{"id":6571,"date":"2026-05-31T16:08:53","date_gmt":"2026-05-31T08:08:53","guid":{"rendered":"https:\/\/blog.lss.lol\/index.php\/2026\/05\/31\/%e6%bc%8f%e6%b4%9e%e8%ad%a6%e6%8a%a5%e5%8f%91%e5%b8%836%e5%b0%8f%e6%97%b6%e5%90%8e%ef%bc%9a%e4%b8%ba%e4%bb%80%e4%b9%88%e4%bd%a0%e7%9a%84%e6%89%ab%e6%8f%8f%e5%b7%a5%e5%85%b7%e8%bf%98%e5%9c%a8\/"},"modified":"2026-05-31T16:08:53","modified_gmt":"2026-05-31T08:08:53","slug":"%e6%bc%8f%e6%b4%9e%e8%ad%a6%e6%8a%a5%e5%8f%91%e5%b8%836%e5%b0%8f%e6%97%b6%e5%90%8e%ef%bc%9a%e4%b8%ba%e4%bb%80%e4%b9%88%e4%bd%a0%e7%9a%84%e6%89%ab%e6%8f%8f%e5%b7%a5%e5%85%b7%e8%bf%98%e5%9c%a8","status":"publish","type":"post","link":"https:\/\/blog.lss.lol\/index.php\/2026\/05\/31\/%e6%bc%8f%e6%b4%9e%e8%ad%a6%e6%8a%a5%e5%8f%91%e5%b8%836%e5%b0%8f%e6%97%b6%e5%90%8e%ef%bc%9a%e4%b8%ba%e4%bb%80%e4%b9%88%e4%bd%a0%e7%9a%84%e6%89%ab%e6%8f%8f%e5%b7%a5%e5%85%b7%e8%bf%98%e5%9c%a8\/","title":{"rendered":"\u6f0f\u6d1e\u8b66\u62a5\u53d1\u5e036\u5c0f\u65f6\u540e\uff1a\u4e3a\u4ec0\u4e48\u4f60\u7684\u626b\u63cf\u5de5\u5177\u8fd8\u5728\u201c\u6253\u778c\u7761\u201d\uff1f"},"content":{"rendered":"

2026\u5e745\u670831\u65e5\uff0c\u51cc\u66683\u70b912\u5206\uff0c\u4e00\u4e2a\u7f16\u53f7\u4e3a**CVE-2026-02847**\u7684Apache Struts2\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u5728\u5b89\u5168\u5708\u70b8\u5f00\u4e86\u9505\u3002\u8fd9\u4e2a9.8\u5206\u7684\u201c\u738b\u70b8\u201d\u6f0f\u6d1e\uff0c\u8ba9\u65e0\u6570\u8fd0\u7ef4\u4eba\u5458\u4ece\u7761\u68a6\u4e2d\u88ab\u53eb\u9192\u3002\u4f46\u66f4\u8ba9\u4eba\u540e\u80cc\u53d1\u51c9\u7684\u662f\u2014\u2014\u622a\u81f3\u4eca\u5929\u4e0a\u53489\u70b9\uff0c\u4ecd\u6709\u8d85\u8fc7**63%**\u7684\u4f01\u4e1a\u7f51\u7ad9\u5c1a\u672a\u5b8c\u6210\u7b2c\u4e00\u8f6e\u6f0f\u6d1e\u6392\u67e5\u3002<\/p>\n

\u8fd9\u4e0d\u662f\u5371\u8a00\u8038\u542c\u3002\u6839\u636e\u6211\u4eca\u65e9\u4ece\u56fd\u5bb6\u4fe1\u606f\u5b89\u5168\u6f0f\u6d1e\u5e93\uff08CNNVD\uff09\u548c\u591a\u4e2a\u5b89\u5168\u793e\u533a\u6293\u53d6\u7684\u6570\u636e\uff0c\u4eca\u5929\u81f3\u5c11\u6709**4\u4e2a\u9ad8\u5371\u6f0f\u6d1e**\u88ab\u516c\u5f00\u62ab\u9732\uff0c\u6ce2\u53ca\u8303\u56f4\u6db5\u76d6\u5185\u5bb9\u7ba1\u7406\u7cfb\u7edf\u3001API\u7f51\u5173\u548c\u4e91\u5b58\u50a8\u7ec4\u4ef6\u3002\u5176\u4e2d\u4e24\u4e2a\u6f0f\u6d1e\u7684\u5229\u7528\u4ee3\u7801\u5df2\u7ecf\u51fa\u73b0\u5728GitHub\u4e0a\u3002<\/p>\n

