首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 44818 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-92705 | HIGH | 7.8 | 2026-10-09 | Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automat | TypesettingTools Aegisub | 请参考厂商官方公告并升级修复。官方说明：https://github.com/TypesettingTools/Aegi |
| CVE-2026-62376 | HIGH | 8.1 | 2026-10-09 | Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 st | go-vikunja vikunja | 请参考厂商官方公告并升级修复。官方说明：https://github.com/go-vikunja/vikunja/co |
| CVE-2026-62367 | 待定 | 待定 | 2026-10-09 | Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through | go-vikunja vikunja | 请参考厂商官方公告并升级修复。官方说明：https://github.com/go-vikunja/vikunja/co |
| CVE-2026-57458 | HIGH | 8.1 | 2026-10-09 | Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped | go-vikunja vikunja | 请参考厂商官方公告并升级修复。官方说明：https://github.com/go-vikunja/vikunja/co |
| CVE-2026-108266 | 待定 | 待定 | 2026-10-09 | Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge | Privasys rustls | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Privasys/rustls/commi |
| CVE-2026-108265 | 待定 | 待定 | 2026-10-09 | Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enc | Privasys enclave-os-mini | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Privasys/enclave-os-m |
| CVE-2026-108264 | CRITICAL | 9.1 | 2026-10-09 | Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and | wizarrrr wizarr | 请参考厂商官方公告并升级修复。官方说明：https://github.com/wizarrrr/wizarr/commi |
| CVE-2026-108263 | CRITICAL | 9.9 | 2026-10-09 | Astron Agent is an agentic workflow platform for building and running AI agents. Prior to | iflytek astron-agent | 请参考厂商官方公告并升级修复。官方说明：https://github.com/iflytek/astron-agent/ |
| CVE-2026-108261 | CRITICAL | 9.3 | 2026-10-09 | Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5 | tinacms, @tinacms app | 请参考厂商官方公告并升级修复。官方说明：https://github.com/tinacms/tinacms/commi |
| CVE-2026-108260 | HIGH | 7.6 | 2026-10-09 | Tina is a headless content management system. Prior to 0.2.1, the tina-markdown element in | tinacms, @tinacms web-components | 请参考厂商官方公告并升级修复。官方说明：https://github.com/tinacms/tinacms/commi |
| CVE-2026-108259 | HIGH | 8.2 | 2026-10-09 | Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branc | tinacms, @tinacms cli | 请参考厂商官方公告并升级修复。官方说明：https://github.com/tinacms/tinacms/commi |
| CVE-2026-108258 | 待定 | 待定 | 2026-10-09 | Shiny for Python is a framework for building interactive web applications in Python. From | posit-dev py-shiny | 请参考厂商官方公告并升级修复。官方说明：https://github.com/posit-dev/py-shiny/co |
| CVE-2026-107857 | MEDIUM | 4.4 | 2026-10-09 | Mindwtr is a free offline-first task management application for desktop and mobile. Prior | dongdongbh Mindwtr | 请参考厂商官方公告并升级修复。官方说明：https://github.com/dongdongbh/Mindwtr/co |
| CVE-2026-107856 | MEDIUM | 4.5 | 2026-10-09 | CiviForm simplifies applications for government benefits programs by reusing applicant dat | civiform | 请参考厂商官方公告并升级修复。官方说明：https://github.com/civiform/civiform/com |
| CVE-2026-107854 | MEDIUM | 5.4 | 2026-10-09 | Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0. | Jexactyl | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Jexactyl/Jexactyl/com |
| CVE-2026-107852 | 待定 | 待定 | 2026-10-09 | Jexactyl is a customisable game management panel and billing system. Prior to 4.0.5, the P | Jexactyl | 请参考厂商官方公告并升级修复。官方说明：https://github.com/Jexactyl/Jexactyl/com |
| CVE-2026-107851 | MEDIUM | 4.3 | 2026-10-09 | Contao is an Open Source CMS. From version 5.7.0 until 5.7.12, TableAccessVoter::hasAccess | contao | 请参考厂商官方公告并升级修复。官方说明：https://github.com/contao/contao/commit/ |
| CVE-2026-107850 | MEDIUM | 4.3 | 2026-10-09 | Contao is an Open Source CMS. From version 5.7.1 until 5.7.12, core-bundle/config/services | contao | 请参考厂商官方公告并升级修复。官方说明：https://github.com/contao/contao/commit/ |
| CVE-2026-107848 | LOW | 3.5 | 2026-10-09 | Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, RequestTokenList | contao | 请参考厂商官方公告并升级修复。官方说明：https://github.com/contao/contao/commit/ |
| CVE-2026-78797 | 待定 | 待定 | 2026-10-09 | An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbit | n/a | 请参考厂商官方公告并升级修复。官方说明：https://doc.linkease.com/zh/guide/istore |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。