首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 44135 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-89107 | CRITICAL | 9.9 | 2026-10-13 | SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input pr | SAP_SE SAP S/4HANA (Manage Substitution/ | 请参考厂商官方公告并升级修复。官方说明：https://me.sap.com/notes/3805589 |
| CVE-2026-89106 | MEDIUM | 4.4 | 2026-10-13 | SAP UI5 does not perform sufficient input validation under certain configurations. An atta | SAP_SE SAPUI5 | 请参考厂商官方公告并升级修复。官方说明：https://me.sap.com/notes/3799054 |
| CVE-2026-89105 | MEDIUM | 4.2 | 2026-10-13 | The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-libr | SAP_SE SAP/cloud-security-services-integ | 请参考厂商官方公告并升级修复。官方说明：https://github.com/SAP/cloud-security-se |
| CVE-2026-87689 | CRITICAL | 9.8 | 2026-10-13 | The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store throug | Rapid7 Metasploit Framework | 受影响版本 ≤ 6.5.4，请升级到修复版本。 |
| CVE-2026-76976 | MEDIUM | 5.4 | 2026-10-13 | Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not suf | SAP_SE SAP NetWeaver Application Server | 请参考厂商官方公告并升级修复。官方说明：https://me.sap.com/notes/3671819 |
| CVE-2026-76975 | MEDIUM | 6.1 | 2026-10-13 | Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker c | SAP_SE SAPUI5 (Support Assistant Overlay | 请参考厂商官方公告并升级修复。官方说明：https://me.sap.com/notes/3794572 |
| CVE-2026-76972 | MEDIUM | 6.5 | 2026-10-13 | Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Int | SAP_SE SAP Manufacturing Integration and | 请参考厂商官方公告并升级修复。官方说明：https://me.sap.com/notes/3798823 |
| CVE-2026-58249 | HIGH | 7.5 | 2026-10-13 | SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially | SAP_SE SAP NetWeaver and SAP Web Dispatc | 请参考厂商官方公告并升级修复。官方说明：https://me.sap.com/notes/3765424 |
| CVE-2026-58242 | LOW | 3.5 | 2026-10-13 | SAP Cloud Connector contains an improper authorization check, which could be exploited by | SAP_SE SAP Cloud Connector | 请参考厂商官方公告并升级修复。官方说明：https://me.sap.com/notes/3767634 |
| CVE-2026-108945 | MEDIUM | 5.3 | 2026-10-13 | A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b7466186 | iMoonLab yolov13 | 请参考厂商官方公告并升级修复。官方说明：https://github.com/iMoonLab/yolov13/ |
| CVE-2026-108944 | MEDIUM | 4.8 | 2026-10-13 | A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c | repository RAE | 请参考厂商官方公告并升级修复。官方说明：https://github.com/bytetriper/RAE/issues |
| CVE-2026-108943 | MEDIUM | 5.3 | 2026-10-13 | A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function A | ModelTC LightX2V | 请参考厂商官方公告并升级修复。官方说明：https://github.com/ModelTC/LightX2V/ |
| CVE-2026-108942 | LOW | 3.5 | 2026-10-13 | A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e | philz1337x clarity-upscaler | 请参考厂商官方公告并升级修复。官方说明：https://github.com/philz1337x/clarity-up |
| CVE-2026-96119 | CRITICAL | 9.9 | 2026-10-13 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensiti | IBM i | 请参考厂商官方公告并升级修复。官方说明：https://www.ibm.com/support/pages/node/7 |
| CVE-2026-93886 | HIGH | 8.3 | 2026-10-13 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitr | IBM i | 请参考厂商官方公告并升级修复。官方说明：https://www.ibm.com/support/pages/node/7 |
| CVE-2026-81858 | MEDIUM | 5.4 | 2026-10-13 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial | IBM i | 请参考厂商官方公告并升级修复。官方说明：https://www.ibm.com/support/pages/node/7 |
| CVE-2026-19938 | MEDIUM | 5.9 | 2026-10-13 | The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fail | zephyrproject zephyr | 受影响版本 < 4.5.0，请升级到修复版本。 |
| CVE-2026-19937 | MEDIUM | 5.7 | 2026-10-13 | The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delay | zephyrproject zephyr | 受影响版本 ≤ 4.4.2，请升级到修复版本。 |
| CVE-2026-19936 | MEDIUM | 4.8 | 2026-10-13 | The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayable | zephyrproject zephyr | 受影响版本 ≤ 4.4.2，请升级到修复版本。 |
| CVE-2026-18343 | MEDIUM | 4.4 | 2026-10-13 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to | IBM i | 请参考厂商官方公告并升级修复。官方说明：https://www.ibm.com/support/pages/node/7 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。