CWE-209 通过错误消息导致的信息暴露 类弱点 395 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-209属于信息泄露漏洞，指软件在生成错误消息时意外包含敏感的环境、用户或数据信息。攻击者通常利用这些详细的错误堆栈或路径信息，识别系统架构、数据库结构或用户身份，从而辅助后续更精准的定向攻击。开发者应避免在生产环境中暴露内部细节，通过配置统一的通用错误页面、过滤敏感字段及记录日志而非直接展示，来防止敏感数据外泄。
try { /.../ } catch (Exception e) { System.out.println(e); }try { openDbConnection(); } //print exception message that includes exception message and configuration file location catch (Exception $e) { echo 'Caught exception: ', $e->getMessage(), '\n'; echo 'Check credentials in config file at: ', $Mysql_config_location, '\n'; }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-84499 | 自动化控制器明文泄露密码漏洞 — Red Hat Ansible Automation Platform 2.5 for RHEL 8 | 7.7 | High | 2026-09-23 |
| CVE-2026-71463 | Automation-controller Jinja模板白名单绕过 — Red Hat Ansible Automation Platform 2.5 for RHEL 8 | 2.7 | Low | 2026-09-23 |
| CVE-2026-71461 | Automation-controller 异常披露漏洞 — Red Hat Ansible Automation Platform 2.7 | 4.3 | Medium | 2026-09-23 |
| CVE-2026-4921 | IBM Guardium Data Protection 多漏洞 — Guardium Data Protection | 2.7 | Low | 2026-09-23 |
| CVE-2026-3626 | IBM Concert 软件多个漏洞 — Concert | 5.3 | Medium | 2026-09-23 |
| CVE-2026-85709 | LightRAG API 异常信息敏感数据泄露漏洞 — LightRAG | 5.3 | Medium | 2026-09-22 |
| CVE-2026-1030 | IBM LKS管理工具多漏洞 — Common Licensing | 4.3 | Medium | 2026-09-18 |
| CVE-2025-1350 | IBM Controller 多个漏洞 — Controller | 5.3 | Medium | 2026-09-18 |
| CVE-2026-92936 | vm2 3.11.0-3.11.7 信息泄露漏洞 — vm2 | 5.8 | Medium | 2026-09-17 |
| CVE-2026-55375 | Canto SaaS API OAuth 凭据泄露 — canto-saas-api | 5.3 | Medium | 2026-09-15 |
| CVE-2026-55102 | Kyndryl Open Source Hashi Vault JS 信息泄露漏洞 — hashi-vault-js | 5.8 | Medium | 2026-09-14 |
| CVE-2026-66306 | Microsoft Skype for Business Server 信息泄露漏洞 — Skype for Business Server 2015 CU13 | 6.5 | Medium | 2026-09-08 |
| CVE-2026-69294 | Microsoft Windows COM 信息泄露漏洞 — Windows 10 Version 1809 | 5.5 | Medium | 2026-09-08 |
| CVE-2026-67383 | Microsoft SQL Server 信息泄露漏洞 — Microsoft SQL Server 2025 (CU8) | 6.5 | Medium | 2026-09-08 |
| CVE-2026-69684 | Microsoft Windows Error Reporting 信息泄露漏洞 — Windows 10 Version 1607 | 5.5 | Medium | 2026-09-08 |
| CVE-2026-69552 | Microsoft Windows 10 信息泄露漏洞 — Windows 10 Version 1607 | 5.7 | Medium | 2026-09-08 |
| CVE-2026-11873 | Dogtag PKI 信息泄露漏洞 — Red Hat Certificate System 9 | 6.5 | Medium | 2026-09-01 |
| CVE-2026-82739 | Ash Framework 信息泄露漏洞 — ash | 2.1 | Low | 2026-09-01 |
| CVE-2026-82733 | Ash Framework AshTypescript 信息泄露漏洞 — ash_typescript | 6.3 | Medium | 2026-09-01 |
| CVE-2026-77950 | Ash Framework AshTypescript 信息泄露漏洞 — ash_typescript | 6.3 | Medium | 2026-09-01 |
| CVE-2026-82727 | Ash Framework ash phoenix 信息泄露漏洞 — ash_phoenix | 2.3 | Low | 2026-08-31 |
| CVE-2026-75760 | Ash Framework Ash AI 信息泄露漏洞 — ash_ai | 7.1 | High | 2026-08-31 |
| CVE-2026-82580 | Ash Framework Ash AI 信息泄露漏洞 — ash_ai | 5.3 | Medium | 2026-08-31 |
| CVE-2026-78693 | Ash Framework AshGraphql 信息泄露漏洞 — ash_graphql | 6.9 | Medium | 2026-08-30 |
| CVE-2026-21809 | HCL BigFix Quantum Risk Analyzer 信息泄露漏洞 — BigFix Quantum Risk Analyzer | 3.9 | Low | 2026-08-26 |
| CVE-2026-79777 | Rclone 信息泄露漏洞 — rclone | 2.7 | Low | 2026-08-25 |
| CVE-2026-8173 | Murrelektronik Xelity 4TX M GE 信息泄露漏洞 — Xelity 4TX M GE | 5.3 | Medium | 2026-08-24 |
| CVE-2026-33333 | Combodo iTop 信息泄露漏洞 — iTop | 3.5 | Low | 2026-08-21 |
| CVE-2026-77076 | n8n 信息泄露漏洞 — n8n | 7.1 | High | 2026-08-20 |
| CVE-2026-53458 | Home Assistant Blueprint Studio 信息泄露漏洞 — blueprint-studio | 5.3 | Medium | 2026-08-18 |
CWE-209（通过错误消息导致的信息暴露） 是常见的弱点类别，本平台收录该类弱点关联的 395 条 CVE 漏洞。