CWE-703 对异常条件检查或处理不恰当 类弱点 106 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-703属于异常处理不当漏洞，指软件未能正确预判或处理正常运行中极少发生的异常状况。攻击者通常通过构造特定输入触发罕见异常，导致程序崩溃、信息泄露或执行非预期逻辑，从而绕过安全控制。开发者应避免通过捕获所有异常来掩盖错误，需明确识别并处理特定异常场景，确保在异常发生时系统能安全降级或终止，防止状态不一致或资源泄露。
char buf[10], cp_buf[10]; fgets(buf, 10, stdin); strcpy(cp_buf, buf);public void doExchange() throws IOException, InvocationTargetException, SQLException { ... }public void doExchange() throws Exception { ... }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-61822 | pg_partman 分区维护禁用漏洞 — pg_partman | 6.5 | Medium | 2026-09-18 |
| CVE-2026-92790 | Higress 2.2.4之前恶意Cookie限流绕过漏洞 — higress | 6.5 | Medium | 2026-09-16 |
| CVE-2026-20329 | 思科安全防火墙软件异常处理漏洞 — Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.9 | Critical | 2026-09-16 |
| CVE-2026-80135 | Dell Secure Connect Gateway 异常处理不当漏洞 — Secure Connect Gateway 5.0 - Application | 7.5 | High | 2026-09-07 |
| CVE-2026-57445 | 1Hive Gardens v2 异常处理不当漏洞 — gardens-v2 | 8.7 | High | 2026-09-03 |
| CVE-2026-20280 | Cisco IOS XR Software 异常处理不当漏洞 — Cisco IOS XR Software | 8.8 | High | 2026-09-02 |
| CVE-2026-16218 | Ronan Berder /dev/push 异常处理不当漏洞 — devpush | 2.6 | Low | 2026-07-19 |
| CVE-2026-20187 | Cisco RoomOS Software 异常处理不当漏洞 — Cisco RoomOS Software | 7.5 | High | 2026-07-15 |
| CVE-2026-13753 | HP 2800 Printer Series 授权问题漏洞 — HP DeskJet 2820 AIO Printer | - | - | 2026-07-06 |
| CVE-2026-56338 | Capgo 异常处理不当漏洞 — Capgo | 5.3 | Medium | 2026-06-24 |
| CVE-2026-44893 | Netty 异常处理不当漏洞 — netty | 7.5 | High | 2026-06-12 |
| CVE-2026-47316 | SAMSUNG Escargot 安全漏洞 — Escargot | 5.5 | Medium | 2026-05-19 |
| CVE-2026-34388 | Fleet 安全漏洞 — fleet | 6.5 | - | 2026-03-27 |
| CVE-2025-59787 | 2N Access Commander 安全漏洞 — 2N Access Commander | 8.6AI | High AI | 2026-03-04 |
| CVE-2026-28407 | malcontent 安全漏洞 — malcontent | 8.2 | - | 2026-02-27 |
| CVE-2026-1996 | HP OfficeJet Pro 安全漏洞 — HP OfficeJet Pro 8710 All-in-One Printer series | 7.5AI | High AI | 2026-02-10 |
| CVE-2025-68135 | everest-core 安全漏洞 — everest-core | 6.5 | Medium | 2026-01-21 |
| CVE-2026-21895 | RSA 安全漏洞 — RSA | 7.5 | - | 2026-01-08 |
| CVE-2025-14874 | Nodemailer 安全漏洞 — nodemailer | 7.5 | High | 2025-12-18 |
| CVE-2025-64435 | Kubevirt 安全漏洞 — kubevirt | 5.3 | Medium | 2025-11-07 |
| CVE-2025-12890 | Zephyr 安全漏洞 — Zephyr | 6.5 | Medium | 2025-11-07 |
| CVE-2025-59836 | Omni 安全漏洞 — omni | 5.3 | Medium | 2025-10-13 |
| CVE-2025-31998 | HCL Unica Centralized Offer Management 安全漏洞 — Unica Centralized Offer Management | 3.5 | Low | 2025-10-12 |
| CVE-2025-61602 | BigBlueButton 安全漏洞 — bigbluebutton | 7.5 | High | 2025-10-09 |
| CVE-2025-61601 | BigBlueButton 安全漏洞 — bigbluebutton | 7.5 | High | 2025-10-09 |
| CVE-2025-59531 | Argo CD 安全漏洞 — argo-cd | 7.5 | High | 2025-10-01 |
| CVE-2025-58758 | TinyEnv 安全漏洞 — tiny-env | 5.1 | Medium | 2025-09-09 |
| CVE-2025-3084 | MongoDB Server 安全漏洞 — MongoDB Server | 6.5 | Medium | 2025-04-01 |
| CVE-2025-24371 | CometBFT 安全漏洞 — cometbft | 5.3 | - | 2025-02-03 |
| CVE-2024-51491 | notation-go 安全漏洞 — notation-go | 3.3 | Low | 2025-01-13 |
CWE-703（对异常条件检查或处理不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 106 条 CVE 漏洞。