首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 41922 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-110829 | MEDIUM | 6.5 | 2026-10-14 | FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd | FreeRDP | 受影响版本 < 3.32.0，请升级到修复版本。 |
| CVE-2026-110807 | MEDIUM | 4.3 | 2026-10-14 | A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulner | sgl-project SGLang | 请参考厂商官方公告并升级修复。官方说明：https://gist.github.com/Yunzez/28820d220 |
| CVE-2026-107795 | 待定 | 待定 | 2026-10-14 | Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly | TP-Link Systems Inc. Omada Software Cont | 受影响版本 < 6.3.0.45，请升级到修复版本。 |
| CVE-2026-106485 | 待定 | 待定 | 2026-10-14 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | ||
| CVE-2026-106068 | 待定 | 待定 | 2026-10-14 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | ||
| CVE-2026-106006 | 待定 | 待定 | 2026-10-14 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | ||
| CVE-2026-105627 | 待定 | 待定 | 2026-10-14 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | ||
| CVE-2026-110816 | MEDIUM | 5.3 | 2026-10-14 | ### Summary `qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot conver | ljharb qs | 受影响版本 < 6.16.1，请升级到修复版本。 |
| CVE-2026-110698 | MEDIUM | 6.3 | 2026-10-14 | A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function | n/a Praat | 请参考厂商官方公告并升级修复。官方说明：https://github.com/PaulBoersma/praat/com |
| CVE-2026-110696 | MEDIUM | 5.3 | 2026-10-14 | A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630 | itsmeravitejak Online-Examination-System | 请参考厂商官方公告并升级修复。官方说明：https://github.com/itsmeravitejak/Online |
| CVE-2026-110695 | MEDIUM | 6.3 | 2026-10-14 | A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function | turboderp ExLlamaV2 | 请参考厂商官方公告并升级修复。官方说明：https://github.com/3em0/cve_repo/blob/ma |
| CVE-2026-108337 | 待定 | 待定 | 2026-10-14 | An administrator could retrieve the password reset code for any user and take over the acc | Hitachi Vantara Remot Ops Agent | 受影响版本 ≤ 2.0，请升级到修复版本。 |
| CVE-2026-108336 | 待定 | 待定 | 2026-10-14 | When the default self-signed certificate is used, an attacker could gain administrative ac | Hitachi Vantara Remot Ops Agent | 受影响版本 ≤ 2.0，请升级到修复版本。 |
| CVE-2026-108335 | 待定 | 待定 | 2026-10-14 | When the password reset functionality is enabled, and email is configured, an attacker cou | Hitachi Vantara Remote Ops Agent | 受影响版本 ≤ 2.0，请升级到修复版本。 |
| CVE-2026-102298 | 待定 | 待定 | 2026-10-14 | In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required | TP-Link System Inc. Omada Software Contr | 受影响版本 < 6.3.0.45，请升级到修复版本。 |
| CVE-2026-96540 | HIGH | 8.8 | 2026-10-14 | An improper access control vulnerability has been identified in the SonicWall Network Secu | SonicWall Network Security Manager (NSM) | 请参考厂商官方公告并升级修复。官方说明：https://psirt.global.sonicwall.com/vuln- |
| CVE-2026-77427 | MEDIUM | 5.9 | 2026-10-14 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batc | error311 FileRise | 请参考厂商官方公告并升级修复。官方说明：https://github.com/error311/FileRise/com |
| CVE-2026-71854 | HIGH | 8.2 | 2026-10-14 | OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cy | OpenAEV-Platform openaev | 请参考厂商官方公告并升级修复。官方说明：https://github.com/OpenAEV-Platform/open |
| CVE-2026-69194 | MEDIUM | 4.8 | 2026-10-14 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batc | error311 FileRise | 请参考厂商官方公告并升级修复。官方说明：https://github.com/error311/FileRise/com |
| CVE-2026-69193 | MEDIUM | 6.5 | 2026-10-14 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batc | error311 FileRise | 请参考厂商官方公告并升级修复。官方说明：https://github.com/error311/FileRise/com |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。