | MEDIUM | 5.3 | 2026-09-10 | knowns through 0.33.0 fails to validate the path query parameter in the workspace browse e | knowns-dev knowns | 受影响版本 ≤ 0.33.0，请升级到修复版本。 |
| CVE-2026-88939 | HIGH | 8.3 | 2026-09-10 | knowns through 0.33.0 exempts the project.set action from permission guard checks uncondit | knowns-dev knowns | 受影响版本 ≤ 0.33.0，请升级到修复版本。 |
| CVE-2026-88938 | MEDIUM | 6.5 | 2026-09-10 | knowns through 0.33.0 fails to confine the path argument of the code.find MCP tool to the | knowns-dev knowns | 受影响版本 ≤ 0.33.0，请升级到修复版本。 |
| CVE-2026-88937 | HIGH | 8.8 | 2026-09-10 | knowns through 0.33.0 fails to properly validate template destination paths in the code ge | knowns-dev knowns | 受影响版本 ≤ 0.33.0，请升级到修复版本。 |
| CVE-2026-88899 | CRITICAL | 9.8 | 2026-09-10 | knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request h | knowns-dev knowns | 受影响版本 < 0.31.0，请升级到修复版本。 |
| CVE-2026-88018 | CRITICAL | 9.8 | 2026-09-10 | rclone is a command-line program to sync files and directories to and from different cloud | rclone | |
| CVE-2026-88017 | HIGH | 7.3 | 2026-09-10 | rclone is a command-line program to sync files and directories to and from different cloud | rclone | |
| CVE-2026-88016 | HIGH | 7.1 | 2026-09-10 | rclone is a command-line program to sync files and directories to and from different cloud | rclone | |
| CVE-2026-88015 | MEDIUM | 5.3 | 2026-09-10 | rclone is a command-line program to sync files and directories to and from different cloud | rclone | |
| CVE-2026-88014 | MEDIUM | 6.3 | 2026-09-10 | rclone is a command-line program to sync files and directories to and from different cloud | rclone | |
| CVE-2026-88013 | LOW | 3.7 | 2026-09-10 | rclone is a command-line program to sync files and directories to and from different cloud | rclone | |
| CVE-2026-88012 | MEDIUM | 5.3 | 2026-09-10 | Traefik is an open source HTTP reverse proxy and load balancer. From 2.8.2 until 2.11.56 a | traefik | |
| CVE-2026-88011 | 待定 | 待定 | 2026-09-10 | Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.56, and from | traefik | |
| CVE-2026-88009 | 待定 | 待定 | 2026-09-10 | Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7. | traefik |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。