CWE-209 通过错误消息导致的信息暴露 类弱点 354 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-209属于信息泄露漏洞，指软件在生成错误消息时意外包含敏感的环境、用户或数据信息。攻击者通常利用这些详细的错误堆栈或路径信息，识别系统架构、数据库结构或用户身份，从而辅助后续更精准的定向攻击。开发者应避免在生产环境中暴露内部细节，通过配置统一的通用错误页面、过滤敏感字段及记录日志而非直接展示，来防止敏感数据外泄。
try { /.../ } catch (Exception e) { System.out.println(e); }try { openDbConnection(); } //print exception message that includes exception message and configuration file location catch (Exception $e) { echo 'Caught exception: ', $e->getMessage(), '\n'; echo 'Check credentials in config file at: ', $Mysql_config_location, '\n'; }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-66306 | Microsoft Skype for Business Server 信息泄露漏洞 — Skype for Business Server 2015 CU13 | 6.5 | Medium | 2026-09-08 |
| CVE-2026-69294 | Microsoft Windows COM 信息泄露漏洞 — Windows 10 Version 1809 | 5.5 | Medium | 2026-09-08 |
| CVE-2026-67383 | Microsoft SQL Server 信息泄露漏洞 — Microsoft SQL Server 2025 (CU8) | 6.5 | Medium | 2026-09-08 |
| CVE-2026-69684 | Microsoft Windows Error Reporting 信息泄露漏洞 — Windows 10 Version 1607 | 5.5 | Medium | 2026-09-08 |
| CVE-2026-69552 | Microsoft Windows 10 信息泄露漏洞 — Windows 10 Version 1607 | 5.7 | Medium | 2026-09-08 |
| CVE-2026-11873 | Dogtag PKI 信息泄露漏洞 — Red Hat Certificate System 9 | 6.5 | Medium | 2026-09-01 |
| CVE-2026-82739 | Ash Framework 信息泄露漏洞 — ash | 2.1 | Low | 2026-09-01 |
| CVE-2026-82733 | Ash Framework AshTypescript 信息泄露漏洞 — ash_typescript | 6.3 | Medium | 2026-09-01 |
| CVE-2026-77950 | Ash Framework AshTypescript 信息泄露漏洞 — ash_typescript | 6.3 | Medium | 2026-09-01 |
| CVE-2026-82727 | Ash Framework ash phoenix 信息泄露漏洞 — ash_phoenix | 2.3 | Low | 2026-08-31 |
| CVE-2026-75760 | Ash Framework Ash AI 信息泄露漏洞 — ash_ai | 7.1 | High | 2026-08-31 |
| CVE-2026-82580 | Ash Framework Ash AI 信息泄露漏洞 — ash_ai | 5.3 | Medium | 2026-08-31 |
| CVE-2026-78693 | Ash Framework AshGraphql 信息泄露漏洞 — ash_graphql | 6.9 | Medium | 2026-08-30 |
| CVE-2026-21809 | HCL BigFix Quantum Risk Analyzer 信息泄露漏洞 — BigFix Quantum Risk Analyzer | 3.9 | Low | 2026-08-26 |
| CVE-2026-79777 | Rclone 信息泄露漏洞 — rclone | 2.7 | Low | 2026-08-25 |
| CVE-2026-8173 | Murrelektronik Xelity 4TX M GE 信息泄露漏洞 — Xelity 4TX M GE | 5.3 | Medium | 2026-08-24 |
| CVE-2026-33333 | Combodo iTop 信息泄露漏洞 — iTop | 3.5 | Low | 2026-08-21 |
| CVE-2026-77076 | n8n 信息泄露漏洞 — n8n | 7.1 | High | 2026-08-20 |
| CVE-2026-53458 | Home Assistant Blueprint Studio 信息泄露漏洞 — blueprint-studio | 5.3 | Medium | 2026-08-18 |
| CVE-2026-74879 | jahlives openssl_encrypt 信息泄露漏洞 — openssl_encrypt | 7.5 | High | 2026-08-17 |
| CVE-2026-73844 | onData CKAN MCP Server 信息泄露漏洞 — ckan-mcp-server | 3.7 | Low | 2026-08-14 |
| CVE-2026-73555 | vLLM 信息泄露漏洞 — vllm | 5.3 | Medium | 2026-08-13 |
| CVE-2026-56620 | HCL BigFix Mobile 信息泄露漏洞 — HCL BigFix Mobile | 4.3 | Medium | 2026-08-10 |
| CVE-2026-47622 | NVIDIA Dynamo 信息泄露漏洞 — Dynamo | 5.3 | Medium | 2026-08-04 |
| CVE-2026-56571 | HCL iControl 信息泄露漏洞 — HCL iControl | 3.7 | Low | 2026-07-31 |
| CVE-2026-56568 | HCL iControl 信息泄露漏洞 — HCL iControl | 3.7 | Low | 2026-07-31 |
| CVE-2026-11904 | IBM Verify Identity Access 信息泄露漏洞 — Verify Identity Access | 5.3 | Medium | 2026-07-30 |
| CVE-2026-59943 | dompdf 信息泄露漏洞 — dompdf | 6.3 | Medium | 2026-07-28 |
| CVE-2025-59177 | Ericsson Packet Core Controller 信息泄露漏洞 — Ericsson Packet Core Controller (PCC) | 6.8 | Medium | 2026-07-27 |
| CVE-2026-56537 | HCL Connections 信息泄露漏洞 — Connections | 3.5 | Low | 2026-07-27 |
CWE-209（通过错误消息导致的信息暴露） 是常见的弱点类别，本平台收录该类弱点关联的 354 条 CVE 漏洞。