CWE-184 不完整的黑名单 类弱点 136 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-184属于输入验证缺陷，指软件依赖黑名单机制过滤非法输入，但列表存在遗漏。攻击者常利用此漏洞，通过构造未被黑名单覆盖的恶意输入绕过安全限制，从而执行未授权操作或注入攻击。开发者应避免单纯依赖黑名单，转而采用白名单机制严格限定合法输入，或对所有输入进行标准化处理与深度校验，确保防御逻辑的完整性与健壮性。
public String removeScriptTags(String input, String mask) { return input.replaceAll("script", mask); }sub GetUntrustedInput { return($ARGV[0]); } sub encode { my($str) = @_; $str =~ s/\&/\&/gs; $str =~ s/\"/\"/gs; $str =~ s/\'/\'/gs; $str =~ s/\</\</gs; $str =~ s/\>/\>/gs; return($str); } sub doit { my $uname = encode(GetUntrustedInput("username")); print "<b>Welcome, $uname!</b><p>\n"; system("cd /home/$uname; /bin/ls -l"); }' pwd| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-54512 | FasterXML jackson-databind 输入验证错误漏洞 — jackson-databind | 8.1 | High | 2026-06-23 |
| CVE-2026-54513 | FasterXML jackson-databind 输入验证错误漏洞 — jackson-databind | 8.1 | High | 2026-06-23 |
| CVE-2026-56315 | picklescan 输入验证错误漏洞 — picklescan | 9.8 | Critical | 2026-06-23 |
| CVE-2025-71351 | picklescan 输入验证错误漏洞 — picklescan | - | - | 2026-06-21 |
| CVE-2026-53873 | Matthieu Maitre Picklescan 输入验证错误漏洞 — picklescan | 9.8 | Critical | 2026-06-17 |
| CVE-2025-71323 | Matthieu Maitre Picklescan 输入验证错误漏洞 — picklescan | 9.8 | Critical | 2026-06-17 |
| CVE-2025-71320 | Matthieu Maitre Picklescan 输入验证错误漏洞 — picklescan | 9.8 | Critical | 2026-06-17 |
| CVE-2026-53864 | OpenClaw 输入验证错误漏洞 — OpenClaw | 8.1 | High | 2026-06-16 |
| CVE-2026-53861 | OpenClaw 输入验证错误漏洞 — OpenClaw | 6.6 | Medium | 2026-06-16 |
| CVE-2026-53855 | OpenClaw 输入验证错误漏洞 — OpenClaw | 8.1 | High | 2026-06-16 |
| CVE-2026-53848 | OpenClaw 输入验证错误漏洞 — OpenClaw | 4.3 | Medium | 2026-06-16 |
| CVE-2026-53836 | OpenClaw 输入验证错误漏洞 — OpenClaw | 8.8 | High | 2026-06-12 |
| CVE-2026-48557 | Spatie Laravel Media Library Pro 安全漏洞 — laravel-medialibrary | 8.8 | High | 2026-05-29 |
| CVE-2026-44463 | Zed 安全漏洞 — zed | 8.6 | High | 2026-05-28 |
| CVE-2026-44462 | Zed 安全漏洞 — zed | 6.4 | Medium | 2026-05-28 |
| CVE-2026-45037 | Tabby 安全漏洞 — tabby | 7.1 | High | 2026-05-15 |
| CVE-2026-42590 | Gotenberg 安全漏洞 — gotenberg | 8.2 | High | 2026-05-14 |
| CVE-2026-43929 | SSRF Check 安全漏洞 — ssrfcheck | 8.2 | High | 2026-05-12 |
| CVE-2026-45006 | OpenClaw 安全漏洞 — OpenClaw | 8.8 | High | 2026-05-11 |
| CVE-2026-44993 | OpenClaw 安全漏洞 — OpenClaw | 5.4 | Medium | 2026-05-11 |
| CVE-2026-44115 | OpenClaw 安全漏洞 — OpenClaw | 8.8 | High | 2026-05-06 |
| CVE-2026-44114 | OpenClaw 安全漏洞 — OpenClaw | 7.8 | High | 2026-05-06 |
| CVE-2026-43584 | OpenClaw 安全漏洞 — OpenClaw | 8.8 | High | 2026-05-06 |
| CVE-2026-43578 | OpenClaw 安全漏洞 — OpenClaw | 9.1 | Critical | 2026-05-06 |
| CVE-2026-41934 | Vvveb 安全漏洞 — Vvveb | 8.8 | High | 2026-05-06 |
| CVE-2026-43566 | OpenClaw 安全漏洞 — OpenClaw | 9.1 | Critical | 2026-05-05 |
| CVE-2026-43532 | OpenClaw 安全漏洞 — OpenClaw | 7.7 | High | 2026-05-05 |
| CVE-2026-42435 | OpenClaw 安全漏洞 — OpenClaw | 8.8 | High | 2026-05-05 |
| CVE-2026-42427 | OpenClaw 安全漏洞 — OpenClaw | 5.3 | Medium | 2026-04-28 |
| CVE-2026-41915 | OpenClaw 安全漏洞 — OpenClaw | 5.3 | Medium | 2026-04-28 |
CWE-184（不完整的黑名单） 是常见的弱点类别，本平台收录该类弱点关联的 136 条 CVE 漏洞。