本仓库专用于记录、追踪以及发布最新发现的 CVE 漏洞信息。
下方表格汇总了近期发现的项目漏洞,包含受影响的项目、漏洞类型、CVSS 评分及详细报告内容链接
| CVE 编号 | 项目 | 项目热度 | 漏洞类型 | CVSS | 漏洞内容 |
|---|---|---|---|---|---|
| CVE-2026-40904 | Chartbrew | Improper Access Control | 8.1 | 漏洞详情 | |
| CVE-2026-40603 | Chartbrew | Improper Access Control | 6.5 | 漏洞详情 | |
| CVE-2026-40601 | Chartbrew | Missing Authorization | 7.5 | 漏洞详情 | |
| CVE-2026-40600 | Chartbrew | Improper Access Control | 8.1 | 漏洞详情 | |
| CVE-2026-40595 | Chartbrew | Improper Access Control | 7.5 | 漏洞详情 | |
| CVE-2026-42181 | Lemmy | SSRF | 6.5 | 漏洞详情 | |
| CVE-2026-42180 | Lemmy | SSRF | 6.3 | 漏洞详情 | |
| CVE-2026-7290 | JeecgBoot | SQL Injection | 6.3 | 漏洞详情 | |
| CVE-2026-7291 | o2oa | SSRF | 6.3 | 漏洞详情 | |
| CVE-2026-7292 | o2oa | RCE | 5.6 | 漏洞详情 | |
| CVE-2026-7303 | xxl-job | Improper Access Control | 3.7 | 漏洞详情 | |
| CVE-2026-7305 | xxl-job | SSRF | 6.3 | 漏洞详情 | |
| CVE-2026-7306 | xxl-job | Hard-coded Key | 5.6 | 漏洞详情 | |
| CVE-2026-40610 | BentoML | Link Following | 5.5 | 漏洞详情 | |
| CVE-2026-48763 | typebot.io | Missing Authorization | 8.2 | 漏洞详情 | |
| CVE-2026-48764 | typebot.io | SSRF | 8.2 | 漏洞详情 | |
| CVE-2026-48765 | typebot.io | Authorization Bypass | 9.9 | 漏洞详情 | |
| CVE-2026-48766 | typebot.io | Sensitive Data Exposure | 7.6 | 漏洞详情 | |
| CVE-2026-48767 | typebot.io | Sensitive Data Exposure | 7.6 | 漏洞详情 | |
| CVE-2026-45296 | OpenReplay | Improper Access Control | 7.7 | 漏洞详情 | |
| CVE-2026-46372 | SillyTavern | SSRF | 8.5 | 漏洞详情 | |
| CVE-2026-45260 | pimcore | Missing Authorization | 8.1 | 漏洞详情 | |
| CVE-2026-41235 | froxlor | Incorrect Authorization | 8.8 | 漏洞详情 | |
| CVE-2026-41236 | froxlor | Link Following | 8.8 | 漏洞详情 | |
| CVE-2026-43984 | Tautulli | Stored XSS | 8.9 | 漏洞详情 | |
| CVE-2026-43985 | Tautulli | CSRF | 8.8 | 漏洞详情 | |
| CVE-2026-43986 | Tautulli | SSRF | 9.9 | 漏洞详情 | |
| CVE-2026-54091 | filebrowser | Incorrect Authorization | 7.5 | 漏洞详情 | |
| CVE-2026-50279 | craftcms | Improper Authorization | 6.5 | 漏洞详情 | |
| CVE-2026-50280 | craftcms | Improper Access Control | 6.5 | 漏洞详情 |