首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 44199 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-2390 | MEDIUM | 6.4 | 2026-09-07 | The Powerkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Laz | codesupplyco Powerkit – Supercharge your | 受影响版本 ≤ 3.0.4，请升级到修复版本。 |
| CVE-2026-86351 | 待定 | 待定 | 2026-09-07 | Affected versions of MISP validate the user-configurable homepage by checking only whether | MISP | 受影响版本 ≤ 2.5.45，请升级到修复版本。 |
| CVE-2026-86298 | HIGH | 7.3 | 2026-09-07 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1. | SourceCodester Class and Exam Timetablin | |
| CVE-2026-86297 | HIGH | 8.1 | 2026-09-07 | A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the funct | D-Link DIR-605 | |
| CVE-2026-86296 | CRITICAL | 10 | 2026-09-07 | A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the fu | D-Link DIR-822A | |
| CVE-2026-86295 | HIGH | 8.3 | 2026-09-07 | A vulnerability was found in D-Link DIR-895L A1_102b07. This affects the function sendACK | D-Link DIR-895L | |
| CVE-2026-86294 | MEDIUM | 4.3 | 2026-09-07 | A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affect | SourceCodester Simple Traffic Offense Sy | |
| CVE-2026-85640 | MEDIUM | 6.3 | 2026-09-07 | Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privi | Zohocorp ManageEngine Endpoint Central | 受影响版本 < 11.5.2600.15，请升级到修复版本。 |
| CVE-2026-85201 | 待定 | 待定 | 2026-09-07 | In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length decla | Eclipse Foundation Eclipse Ankaios | 受影响版本 ≤ 1.0.1，请升级到修复版本。 |
| CVE-2026-82325 | 待定 | 待定 | 2026-09-07 | A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2. | OpenVPN ovpn-dco-win | 受影响版本 ≤ 2.8.6，请升级到修复版本。 |
| CVE-2026-77699 | MEDIUM | 5 | 2026-09-07 | Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local | Zohocorp ManageEngine Endpoint Central | 受影响版本 < 11.5.2605.01，请升级到修复版本。 |
| CVE-2026-77697 | MEDIUM | 6.3 | 2026-09-07 | Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privi | Zohocorp ManageEngine Endpoint Central | 受影响版本 < 11.4.2540.23，请升级到修复版本。 |
| CVE-2026-19204 | 待定 | 待定 | 2026-09-07 | A client may send a WebSocket frame with an unknown opcode and a very large declared paylo | Eclipse Foundation Eclipse Jetty | 受影响版本 ≤ 10.0.31，请升级到修复版本。 |
| CVE-2025-52657 | LOW | 3.5 | 2026-09-07 | HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data | HCL Software MyXalytics | |
| CVE-2025-52652 | LOW | 3.5 | 2026-09-07 | HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to | HCL Software MyXalytics | |
| CVE-2025-52651 | LOW | 3.5 | 2026-09-07 | HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious | HCL Software MyXalytics | |
| CVE-2026-86347 | 待定 | 待定 | 2026-09-07 | Affected versions of MISP allow any authenticated user to access TemplatesController::uplo | MISP | 受影响版本 ≤ 2.5.45，请升级到修复版本。 |
| CVE-2026-86293 | MEDIUM | 6.5 | 2026-09-07 | A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by thi | SourceCodester Simple Traffic Offense Sy | |
| CVE-2026-86292 | HIGH | 7.3 | 2026-09-07 | A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected | SourceCodester Simple Traffic Offense Sy | |
| CVE-2026-86291 | MEDIUM | 6.3 | 2026-09-07 | A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. | itsourcecode Sales and Inventory System |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。