CloudMap
漏洞情报库
漏洞库
厂商
产品
风险排行
开发者中心
开始检索
↗
VULNERABILITY INTELLIGENCE
漏洞情报库
组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。
利用情报保护
仅展示 PoC / EXP 是否收录
不公开内容、路径和下载地址
⌕
/
搜索漏洞
10,857
条匹配记录
PoC
EXP
绿色表示已收录,灰色表示暂无
漏洞与影响对象
风险等级
CVSS
EPSS
利用情报
披露时间
CVE-2026-5562
Provectus kafka-ui <=0.7.2 - Remote Code Execution
严重
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-17505
WordPress TranslatePress < 3.2.6 - Cross-Site Scripting
中危
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-61736
LightRAG <= 1.5.3 - Credentialed CORS Wildcard
高危
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-19632
TranslatePress <= 3.3.1 - Unauthenticated Account Takeover
严重
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-23693
ElementsKit Lite <3.7.9 - Unauthenticated Mailchimp Proxy
高危
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-58123
Hermes WebUI < 0.51.788 - Remote Code Execution
严重
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-58138
Orkes Conductor 3.21.21-3.30.1 - Remote Code Execution
严重
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-55224
MineAdmin < 3.2.0-alpha.2 - Plugin Path Traversal to RCE
高危
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-15826
User Profile Builder 3.16.4 - Unauthenticated Authentication Bypass
profile_builder
严重
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-82456
argocd-mcp 0.8.0 - Unauthenticated MCP Session and Tool Access
严重
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-35037
Ech0 < 4.2.8 - Server-Side Request Forgery
高危
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-16268
Newsletters < 4.16 - Unauthenticated SSRF via SNS Bounce Handler
中危
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-56292
AcyMailing < 10.11.1 - Unauthenticated SQL Injection
严重
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-12394
WordPress MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation
严重
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-72898
Metabase - Unauthenticated SQL Injection
Metabase
严重
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-44343
WGDashboard < 4.3.2 - Unauthenticated File Read
严重
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-30849
MantisBT < 2.28.1 - SOAP API Authentication Bypass
MantisBT
严重
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-41432
New API < v0.12.10 - Stripe Webhook Bypass
高危
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-8857
MediaWiki EasyTimeline - Code Injection RCE
高危
—
—
PoC
EXP
2026/09/30
⌄
CVE-2026-49049
JoomShaper Helix3 <=3.1.0 - Unauthenticated Arbitrary JSON File Write
高危
—
—
PoC
EXP
2026/09/30
⌄
← 上一页
8 / 543
下一页 →