首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 41904 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-87029 | MEDIUM | 5.9 | 2026-10-15 | undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 | undici | 受影响版本 < 8.12.2，请升级到修复版本。 |
| CVE-2026-87018 | HIGH | 7.5 | 2026-10-15 | undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 thro | undici | 受影响版本 < 8.12.2，请升级到修复版本。 |
| CVE-2026-63430 | 待定 | 待定 | 2026-10-15 | ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.2, 4.0.2 | rust-ammonia ammonia | 请参考厂商官方公告并升级修复。官方说明：https://github.com/rust-ammonia/ammonia/ |
| CVE-2026-62322 | MEDIUM | 6.5 | 2026-10-15 | Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the | python-social-auth social-core | 请参考厂商官方公告并升级修复。官方说明：https://github.com/python-social-auth/so |
| CVE-2026-57496 | CRITICAL | 9.6 | 2026-10-15 | NetLicensing MCP Server is a natural-language interface that enables agentic applications | Labs64 NetLicensing-MCP | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Labs64/NetLicensing-M |
| CVE-2026-57183 | MEDIUM | 6.1 | 2026-10-15 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, checkApiAuth( | Erudika scoold | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Erudika/scoold/commit |
| CVE-2026-55872 | HIGH | 8.7 | 2026-10-15 | GYM One is open-source gym management software for fitness centers, personal trainers, and | mayerbalintdev GYM-One | 请参考厂商官方公告并升级修复。官方说明：https://github.com/mayerbalintdev/GYM-On |
| CVE-2026-55871 | MEDIUM | 6.5 | 2026-10-15 | GYM One is open-source gym management software for fitness centers, personal trainers, and | mayerbalintdev GYM-One | 请参考厂商官方公告并升级修复。官方说明：https://github.com/mayerbalintdev/GYM-On |
| CVE-2026-55842 | MEDIUM | 5.4 | 2026-10-15 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the apiCorsCo | Erudika scoold | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Erudika/scoold/commit |
| CVE-2026-55840 | MEDIUM | 5.4 | 2026-10-15 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackTo | Erudika scoold | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Erudika/scoold/commit |
| CVE-2026-55587 | HIGH | 8.1 | 2026-10-15 | AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.29 | aliasvault | 请参考厂商官方公告并升级修复。官方说明：https://github.com/aliasvault/aliasvault |
| CVE-2026-55240 | CRITICAL | 9.1 | 2026-10-15 | Tianji is an open source analytics, uptime monitoring, and server status platform. Prior t | msgbyte tianji | 请参考厂商官方公告并升级修复。官方说明：https://github.com/msgbyte/tianji/commit |
| CVE-2026-55239 | HIGH | 8.8 | 2026-10-15 | Tianji is an open source analytics, uptime monitoring, and server status platform. Prior t | msgbyte tianji | 请参考厂商官方公告并升级修复。官方说明：https://github.com/msgbyte/tianji/commit |
| CVE-2026-47218 | 待定 | 待定 | 2026-10-15 | runwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, | containerd runwasi | 请参考厂商官方公告并升级修复。官方说明：https://github.com/containerd/runwasi/co |
| CVE-2026-45165 | 待定 | 待定 | 2026-10-15 | An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with lim | Palo Alto Networks Idira Secrets Manager | 受影响版本 < 13.9.1，请升级到修复版本。 |
| CVE-2026-36436 | HIGH | 7.5 | 2026-10-15 | An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext wit | n/a | 请参考厂商官方公告并升级修复。官方说明：https://github.com/vtrmk/CVE-2026-36436- |
| CVE-2026-111252 | MEDIUM | 6.5 | 2026-10-15 | A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNM | The OpenNMS Group Meridian, The OpenNMS | 受影响版本 < 36.0.5，请升级到修复版本。 |
| CVE-2026-111235 | CRITICAL | 9.1 | 2026-10-15 | An authorization bypass vulnerability exists in the REST API of multiple versions of OpenN | The OpenNMS Group Meridian, The OpenNMS | 受影响版本 < 36.0.5，请升级到修复版本。 |
| CVE-2026-111234 | MEDIUM | 5.9 | 2026-10-15 | SimplePie through 1.9.0 contains a local file read vulnerability that allows malicious fee | SimplePie | 受影响版本 ≤ 1.9.0，请升级到修复版本。 |
| CVE-2026-111233 | MEDIUM | 4.7 | 2026-10-15 | Netgate pfSense CE 2.7.1 through 2.9.0 contains a reflected cross-site scripting vulnerabi | Netgate pfSense CE | 受影响版本 ≤ 2.9.0，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。