首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 44941 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-87913 | MEDIUM | 5.9 | 2026-09-10 | A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2 | AWS AWS Security Agent MCP server | 受影响版本 ≤ 0.1.5，请升级到修复版本。 |
| CVE-2026-87912 | MEDIUM | 5.9 | 2026-09-10 | A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws- | AWS AWS Security Agent plugin | |
| CVE-2026-81468 | CRITICAL | 9.1 | 2026-09-10 | Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Sp | Dell ThinOS 10 | 受影响版本 < 2605_10.2616，请升级到修复版本。 |
| CVE-2026-81467 | CRITICAL | 9.8 | 2026-09-10 | Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Sp | Dell ThinOS 10 | 受影响版本 < 2605_10.2616，请升级到修复版本。 |
| CVE-2026-81052 | MEDIUM | 6.8 | 2026-09-10 | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Download of Code Without Integri | Dell ThinOS 10 | 受影响版本 < 2605_10.2616，请升级到修复版本。 |
| CVE-2026-81051 | MEDIUM | 6.6 | 2026-09-10 | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable | Dell ThinOS 10 | 受影响版本 < 2605_10.2616，请升级到修复版本。 |
| CVE-2026-81049 | MEDIUM | 4.4 | 2026-09-10 | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Ch | Dell ThinOS 10 | 受影响版本 < 2605_10.2616，请升级到修复版本。 |
| CVE-2026-81048 | CRITICAL | 9.6 | 2026-09-10 | Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Spec | Dell ThinOS 10 | 受影响版本 < 2605_10.2616，请升级到修复版本。 |
| CVE-2026-81046 | CRITICAL | 9.4 | 2026-09-10 | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism Failure vul | Dell ThinOS 10 | 受影响版本 < 2605_10.2616，请升级到修复版本。 |
| CVE-2026-79987 | HIGH | 8.8 | 2026-09-10 | A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp per | craftcms cms | 受影响版本 < 5.10.13，请升级到修复版本。 |
| CVE-2026-4130 | HIGH | 7.1 | 2026-09-10 | There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. T | NI SystemLink, NI SystemLink Server | 受影响版本 ≤ 26.5.0，请升级到修复版本。 |
| CVE-2026-4129 | HIGH | 8.1 | 2026-09-10 | There is an improper access control vulnerability in NI SystemLink that may allow an authe | NI SystemLink, NI SystemLink Server | 受影响版本 ≤ 26.5.0，请升级到修复版本。 |
| CVE-2026-88924 | HIGH | 7 | 2026-09-10 | A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes t | GNOME gvfs, Red Hat Red Hat Enterprise L | 受影响版本 < *，请升级到修复版本。 |
| CVE-2026-88898 | MEDIUM | 6.5 | 2026-09-10 | AppFlowy-Cloud versions 0.7.2 through 0.9.64 fail to authorize callers against the workspa | AppFlowy-IO AppFlowy-Cloud | 受影响版本 ≤ 0.9.64，请升级到修复版本。 |
| CVE-2026-88897 | MEDIUM | 5.9 | 2026-09-10 | Flextype CMS through 1.0.0-alpha.3 accepts API authentication credentials through URL quer | flextype | 受影响版本 ≤ 1.0.0-alpha.3，请升级到修复版本。 |
| CVE-2026-88008 | 待定 | 待定 | 2026-09-10 | Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.26 until 2.11.57 | traefik | |
| CVE-2026-88007 | 待定 | 待定 | 2026-09-10 | Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 | traefik | |
| CVE-2026-88006 | MEDIUM | 6.5 | 2026-09-10 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From | open-webui | |
| CVE-2026-88005 | MEDIUM | 6.5 | 2026-09-10 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From | open-webui | |
| CVE-2026-88004 | 待定 | 待定 | 2026-09-10 | Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, T | traefik |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。