首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 41939 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-102460 | 待定 | 待定 | 2026-10-14 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5 | Eclipse Foundation Eclipse Vert.x | 受影响版本 ≤ 5.1.9，请升级到修复版本。 |
| CVE-2026-102354 | MEDIUM | 6.8 | 2026-10-14 | BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2. | alam00000 bentopdf | 请参考厂商官方公告并升级修复。官方说明：https://github.com/alam00000/bentopdf/co |
| CVE-2026-100406 | 待定 | 待定 | 2026-10-14 | dbt enables data analysts and engineers to transform their data using the same practices t | dbt-labs dbt-core | 请参考厂商官方公告并升级修复。官方说明：https://github.com/dbt-labs/dbt/commit/3 |
| CVE-2026-92160 | MEDIUM | 6.5 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and oth | nasa fprime | 请参考厂商官方公告并升级修复。官方说明：https://github.com/nasa/fprime/commit/33 |
| CVE-2026-92159 | MEDIUM | 6.5 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and oth | nasa fprime | 请参考厂商官方公告并升级修复。官方说明：https://github.com/nasa/fprime/commit/04 |
| CVE-2026-92158 | HIGH | 7.2 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and oth | nasa fprime | 请参考厂商官方公告并升级修复。官方说明：https://github.com/nasa/fprime/commit/75 |
| CVE-2026-92157 | MEDIUM | 6.5 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and oth | nasa fprime | 请参考厂商官方公告并升级修复。官方说明：https://github.com/nasa/fprime/commit/33 |
| CVE-2026-92156 | MEDIUM | 6.5 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and oth | nasa fprime | 请参考厂商官方公告并升级修复。官方说明：https://github.com/nasa/fprime/commit/7e |
| CVE-2026-92155 | HIGH | 7.5 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and oth | nasa fprime | 请参考厂商官方公告并升级修复。官方说明：https://github.com/nasa/fprime/commit/ca |
| CVE-2026-92154 | HIGH | 8.1 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and oth | nasa fprime | 请参考厂商官方公告并升级修复。官方说明：https://github.com/nasa/fprime/commit/ca |
| CVE-2026-92152 | 待定 | 待定 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and oth | nasa fprime | 请参考厂商官方公告并升级修复。官方说明：https://github.com/nasa/fprime/commit/b5 |
| CVE-2026-92150 | HIGH | 7.5 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and oth | nasa fprime | 请参考厂商官方公告并升级修复。官方说明：https://github.com/nasa/fprime/commit/b5 |
| CVE-2026-88164 | HIGH | 8.8 | 2026-10-14 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elev | Microsoft Microsoft SharePoint Server Su | 受影响版本 < 16.0.20326.20190，请升级到修复版本。 微软官方漏洞（Microsoft Office S |
| CVE-2026-86856 | MEDIUM | 6.5 | 2026-10-14 | A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single qu | Red Hat Fast Datapath for RHEL 10, Red H | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-86849 | MEDIUM | 6.5 | 2026-10-14 | A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, | Red Hat Fast Datapath for RHEL 10, Red H | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-86848 | HIGH | 8.8 | 2026-10-14 | A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-f | Red Hat Fast Datapath for RHEL 10, Red H | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-86847 | MEDIUM | 6.5 | 2026-10-14 | A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an un | Red Hat Fast Datapath for RHEL 10, Red H | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-86846 | MEDIUM | 6.5 | 2026-10-14 | A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descript | Red Hat Fast Datapath for RHEL 10, Red H | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-86845 | MEDIUM | 6.5 | 2026-10-14 | A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached | Red Hat Fast Datapath for RHEL 10, Red H | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
| CVE-2026-86567 | HIGH | 8.8 | 2026-10-14 | A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers w | Red Hat Fast Datapath for RHEL 10, Red H | 请参考厂商官方公告并升级修复。官方说明：https://access.redhat.com/security/cve/C |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。