CloudMap漏洞情报库
漏洞库厂商产品风险排行
开发者中心开始检索 ↗
CloudMap漏洞情报库

面向安全研究者与技术团队的公开漏洞情报检索平台。

漏洞库厂商产品风险排行
© 2026 CloudMap数据仅供安全研究与风险评估参考
VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。

利用情报保护仅展示 PoC / EXP 是否收录不公开内容、路径和下载地址
⌕/
筛选条件重置
566条匹配记录
PoCEXP绿色表示已收录,灰色表示暂无
漏洞与影响对象风险等级CVSSEPSS利用情报披露时间
CVE-2026-56290KEVRCE
Page Builder CK <= 3.5.10 - Unauthenticated Arbitrary File Upload
Page Builder CK
严重——
PoCEXP
2026/07/28
CVE-2026-52824
Kimai <= 2.57.0 - Default APP_SECRET Authentication Bypass
Kimai
严重——
PoCEXP
2026/07/28
CVE-2026-3296KEV
Everest Forms WordPress Plugin <= 3.4.3 - PHP Object Injection
everest-forms
严重——
PoCEXP
2026/07/28
CVE-2026-15409KEV
SonicWall SMA1000 - Server-Side Request Forgery
SonicWall SMA
严重——
PoCEXP
2026/07/28
CVE-2026-59801
9Router - Unauthenticated LLM Provider API Exposure
9Router
严重——
PoCEXP
2026/07/19
CVE-2026-63030
WordPress Core 6.9-7.0.1 - Pre-Auth Blind SQL Injection (Batch-Route Confusion)
wordpress
严重——
PoCEXP
2026/07/19
CVE-2026-46339RCE
9Router <= 0.4.36 - Unauthenticated RCE
9Router
严重——
PoCEXP
2026/07/19
sanhuismg_radius_rceRCE
Synway SMG Gateway 9-2radius.php - Remote Command Execution
synway_smg
严重——
PoCEXP
2026/06/25
CVE-2026-27174RCE
MajorDoMo - Unauthenticated RCE
majordomo
严重——
PoCEXP
2026/06/25
CVE-2026-34197
Apache ActiveMQ - Remote Code Execution
activemq
严重——
PoCEXP
2026/06/25
CVE-2026-53787
Magento 2 Amasty Order Attributes < 4.0.0 - Unauthenticated Arbitrary File Upload
magento
严重——
PoCEXP
2026/06/25
CVE-2026-3584RCE
WordPress Kali Forms <= 2.4.9 - Remote Code Execution
kali-forms
严重——
PoCEXP
2026/06/25
CVE-2026-4810RCE
Google ADK-Python - Unauthenticated Builder Endpoint
Google ADK-Python
严重——
PoCEXP
2026/06/25
CVE-2026-5027RCE
Langflow <= 1.8.4 - Path Traversal to RCE via File Upload
Langflow
高危——
PoCEXP
2026/06/25
CVE-2026-40466
Apache ActiveMQ - Remote Code Execution via HTTP Discovery Transport Bypass
activemq
高危——
PoCEXP
2026/06/25
CVE-2026-42271
LiteLLM - Command Injection
litellm
严重——
PoCEXP
2026/06/25
CVE-2026-20253RCE
Splunk Enterprise & Cloud Platform - Unrestricted File Upload
Splunk
严重——
PoCEXP
2026/06/25
CVE-2026-1492RCE
WordPress User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation
user-registration
严重——
PoCEXP
2026/06/25
CVE-2026-24477
AnythingLLM - Information Disclosure
anything-llm
高危——
PoCEXP
2026/06/25
CVE-2026-34486RCE
Apache Tomcat Tribes EncryptInterceptor Bypass - Remote Code Execution
Apache Tomcat
严重——
PoCEXP
2026/06/25
← 上一页1 / 29下一页 →