云虫漏洞情报：CVE 自动同步更新。

搜索

• CVE-2026-81095 [中危] CVE-2026-81095 - pg-aiguide started its MCP HTTP transport without enabling the host allow… (CVE) 2026-08-27
• CVE-2026-81094 [危急] CVE-2026-81094 - The mcp-router CLI served its MCP aggregator on every interface and enfor… (CVE) 2026-08-27
• CVE-2026-81093 [高危] CVE-2026-81093 - The get-html-skeleton tool fetched a URL the caller supplied after checki… (CVE) 2026-08-27
• CVE-2026-81092 [中危] CVE-2026-81092 - mcp-go accepted requests on its HTTP transports without checking the Host… (CVE) 2026-08-27
• CVE-2026-81091 [高危] CVE-2026-81091 - The proxy middleware in mcp-use's inspector forwards requests to a destin… (CVE) 2026-08-27
• CVE-2026-80213 [中危] CVE-2026-80213 - An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::… (CVE) 2026-08-27
• CVE-2026-80212 [高危] CVE-2026-80212 - An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::… (CVE) 2026-08-27
• CVE-2026-80211 [中危] CVE-2026-80211 - FrontAccounting through 2.4.20 stores and verifies user passwords as unsa… (CVE) 2026-08-27
• CVE-2026-80210 [中危] CVE-2026-80210 - FrontAccounting through 2.4.20 generates a CSRF token in end_form() in in… (CVE) 2026-08-27
• CVE-2026-80209 [中危] CVE-2026-80209 - The updateWorkspace handler in mods/identity/src/workspaces/createUpdateW… (CVE) 2026-08-27
• CVE-2026-80208 [高危] CVE-2026-80208 - APITable through 1.13.0-beta.1 annotates both getUserHistories and closeP… (CVE) 2026-08-27
• CVE-2026-80207 [中危] CVE-2026-80207 - APITable through 1.13.0-beta.1 annotates the create handler of InternalNo… (CVE) 2026-08-27
• CVE-2026-79988 [未知] CVE-2026-79988 - The Twig sandbox mechanism in Craft CMS is configured to allow dangerous … (CVE) 2026-08-27
• CVE-2026-79720 [未知] CVE-2026-79720 - Reflected XSS in Netron versions (CVE) 2026-08-27
• CVE-2026-79719 [未知] CVE-2026-79719 - Reflected XSS in Netron versions (CVE) 2026-08-27
• CVE-2026-79718 [未知] CVE-2026-79718 - Reflected XSS in Netron versions (CVE) 2026-08-27
• CVE-2026-79653 [未知] CVE-2026-79653 - In Eclipse SW360 versions 19.0.0, 19.1.0, 19.2.0, 20.0.0, 20.1.0, if the … (CVE) 2026-08-27
• CVE-2026-78251 [未知] CVE-2026-78251 - DJI drones contain an FTP service that uses hardcoded credentials shared … (CVE) 2026-08-27
• CVE-2026-78002 [高危] CVE-2026-78002 - A flaw was found in rsyslog. An unauthenticated remote attacker can trigg… (CVE) 2026-08-27
• CVE-2026-75871 [高危] CVE-2026-75871 - GitLab has remediated a vulnerability in the GitLab AI Gateway component … (CVE) 2026-08-27