首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45419 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-104633 | MEDIUM | 6.5 | 2026-10-06 | When migrating a repository from another Gitea instance, Gitea used the page size reported | Gitea | 受影响版本 ≤ 28.0.0，请升级到修复版本。 |
| CVE-2026-101023 | CRITICAL | 9.1 | 2026-10-06 | Gitea's OAuth2 token endpoint verified the signature and grant of a token submitted with t | Gitea | 受影响版本 ≤ 28.0.0，请升级到修复版本。 |
| CVE-2026-43598 | 待定 | 待定 | 2026-10-06 | Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could a | AMD AMD Instinct™ MI210, AMD AMD Instinc | 请参考厂商官方公告并升级修复。官方说明：https://www.amd.com/en/resources/product |
| CVE-2026-19029 | 待定 | 待定 | 2026-10-06 | A heap-based buffer over-read in H5Z__filter_scaleoffset() in src/H5Zscaleoffset.c in HDF5 | The HDF Group HDF5 | 请参考厂商官方公告并升级修复。官方说明：https://github.com/HDFGroup/hdf5/pull/67 |
| CVE-2026-106586 | LOW | 2.5 | 2026-10-06 | In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to | OpenBSD OpenSSH | 受影响版本 < 10.6，请升级到修复版本。 |
| CVE-2026-106585 | MEDIUM | 6.5 | 2026-10-06 | In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet l | OpenBSD OpenSSH | 受影响版本 < 10.6，请升级到修复版本。 |
| CVE-2026-106584 | LOW | 2.5 | 2026-10-06 | In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times b | OpenBSD OpenSSH | 受影响版本 < 10.6，请升级到修复版本。 |
| CVE-2026-106582 | LOW | 3.7 | 2026-10-06 | In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though t | OpenBSD OpenSSH | 受影响版本 < 10.6，请升级到修复版本。 |
| CVE-2026-106555 | LOW | 2.2 | 2026-10-06 | In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly | OpenBSD OpenSSH | 受影响版本 < 10.6，请升级到修复版本。 |
| CVE-2026-106553 | LOW | 2.2 | 2026-10-06 | In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSS | OpenBSD OpenSSH | 受影响版本 < 10.6，请升级到修复版本。 |
| CVE-2026-106552 | MEDIUM | 4.2 | 2026-10-06 | In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to | OpenBSD OpenSSH | 受影响版本 < 10.6，请升级到修复版本。 |
| CVE-2026-106550 | HIGH | 7.5 | 2026-10-06 | Mozilla's Node-convict (version 6.2.2 and later) is vulnerable to a Denial of Service vuln | Mozilla Node-convict | 请参考厂商官方公告并升级修复。官方说明：https://github.com/mozilla/node-convict |
| CVE-2026-106547 | 待定 | 待定 | 2026-10-06 | A heap-based buffer overflow in H5VM_array_fill() in src/H5VM.c in HDF5 before 2.2.0 lets | The HDF Group HDF5 | 受影响版本 < 2.2.0，请升级到修复版本。 |
| CVE-2026-106494 | MEDIUM | 4.4 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backs | backstage, @backstage backend-defaults | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
| CVE-2026-106493 | LOW | 3 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud stor | backstage, @backstage plugin-catalog-bac | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
| CVE-2026-106492 | HIGH | 7.6 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, | backstage, @backstage backend-defaults | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
| CVE-2026-106491 | MEDIUM | 6.4 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backs | backstage, @backstage plugin-proxy-backe | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
| CVE-2026-106490 | MEDIUM | 6.5 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backst | backstage, @backstage plugin-techdocs-ba | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
| CVE-2026-106489 | MEDIUM | 6.5 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backst | backstage, @backstage plugin-techdocs-ba | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
| CVE-2026-106488 | HIGH | 8.1 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backs | backstage, @backstage plugin-auth-backen | 请参考厂商官方公告并升级修复。官方说明：https://github.com/backstage/backstage/c |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。