首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 44159 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-86137 | LOW | 2.9 | 2026-09-05 | In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of- | xmlsoft libxml2 | 受影响版本 < 2.15.4，请升级到修复版本。 |
| CVE-2026-86100 | MEDIUM | 6.4 | 2026-09-05 | Camaleon CMS versions 2.7.5 through 2.9.1 fail to validate redirect targets when fetching | owen2345 CamaleonCMS | 受影响版本 < 2.9.2，请升级到修复版本。 |
| CVE-2026-52777 | 待定 | 待定 | 2026-09-05 | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated | YesWiki | |
| CVE-2026-52775 | HIGH | 8.8 | 2026-09-05 | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki through the lates | YesWiki | |
| CVE-2026-52774 | MEDIUM | 6.1 | 2026-09-05 | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki's Bazar widget ha | YesWiki | |
| CVE-2026-52773 | MEDIUM | 6.1 | 2026-09-05 | YesWiki is a wiki system written in PHP. From version 4.1.0 to before version 4.6.6, YesWi | YesWiki | |
| CVE-2026-52772 | MEDIUM | 5.5 | 2026-09-05 | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, Bazar form-field template | YesWiki | |
| CVE-2026-52771 | HIGH | 8.3 | 2026-09-05 | YesWiki is a wiki system written in PHP. From version 4.2.0 to before version 4.6.6, ApiCo | YesWiki | |
| CVE-2026-52770 | HIGH | 7.5 | 2026-09-05 | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki’s public Bazar en | YesWiki | |
| CVE-2026-52769 | HIGH | 8.3 | 2026-09-05 | YesWiki is a wiki system written in PHP. From version 4.6.2 to before version 4.6.6, the P | YesWiki | |
| CVE-2026-52767 | HIGH | 8.2 | 2026-09-05 | YesWiki is a wiki system written in PHP. From version 4.6.2 to before version 4.6.6, HttpS | YesWiki | |
| CVE-2026-52766 | CRITICAL | 9.1 | 2026-09-05 | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the {{erasespamedcomments | YesWiki | |
| CVE-2026-52763 | MEDIUM | 6.5 | 2026-09-05 | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the recentchanges action | YesWiki | |
| CVE-2026-52762 | 待定 | 待定 | 2026-09-05 | YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki Bazar contains a | YesWiki | |
| CVE-2026-86098 | HIGH | 7.4 | 2026-09-04 | ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_jso | ntop nDPI | 受影响版本 < 6.0，请升级到修复版本。 |
| CVE-2026-86097 | MEDIUM | 6.5 | 2026-09-04 | PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in param_se | PX4 PX4-Autopilot | 受影响版本 ≤ 1.17.0，请升级到修复版本。 |
| CVE-2026-86096 | MEDIUM | 5.9 | 2026-09-04 | PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibra | PX4 PX4-Autopilot | 受影响版本 ≤ 1.17.0，请升级到修复版本。 |
| CVE-2026-86095 | HIGH | 7.8 | 2026-09-04 | Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4_HDF5_ | Unidata netcdf-c | 受影响版本 ≤ 4.10.1，请升级到修复版本。 |
| CVE-2026-48019 | HIGH | 8.9 | 2026-09-04 | Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF inje | laravel framework | |
| CVE-2026-86091 | HIGH | 7.1 | 2026-09-04 | ntopng before 6.7.260717 fails to check user privileges in the pools bulk-delete endpoint, | ntop ntopng | 受影响版本 < 6.7.260717，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。