首页 / 漏洞情报库
🛡️ 漏洞情报库(CVE 查询与修复方法)
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息,含漏洞说明、受影响产品、修复方法(补丁/升级版本)。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报(每周一篇)
共 44818 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-86547 | MEDIUM | 6.2 | 2026-09-09 | mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op_enter() h | mrubyc | 受影响版本 ≤ 4.0.0,请升级到修复版本。 |
| CVE-2026-78377 | MEDIUM | 6.1 | 2026-09-09 | URL redirection to untrusted site ('open redirect') vulnerability in Yordam Informatics Te | Yordam Informatics Technology Consulting | 受影响版本 < v22.2,请升级到修复版本。 |
| CVE-2026-19733 | MEDIUM | 5.3 | 2026-09-09 | Server-Side request forgery (SSRF) vulnerability in Yordam Informatics Technology Consulti | Yordam Informatics Technology Consulting | 受影响版本 < v22.2,请升级到修复版本。 |
| CVE-2026-11838 | MEDIUM | 4.3 | 2026-09-09 | Missing authentication for critical function vulnerability in Yordam Informatics Technolog | Yordam Informatics Technology Consulting | 受影响版本 < v22.2,请升级到修复版本。 |
| CVE-2025-3271 | 待定 | 待定 | 2026-09-09 | Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS | OpenText™ Documentum Webtop | 受影响版本 < 16.7.1,请升级到修复版本。 |
| CVE-2026-87766 | HIGH | 8.8 | 2026-09-09 | A flaw was found in bubblewrap. During sandbox setup, creating files or directories under | Red Hat Red Hat Enterprise Linux 10, Red | |
| CVE-2026-80175 | LOW | 3.3 | 2026-09-09 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions | Dell Secure Connect Gateway 5.0 - Applic | 受影响版本 < 5.36.00.16 or later,请升级到修复版本。 |
| CVE-2026-80122 | HIGH | 7.3 | 2026-09-09 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions | Dell Secure Connect Gateway 5.0 - Applic | 受影响版本 < 5.36.00.16 or later,请升级到修复版本。 |
| CVE-2026-80099 | HIGH | 8.8 | 2026-09-09 | Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists | Newfold WP Plugin Web, Newfold WP Plugin | 受影响版本 ≤ 4.19.0,请升级到修复版本。 |
| CVE-2026-79974 | MEDIUM | 6.4 | 2026-09-09 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions | Dell Secure Connect Gateway 5.0 - Applic | 受影响版本 < 5.36.00.16 or later,请升级到修复版本。 |
| CVE-2026-79973 | MEDIUM | 6.3 | 2026-09-09 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions | Dell Secure Connect Gateway 5.0 - Applic | 受影响版本 < 5.36.00.16 or later,请升级到修复版本。 |
| CVE-2026-79967 | MEDIUM | 5.6 | 2026-09-09 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions | Dell Secure Connect Gateway 5.0 - Applic | 受影响版本 < 5.36.00.16 or later,请升级到修复版本。 |
| CVE-2026-79696 | 待定 | 待定 | 2026-09-09 | A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit (ADK) for | Google Cloud Agent Development Kit (ADK) | 受影响版本 < 2.7.0,请升级到修复版本。 |
| CVE-2026-79640 | MEDIUM | 5.4 | 2026-09-09 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions | Dell Secure Connect Gateway 5.0 - Applic | 受影响版本 < 5.36.00.16 or later,请升级到修复版本。 |
| CVE-2026-78494 | HIGH | 7.4 | 2026-09-09 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions | Dell Secure Connect Gateway 5.0 - Applic | 受影响版本 < 5.36.00.16 or later,请升级到修复版本。 |
| CVE-2026-78491 | HIGH | 8.2 | 2026-09-09 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions | Dell Secure Connect Gateway 5.0 - Applic | 受影响版本 < 5.36.00.16 or later,请升级到修复版本。 |
| CVE-2026-16272 | CRITICAL | 9.1 | 2026-09-09 | Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution | PayTR Payment and Electronic Money Insti | 受影响版本 < v9.0.3,请升级到修复版本。 |
| CVE-2026-14989 | HIGH | 7.2 | 2026-09-09 | The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable | wplegalpages WPLP Cookie Consent – Cooki | 受影响版本 ≤ 4.4.1,请升级到修复版本。 |
| CVE-2026-14359 | HIGH | 8.8 | 2026-09-09 | The YITH WooCommerce Waitlist Premium plugin for WordPress is vulnerable to Privilege Esca | Yith YITH WooCommerce Waitlist Premium | 受影响版本 ≤ 3.35.0,请升级到修复版本。 |
| CVE-2026-12858 | 待定 | 待定 | 2026-09-09 | Improper Privilege Management vulnerability in ESET AV Remover (standalone) allows Privile | ESET spol. s.r.o. ESET AV Remover (stand | 受影响版本 ≤ 1.6.11.0,请升级到修复版本。 |
💡 说明:数据源为 NVD、CISA(在野利用)、微软等官方公开情报,每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入,描述以英文原版为准,可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索,具体请以厂商官方公告为准。