CWE-668 将资源暴露给错误范围 类弱点 126 条 CVE 漏洞汇总，含 AI 中文分析。
| CVE ID | 标题 | CVSS | 风险等级 | 发布日期 |
|---|---|---|---|---|
| CVE-2026-6830 | Hermes Web UI 安全漏洞 — hermes-webui | 3.3 | Low | 2026-04-21 |
| CVE-2026-32690 | Apache Airflow 安全漏洞 — Apache Airflow | 7.5AI | HighAI | 2026-04-18 |
| CVE-2026-30912 | Apache Airflow 安全漏洞 — Apache Airflow | 7.5AI | HighAI | 2026-04-18 |
| CVE-2025-54502 | AMD EPYC Processor 安全漏洞 — AMD EPYC™ 9004 Series Processors | 7.8AI | HighAI | 2026-04-16 |
| CVE-2026-35658 | OpenClaw 安全漏洞 — OpenClaw | 6.5 | Medium | 2026-04-10 |
| CVE-2026-39911 | Guardian 安全漏洞 — guardian | 8.8 | High | 2026-04-09 |
| CVE-2026-34538 | Apache Airflow 安全漏洞 — Apache Airflow | 6.5AI | MediumAI | 2026-04-09 |
| CVE-2026-34765 | Electron 安全漏洞 — electron | 6.0 | Medium | 2026-04-07 |
| CVE-2026-34217 | SandboxJS 安全漏洞 — SandboxJS | 9.3AI | CriticalAI | 2026-04-06 |
| CVE-2026-34780 | Electron 安全漏洞 — electron | 8.4 | High | 2026-04-04 |
| CVE-2026-20160 | Cisco Smart Software Manager On-Prem 安全漏洞 — Cisco Smart Software Manager On-Prem | 9.8 | Critical | 2026-04-01 |
| CVE-2026-33573 | OpenClaw 安全漏洞 — OpenClaw | 8.8 | High | 2026-03-29 |
| CVE-2026-28779 | Apache Airflow 安全漏洞 — Apache Airflow | 9.8AI | CriticalAI | 2026-03-17 |
| CVE-2026-27466 | BigBlueButton 安全漏洞 — bigbluebutton | 7.2 | High | 2026-02-21 |
| CVE-2026-26057 | Skill Scanner 安全漏洞 — skill-scanner | 6.5 | Medium | 2026-02-19 |
| CVE-2025-61917 | n8n 安全漏洞 — n8n | 7.7 | High | 2026-02-04 |
| CVE-2026-23763 | VB-Audio Matrix 安全漏洞 — Matrix | 7.8AI | HighAI | 2026-01-22 |
| CVE-2025-25176 | Imagination Graphics DDK 安全漏洞 — Graphics DDK | 8.1AI | HighAI | 2026-01-13 |
| CVE-2025-9074 | Docker Desktop 安全漏洞 — Docker Desktop | 8.1AI | HighAI | 2025-08-20 |
| CVE-2025-54126 | WebAssembly Micro Runtime 安全漏洞 — wasm-micro-runtime | 9.1AI | CriticalAI | 2025-07-29 |
| CVE-2025-8107 | Oracle GoldenGate 安全漏洞 — OceanBase Server | 6.3 | Medium | 2025-07-24 |
| CVE-2025-34119 | Tinasoft EasyCafe Server 安全漏洞 — EasyCafe Server | 7.5AI | HighAI | 2025-07-16 |
| CVE-2025-6788 | Schneider Electric EcoStruxure Power Monitoring Expert和Schneider Electric EcoStruxure Power Operation 安全漏洞 — EcoStruxure™ Power Monitoring Expert | 5.4AI | MediumAI | 2025-07-11 |
| CVE-2025-34064 | One Identity OneLogin AD Connector 安全漏洞 — OneLogin Active Directory Connector (ADC) | 8.1AI | HighAI | 2025-07-01 |
| CVE-2025-46707 | Imagination GPU Driver 安全漏洞 — Graphics DDK | 7.8AI | HighAI | 2025-06-27 |
| CVE-2025-49574 | Quarkus 安全漏洞 — quarkus | 6.4 | Medium | 2025-06-23 |
| CVE-2025-32783 | XWiki Platform 安全漏洞 — xwiki-platform | 4.7 | Medium | 2025-04-16 |
| CVE-2025-32428 | Jupyter Remote Desktop Proxy 安全漏洞 — jupyter-remote-desktop-proxy | 8.8AI | HighAI | 2025-04-14 |
| CVE-2025-21608 | Meshtastic device firmware 安全漏洞 — firmware | 5.3 | - | 2025-02-18 |
| CVE-2024-13484 | Argo CD 安全漏洞 | 8.2 | High | 2025-01-28 |
CWE-668（将资源暴露给错误范围） 是常见的弱点类别，本平台收录该类弱点关联的 126 条 CVE 漏洞。