CWE-345 对数据真实性的验证不充分 类弱点 414 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-345 属于数据完整性与真实性验证不足的安全漏洞。攻击者通常通过伪造或篡改数据源，使系统误信无效或恶意信息，从而执行非预期操作或泄露敏感数据。开发者应实施严格的身份认证机制，如使用数字签名或加密哈希，确保数据来源可信且未被篡改，并在关键业务逻辑前强制进行真实性校验，以阻断恶意数据的注入与处理。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-63127 | RMCP 资源元数据发现的OAuth保护资源元数据中缺少资源字段验证 — rust-sdk | 8.2 | High | 2026-09-16 |
| CVE-2026-19941 | BIND checkwildcard 越界NSEC处理漏洞 — BIND 9 | 5.9 | Medium | 2026-09-16 |
| CVE-2026-73177 | 研华EKI-1242EIMS固件升级机制缺乏完整性验证 — EKI-1242IEIMS | 8.6 | High | 2026-09-16 |
| CVE-2026-73435 | 安全通告0171 — EOS | 8.2 | High | 2026-09-16 |
| CVE-2026-77955 | ZONEMD验证绕过窗口 — Unbound | 4.4 | Medium | 2026-09-16 |
| CVE-2026-73450 | 无法翻译，缺少漏洞描述 — EOS | 6.9 | Medium | 2026-09-16 |
| CVE-2026-73437 | Arista Networks EOS 输入验证错误漏洞 — EOS | 9.6 | Critical | 2026-09-15 |
| CVE-2026-54167 | GitHub 企业版 Pipelines-as-Code 令牌请求重定向漏洞 — pipelines-as-code | 8.2 | High | 2026-09-15 |
| CVE-2026-57122 | Mervin Praison PraisonAI 输入验证错误漏洞 — PraisonAI | 8.6 | High | 2026-09-14 |
| CVE-2026-45057 | The Matrix.org Foundation Matrix Rust SDK 输入验证错误漏洞 — matrix-sdk-ui | 4.9 | Medium | 2026-09-11 |
| CVE-2026-89251 | WWBN AVideo 输入验证错误漏洞 — AVideo | 6.5 | Medium | 2026-09-11 |
| CVE-2026-80172 | Dell Secure Connect Gateway 输入验证错误漏洞 — Secure Connect Gateway 5.0 - Application | 9.8 | Critical | 2026-09-09 |
| CVE-2026-73316 | XenForo 输入验证错误漏洞 — XenForo | 7.5 | High | 2026-09-08 |
| CVE-2026-85008 | undici 输入验证错误漏洞 — undici | 3.7 | Low | 2026-09-04 |
| CVE-2026-85621 | LobeHub 输入验证错误漏洞 — lobehub | 6.5 | Medium | 2026-09-04 |
| CVE-2026-85435 | MOOS-IvP 输入验证错误漏洞 — moos-ivp | 9.1 | Critical | 2026-09-03 |
| CVE-2026-85434 | MOOS-IvP 输入验证错误漏洞 — moos-ivp | 9.1 | Critical | 2026-09-03 |
| CVE-2026-85431 | themoos essential-moos 输入验证错误漏洞 — essential-moos | 7.5 | High | 2026-09-03 |
| CVE-2026-85430 | themoos essential-moos 输入验证错误漏洞 — essential-moos | 9.1 | Critical | 2026-09-03 |
| CVE-2026-85429 | MOOS-IvP 输入验证错误漏洞 — moos-ivp | 7.5 | High | 2026-09-03 |
| CVE-2026-84767 | Nexcess BookIt 输入验证错误漏洞 — BookIt | 5.3 | Medium | 2026-09-03 |
| CVE-2023-20576 | AMD EPYC 安全漏洞 — AMD Ryzen™ 3000 Series Desktop Processors | 7.7 | High | 2026-09-02 |
| CVE-2026-20355 | Cisco Secure Email 输入验证错误漏洞 — Cisco Secure Email | 5.9 | Medium | 2026-09-02 |
| CVE-2026-19219 | Progress Telerik UI for AJAX 输入验证错误漏洞 — Telerik UI for ASP.NET AJAX | 8.1 | High | 2026-09-02 |
| CVE-2026-82813 | BEN Group TubeBuddy for YouTube Extension 输入验证错误漏洞 — TubeBuddy for YouTube Extension | 5.4 | Medium | 2026-08-31 |
| CVE-2026-82858 | Kerberosmansour Hulumi 输入验证错误漏洞 — drift | 9.8 | Critical | 2026-08-31 |
| CVE-2026-82465 | Pac4j 输入验证错误漏洞 — pac4j | 5.3 | Medium | 2026-08-29 |
| CVE-2026-82462 | Pac4j 输入验证错误漏洞 — pac4j | 6.5 | Medium | 2026-08-29 |
| CVE-2026-82017 | IGEL OS 输入验证错误漏洞 — IGEL OS 12 | 7.6 | High | 2026-08-28 |
| CVE-2026-81706 | Tobi OpenSSL Encrypt 输入验证错误漏洞 — openssl_encrypt | 6.8 | Medium | 2026-08-27 |
CWE-345（对数据真实性的验证不充分） 是常见的弱点类别，本平台收录该类弱点关联的 414 条 CVE 漏洞。