CloudMap漏洞情报库
漏洞库厂商产品风险排行
开发者中心开始检索 ↗
CloudMap漏洞情报库

面向安全研究者与技术团队的公开漏洞情报检索平台。

漏洞库厂商产品风险排行
© 2026 CloudMap数据仅供安全研究与风险评估参考
VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。

利用情报保护仅展示 PoC / EXP 是否收录不公开内容、路径和下载地址
⌕/
筛选条件重置
3,060条匹配记录
PoCEXP绿色表示已收录,灰色表示暂无
漏洞与影响对象漏洞类型风险等级CVSSEPSS利用情报披露时间
CVE-2026-4810RCE
Google ADK-Python - Unauthenticated Builder Endpoint
Google ADK-Python
未授权访问严重——
PoCEXP
2026/06/25
CVE-2026-3300
Everest Forms Pro <= 1.9.12 - Unauthenticated RCE via Calculation Formula Injection
everest-forms-pro
未授权访问严重——
PoCEXP
2026/06/25
CVE-2026-1306
WordPress midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File Upload
midi-synth
远程代码执行严重——
PoCEXP
2026/06/25
CVE-2026-33057
Mesop AI Sandbox <= 1.2.2 - Remote Code Execution
Mesop
远程代码执行严重——
PoCEXP
2026/06/25
CVE-2026-49777
WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCE
woo-product-slider-pro
未授权访问严重——
PoCEXP
2026/06/25
CVE-2026-33439
OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization
openam
远程代码执行严重——
PoCEXP
2026/06/25
CVE-2026-28496
FOSSBilling - Server-Side Template Injection
fossbilling
远程代码执行严重——
PoCEXP
2026/06/25
CVE-2026-39339
ChurchCRM - API Authentication Bypass via URL Injection
churchcrm
身份验证绕过严重——
PoCEXP
2026/06/25
CVE-2026-42271
LiteLLM - Command Injection
litellm
远程代码执行严重——
PoCEXP
2026/06/25
CVE-2026-20253RCE
Splunk Enterprise & Cloud Platform - Unrestricted File Upload
Splunk
文件上传严重——
PoCEXP
2026/06/25
CVE-2026-1581
wpForo Forum <= 2.4.14 - SQL Injection
wpforo
未授权访问严重——
PoCEXP
2026/06/25
CVE-2026-26190
Milvus - Unauthenticated Metrics API Access
Milvus
未授权访问严重——
PoCEXP
2026/06/25
CVE-2026-27944
Nginx UI < 2.3.3 - Information Disclosure
Nginx UI
未授权访问严重——
PoCEXP
2026/06/25
CVE-2026-40887
Vendure Core - SQL Injection
Vendure
SQL注入严重——
PoCEXP
2026/06/25
CVE-2026-1492RCE
WordPress User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation
user-registration
未分类严重——
PoCEXP
2026/06/25
CVE-2026-41179
RClone RC - Command Injection
Rclone
未授权访问严重——
PoCEXP
2026/06/25
CVE-2026-29014
MetInfo CMS <= 8.1 - Remote Code Execution
MetInfo
远程代码执行严重——
PoCEXP
2026/06/25
CVE-2026-1357
WPvivid Backup & Migration <= 0.9.123 - Arbitrary File Upload
wpvivid-backuprestore
远程代码执行严重——
PoCEXP
2026/06/25
CVE-2026-34486RCE
Apache Tomcat Tribes EncryptInterceptor Bypass - Remote Code Execution
Apache Tomcat
远程代码执行严重——
PoCEXP
2026/06/25
CVE-2026-42589
Gotenberg - Command Injection
Gotenberg
未授权访问严重——
PoCEXP
2026/06/25
← 上一页12 / 153下一页 →