首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 44199 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-13608 | HIGH | 7.4 | 2026-09-06 | A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handsh | curl | 受影响版本 ≤ 7.82.0，请升级到修复版本。 |
| CVE-2026-82751 | 待定 | 待定 | 2026-09-06 | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticate | ZenHive mpp | 受影响版本 < 0482572b47e1ffe1537ab80ab613d47b92833c2d，请升级到修复版本。 |
| CVE-2026-82750 | 待定 | 待定 | 2026-09-06 | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticate | ZenHive mpp | 受影响版本 < 0482572b47e1ffe1537ab80ab613d47b92833c2d，请升级到修复版本。 |
| CVE-2026-83534 | MEDIUM | 6.4 | 2026-09-06 | PostgreSQL Anonymizer contains a vulnerability in the anon.anonymize_database_parallel() f | DALIBO PostgreSQL Anonymizer | 受影响版本 < 3.2.0，请升级到修复版本。 |
| CVE-2026-19634 | MEDIUM | 6.4 | 2026-09-06 | PostgreSQL Anonymizer contains a SQL injection vulnerability in two import functions. A us | DALIBO PostgreSQL Anonymizer | 受影响版本 < 3.1.4，请升级到修复版本。 |
| CVE-2026-19633 | HIGH | 8.8 | 2026-09-06 | PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to ex | DALIBO PostgreSQL Anonymizer | 受影响版本 < 3.1.4，请升级到修复版本。 |
| CVE-2026-86283 | 待定 | 待定 | 2026-09-06 | MISP's UiBeta theme collection view (app/View/Themed/UiBeta/Collections/view.ctp) performe | MISP | 受影响版本 ≤ 2.5.45，请升级到修复版本。 |
| CVE-2026-86217 | MEDIUM | 5.3 | 2026-09-06 | A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Af | code-projects Hotel and Tourism Reservat | |
| CVE-2026-86216 | MEDIUM | 4.3 | 2026-09-06 | A security vulnerability has been detected in code-projects Hotel and Tourism Reservation | code-projects Hotel and Tourism Reservat | |
| CVE-2026-86215 | MEDIUM | 4.3 | 2026-09-06 | A vulnerability was identified in Mstfakts College-Management-System. The affected element | Mstfakts College-Management-System | |
| CVE-2026-86259 | HIGH | 7.5 | 2026-09-06 | OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production build | THU-MAIC OpenMAIC | 受影响版本 < 1.0.1，请升级到修复版本。 |
| CVE-2026-86258 | MEDIUM | 5.9 | 2026-09-06 | nbviewer through 1.0.1 contains a path traversal vulnerability in LocalFileHandler.can_sho | jupyter nbviewer | 受影响版本 ≤ 1.0.1，请升级到修复版本。 |
| CVE-2026-86214 | HIGH | 7.3 | 2026-09-06 | A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unkno | n/a Mstfakts College-Management-System | |
| CVE-2026-86213 | HIGH | 7.3 | 2026-09-06 | A vulnerability was found in Mstfakts College-Management-System. This issue affects the fu | Mstfakts College-Management-System | |
| CVE-2026-86257 | MEDIUM | 5.4 | 2026-09-06 | wger before 2.6 fails to sanitize first_name and last_name fields in the gym member TSV ex | wger-project wger | 受影响版本 < 2.6，请升级到修复版本。 |
| CVE-2026-86256 | MEDIUM | 5.4 | 2026-09-06 | wger before 2.6 (affected versions | wger-project wger | 受影响版本 < 2.6，请升级到修复版本。 |
| CVE-2026-86255 | MEDIUM | 6.5 | 2026-09-06 | wger before 2.5 fails to validate the maximum duration of routine date ranges, allowing au | wger-project wger | 受影响版本 < 2.5，请升级到修复版本。 |
| CVE-2026-86254 | MEDIUM | 6.8 | 2026-09-06 | wger versions through master contain an incomplete authorization bypass in wger/core/views | wger-project wger | 受影响版本 ≤ master，请升级到修复版本。 |
| CVE-2026-86253 | MEDIUM | 5.9 | 2026-09-06 | h3 (npm package) versions | h3js h3 | 受影响版本 < 2.0.1-rc.15，请升级到修复版本。 |
| CVE-2026-86252 | MEDIUM | 5.3 | 2026-09-06 | h3 versions before 1.15.9 fail to sanitize carriage return characters in EventStream data | h3js h3 | 受影响版本 < 2.0.1-rc.17，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。