首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 41216 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-105931 | 待定 | 待定 | 2026-10-21 | The Apache Pulsar broker exposes a transaction administration REST API under /admin/v3/tra | Apache Software Foundation Apache Pulsar | 受影响版本 < 4.2.5，请升级到修复版本。 |
| CVE-2025-55702 | HIGH | 8.7 | 2026-10-21 | When a client sends a POST with Expect: 100-continue and the origin answers before reading | Apache Software Foundation Apache Traffi | 受影响版本 ≤ 10.1.4，请升级到修复版本。 |
| CVE-2025-31699 | HIGH | 8.9 | 2026-10-21 | Apache Traffic Server can return an origin connection to the shared pool while the origin | Apache Software Foundation Apache Traffi | 受影响版本 ≤ 10.1.4，请升级到修复版本。 |
| CVE-2026-92210 | HIGH | 7.2 | 2026-10-21 | NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vul | NoMachine | 请参考厂商官方公告并升级修复。官方说明：https://www.zerodayinitiative.com/adviso |
| CVE-2026-92209 | HIGH | 7.8 | 2026-10-21 | NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vul | NoMachine | 请参考厂商官方公告并升级修复。官方说明：https://www.zerodayinitiative.com/adviso |
| CVE-2026-92208 | HIGH | 8.8 | 2026-10-21 | NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulner | NoMachine | 请参考厂商官方公告并升级修复。官方说明：https://www.zerodayinitiative.com/adviso |
| CVE-2026-92207 | HIGH | 8.8 | 2026-10-21 | MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability. This vulnerability | MindsDB | 请参考厂商官方公告并升级修复。官方说明：https://www.zerodayinitiative.com/adviso |
| CVE-2026-92206 | HIGH | 8.8 | 2026-10-21 | CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerabilit | CrewAI | 请参考厂商官方公告并升级修复。官方说明：https://www.zerodayinitiative.com/adviso |
| CVE-2026-92205 | MEDIUM | 6.1 | 2026-10-21 | BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This | BusyBox | 请参考厂商官方公告并升级修复。官方说明：https://www.zerodayinitiative.com/adviso |
| CVE-2026-92204 | HIGH | 7.7 | 2026-10-21 | Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Informatio | Airbyte | 请参考厂商官方公告并升级修复。官方说明：https://www.zerodayinitiative.com/adviso |
| CVE-2026-92203 | HIGH | 7.7 | 2026-10-21 | Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Informat | Airbyte | 请参考厂商官方公告并升级修复。官方说明：https://www.zerodayinitiative.com/adviso |
| CVE-2026-92202 | HIGH | 7.8 | 2026-10-21 | Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vul | Luxion KeyShot | 请参考厂商官方公告并升级修复。官方说明：https://download.keyshot.com/cert/ksa-30 |
| CVE-2026-92183 | HIGH | 7.8 | 2026-10-21 | GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. Th | GIMP | 请参考厂商官方公告并升级修复。官方说明：https://gitlab.gnome.org/GNOME/gimp/-/co |
| CVE-2026-89035 | HIGH | 7.4 | 2026-10-21 | MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebF | MikroTik RouterOS | 受影响版本 ≤ 7.24.5，请升级到修复版本。 |
| CVE-2026-114493 | HIGH | 8.6 | 2026-10-21 | LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in cor | LocalAI | 受影响版本 ≤ v4.11.0，请升级到修复版本。 |
| CVE-2026-114492 | MEDIUM | 6.5 | 2026-10-21 | gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authentica | flipped-aurora gin-vue-admin | 受影响版本 ≤ 2.9.2，请升级到修复版本。 |
| CVE-2026-114491 | MEDIUM | 5.3 | 2026-10-21 | pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy() restriction to image | bpampuch pdfmake | 受影响版本 < 0.3.12，请升级到修复版本。 |
| CVE-2026-114265 | MEDIUM | 6.3 | 2026-10-21 | A weakness has been identified in ProjectWorlds Advanced Library Management System 1.0. Th | ProjectWorlds Advanced Library Managemen | 请参考厂商官方公告并升级修复。官方说明：https://github.com/CyberShailendra1/Adva |
| CVE-2026-114264 | MEDIUM | 4.7 | 2026-10-21 | A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1. | ProjectWorlds Advanced Library Managemen | 请参考厂商官方公告并升级修复。官方说明：https://github.com/CyberShailendra1/Adva |
| CVE-2026-114263 | HIGH | 7.3 | 2026-10-21 | A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. Th | ProjectWorlds Advanced Library Managemen | 请参考厂商官方公告并升级修复。官方说明：https://github.com/CyberShailendra1/Adva |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。