CWE-489 遗留的调试代码 类弱点 85 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-489 属于代码残留类漏洞，指软件发布时未移除或禁用的调试代码。攻击者常利用这些遗留代码获取敏感系统信息、绕过访问控制或触发异常状态，从而进一步实施攻击。开发者应在发布前彻底审查代码，确保所有调试功能、日志记录及诊断接口被完全禁用或移除，并建立严格的构建流程以杜绝调试代码进入生产环境。
<FORM ACTION="/authenticate_login.cgi"> <INPUT TYPE=TEXT name=username> <INPUT TYPE=PASSWORD name=password> <INPUT TYPE=SUBMIT> </FORM>http://TARGET/authenticate_login.cgi?username=...&password=...| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-115727 | AgenticSeek 409840c 前远程代码执行漏洞 — AgenticSeek | 8.1 | High | 2026-10-23 |
| CVE-2026-15575 | SFM Costifier 生产环境调试模式敏感信息泄露漏洞 — Costifier | 5.3 | Medium | 2026-10-16 |
| CVE-2026-83550 | Postgres-exporter 指标监听器暴露 pprof 接口漏洞 — Multicluster Global Hub | 7.1 | High | 2026-10-06 |
| CVE-2026-100102 | P4Search JDWP调试代理远程代码执行漏洞 — P4 (Helix Core) | 9.5 | Critical | 2026-10-05 |
| CVE-2026-13313 | 华硕路由器调试代码漏洞致Telnet开启及Root命令执行 — Router | 8.9 | High | 2026-10-01 |
| CVE-2026-103475 | Yii2 Starter Kit 4.2.0 调试模块暴露漏洞 — yii2-starter-kit | 9.1 | Critical | 2026-09-30 |
| CVE-2026-100295 | 安视盾 YSSD-RTMP-H5 调试代码未移除漏洞 — YSSD-RTMP-H5 | 6.3 | Medium | 2026-09-29 |
| CVE-2026-73593 | Dell SCG Policy Manager < 5.34.00.16 调试代码漏洞 — Secure Connect Gateway (SCG) Policy Manager | 3.0 | Low | 2026-09-29 |
| CVE-2026-84486 | Automation Controller 调试接口未授权拒绝服务漏洞 — Red Hat Ansible Automation Platform 2.6 for RHEL 9 | 8.2 | High | 2026-09-23 |
| CVE-2026-50228 | NitroSense Electron DevTools 任意代码执行漏洞 — NitroSense V5 | 6.1 | Medium | 2026-09-23 |
| CVE-2026-81943 | PLANET IGS-5225-8P2T4S V1/V2 调试模式远程代码执行漏洞 — PLANET IGS-5225-8P2T4S V1 | 6.7 | Medium | 2026-09-18 |
| CVE-2026-6485 | InsydeH2O 调试信息泄露漏洞 — InsydeH2O | 8.2 | High | 2026-09-09 |
| CVE-2026-77545 | Ubiquiti UniFi OS Server 调试信息泄露漏洞 — UniFi OS Server | 9.0 | Critical | 2026-08-26 |
| CVE-2026-66405 | Hellohas Robotics DEEBOT PRO M1 调试信息泄露漏洞 — DEEBOT PRO M1 | 8.8 | High | 2026-08-10 |
| CVE-2026-66403 | Hellohas Robotics DEEBOT PRO M1 调试信息泄露漏洞 — DEEBOT PRO M1 | 7.5 | High | 2026-08-10 |
| CVE-2026-41186 | Tigera calico 信息泄露漏洞 — Calico | 6.0 | Medium | 2026-07-30 |
| CVE-2026-65893 | CP-Plus EZ-P21 IP Camera 信息泄露漏洞 — EZ-P21 IP Camera | 7.0 | High | 2026-07-27 |
| CVE-2026-58378 | Allwinner H616 调试信息泄露漏洞 — H616 | 8.8 | High | 2026-07-09 |
| CVE-2026-54799 | Siemens CPCI85 Central Processing/Communication 调试信息泄露漏洞 — CPCI85 Central Processing/Communication | 6.7 | Medium | 2026-07-09 |
| CVE-2026-54798 | Siemens CPCI85 Central Processing/Communication 调试信息泄露漏洞 — CPCI85 Central Processing/Communication | 6.5 | Medium | 2026-07-09 |
| CVE-2026-59092 | JuiceFS 调试信息泄露漏洞 — juicefs | 7.7 | High | 2026-07-02 |
| CVE-2026-49188 | Acer M6E 安全漏洞 — Connect M6E 5G Portable WiFi Router | - | - | 2026-06-04 |
| CVE-2026-9133 | RabbitMQ AWS infrastructure Plugin 安全漏洞 — RabbitMQ AWS | 7.7 | High | 2026-05-20 |
| CVE-2026-40035 | Unfurl 安全漏洞 — unfurl | 9.1 | Critical | 2026-04-08 |
| CVE-2026-32662 | Gardyn 安全漏洞 — Cloud API | 5.3 | Medium | 2026-04-03 |
| CVE-2026-33201 | GREEN HOUSE Digital Photo Frame 安全漏洞 — Digital Photo Frame GH-WDF10A | 8.4AI | High AI | 2026-03-26 |
| CVE-2025-15017 | Moxa NPort 5000 Series 安全漏洞 — NPort 5000AI-M12 Series | 7.6 | - | 2025-12-31 |
| CVE-2025-42872 | SAP NetWeaver Enterprise Portal 安全漏洞 — SAP NetWeaver Enterprise Portal | 6.1 | Medium | 2025-12-09 |
| CVE-2025-2486 | Ubuntu EDK2 安全漏洞 — edk2 | 6.0AI | Medium AI | 2025-11-26 |
| CVE-2025-64983 | SwitchBot Smart Video Doorbell 安全漏洞 — Smart Video Doorbell | 9.8AI | Critical AI | 2025-11-26 |
CWE-489（遗留的调试代码） 是常见的弱点类别，本平台收录该类弱点关联的 85 条 CVE 漏洞。