首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 44850 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-42808 | MEDIUM | 6.8 | 2026-09-10 | An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 through 2.11. The h | Bosch Sensortec COINES_SDK | 受影响版本 ≤ 2.11，请升级到修复版本。 |
| CVE-2026-42807 | HIGH | 8 | 2026-09-10 | A heap-based buffer overflow vulnerability in the PC bridge protocol decoder of BoschSenso | Bosch Sensortec COINES_SDK | 受影响版本 ≤ 2.12.2，请升级到修复版本。 |
| CVE-2026-42806 | MEDIUM | 4.3 | 2026-09-10 | An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI (C-driver | Bosch Sensortec BME690 SensorAPI (C) | 受影响版本 ≤ 1.0.3，请升级到修复版本。 |
| CVE-2026-42805 | HIGH | 8.4 | 2026-09-10 | A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI385 SensorAPI | Bosch Sensortec BHI385 SensorAPI (C Libr | 受影响版本 ≤ 2.1.0，请升级到修复版本。 |
| CVE-2026-42804 | HIGH | 7.6 | 2026-09-10 | A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360 SensorAPI | Bosch Sensortec BHI360_SensorAPI (C-Libr | 受影响版本 ≤ 2.2.0，请升级到修复版本。 |
| CVE-2026-13745 | 待定 | 待定 | 2026-09-10 | A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged att | Google Cloud Gemini CLI, Google Cloud ru | 受影响版本 < 0.1.22，请升级到修复版本。 |
| CVE-2026-88770 | MEDIUM | 6.5 | 2026-09-10 | A flaw was found in the Device Authorization Grant flow of Keycloak, an identity and acces | Red Hat Red Hat Build of Keycloak, Red H | |
| CVE-2026-88763 | MEDIUM | 5.9 | 2026-09-10 | A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is | Red Hat Red Hat Service Interconnect 2 | |
| CVE-2026-80354 | HIGH | 8.1 | 2026-09-10 | Authorization bypass through User-Controlled key vulnerability in Apache Camel K. An au | Apache Software Foundation Apache Camel | 受影响版本 < 2.10.2，请升级到修复版本。 |
| CVE-2026-80352 | CRITICAL | 9.8 | 2026-09-10 | Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Camel K. | Apache Software Foundation Apache Camel | 受影响版本 < 2.10.2，请升级到修复版本。 |
| CVE-2026-80351 | CRITICAL | 9.8 | 2026-09-10 | Improper neutralization of directives in dynamically evaluated code ('eval injection') vul | Apache Software Foundation Apache Camel | 受影响版本 < 2.10.2，请升级到修复版本。 |
| CVE-2026-7188 | CRITICAL | 9.8 | 2026-09-10 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulne | Armiya Information Technologies Ltd. Co. | 受影响版本 < Versiyon 2，请升级到修复版本。 |
| CVE-2026-87804 | 待定 | 待定 | 2026-09-10 | Rejected reason: no security impact | ||
| CVE-2026-82925 | HIGH | 8.1 | 2026-09-10 | The Site Reviews WordPress plugin before 8.3.0 does not prevent request data from being de | Unknown Site Reviews | 受影响版本 < 8.3.0，请升级到修复版本。 |
| CVE-2026-82582 | MEDIUM | 4.3 | 2026-09-10 | An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, w | SHIRASAGI Project SHIRASAGI | 受影响版本 ≤ v1.20.2，请升级到修复版本。 |
| CVE-2026-81635 | MEDIUM | 5.4 | 2026-09-10 | A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to e | SHIRASAGI Project SHIRASAGI | 受影响版本 ≤ v1.20.2，请升级到修复版本。 |
| CVE-2026-81431 | HIGH | 7.2 | 2026-09-10 | The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that | Unknown Registration Form for WooCommerc | 受影响版本 < 1.1.3，请升级到修复版本。 |
| CVE-2026-78361 | CRITICAL | 9.1 | 2026-09-10 | The zipMoney(Zip Co) Payments Plugin for WooCommerce WordPress plugin before 2.4.0 does no | Unknown zipMoney(Zip Co) Payments Plugin | 受影响版本 < 2.4.0，请升级到修复版本。 |
| CVE-2026-77771 | HIGH | 7.5 | 2026-09-10 | The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before | Unknown miniOrange 2FA | 受影响版本 < 19.3，请升级到修复版本。 |
| CVE-2026-77770 | CRITICAL | 10 | 2026-09-10 | The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before | Unknown miniOrange 2FA | 受影响版本 < 19.3，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。