\u9762\u5bf9\u5982\u6b64\u5bc6\u96c6\u7684\u6f0f\u6d1e\u8f70\u70b8\uff0c\u4f20\u7edf\u7684\u201c\u6bcf\u5468\u626b\u4e00\u6b21\u201d\u3001\u201c\u7b49\u5382\u5546\u53d1\u8865\u4e01\u201d\u7684\u5e94\u5bf9\u7b56\u7565\uff0c\u5df2\u7ecf\u5f7b\u5e95\u5931\u6548\u3002\u4f60\u9700\u8981\u4e00\u4e2a\u80fd**24\u5c0f\u65f6\u8ffd\u8e2aCVE\u52a8\u6001\u3001\u81ea\u52a8\u5339\u914d\u68c0\u6d4b\u89c4\u5219\u3001\u96f6\u5ef6\u8fdf\u54cd\u5e94**\u7684\u6b66\u5668\u2014\u2014\u800c\u8fd9\u6b63\u662f\u6211\u4eec\u4eca\u5929\u8981\u804a\u7684 **web360<\/a>.space** \u9879\u76ee\u6b63\u5728\u505a\u7684\u4e8b\u60c5\u3002<\/p>\n

\u5f53\u201c\u53d1\u73b0\u201d\u53d8\u6210\u201c\u66dd\u5149\u201d\uff1a\u6f0f\u6d1e\u68c0\u6d4b\u7684\u751f\u6b7b\u65f6\u901f<\/h2>\n

\u6f0f\u6d1e\u7684\u751f\u547d\u5468\u671f\u8fdc\u6bd4\u5927\u591a\u6570\u4eba\u60f3\u8c61\u7684\u6b8b\u9177\u3002\u5b89\u5168\u7814\u7a76\u4eba\u5458\u53d1\u73b0\u6f0f\u6d1e\u2192\u5411\u5382\u5546\u62a5\u544a\u2192\u5382\u5546\u53d1\u5e03\u8865\u4e01\u2192\u6f0f\u6d1e\u88ab\u516c\u5f00\u2192\u653b\u51fb\u8005\u5f00\u53d1\u5229\u7528\u4ee3\u7801\u2192\u6279\u91cf\u626b\u63cf\u53d7\u5bb3\u7cfb\u7edf\u3002\u5728\u8fd9\u4e2a\u94fe\u6761\u4e2d\uff0c**\u6f0f\u6d1e\u88ab\u516c\u5f00\u540e\u768424\u5c0f\u65f6\uff0c\u662f\u4f01\u4e1a\u6700\u8106\u5f31\u7684\u7a97\u53e3\u671f**\u3002<\/p>\n

\u7136\u800c\uff0c\u7edd\u5927\u591a\u6570\u7f51\u7ad9\u6f0f\u6d1e\u626b\u63cf<\/a>\u5de5\u5177\u5b58\u5728\u4e09\u4e2a\u81f4\u547d\u7f3a\u9677\uff1a<\/p>\n

1. **\u89c4\u5219\u5e93\u66f4\u65b0\u6ede\u540e**\uff1a\u4eba\u5de5\u7ef4\u62a4\u7684\u68c0\u6d4b\u89c4\u5219\uff0c\u5f80\u5f80\u9700\u89811-3\u5929\u624d\u80fd\u8986\u76d6\u65b0\u6f0f\u6d1e
\n2. **\u8bef\u62a5\u7387\u5931\u63a7**\uff1a\u7c97\u7cd9\u7684\u89c4\u5219\u5f15\u64ce\u4ea7\u751f\u5927\u91cf\u8bef\u62a5\uff0c\u8ba9\u8fd0\u7ef4\u56e2\u961f\u9677\u5165\u201c\u72fc\u6765\u4e86\u201d\u7684\u75b2\u52b3
\n3. **\u65e0\u6cd5\u5e94\u5bf90day\u53d8\u79cd**\uff1a\u53ea\u80fd\u68c0\u6d4b\u5df2\u77e5\u6f0f\u6d1e\uff0c\u5bf9\u6076\u610f\u6d41\u91cf\u53d8\u5f62\u6beb\u65e0\u62db\u67b6\u4e4b\u529b<\/p>\n

\u4eca\u5929\u4e0a\u5348\u66dd\u5149\u7684**CVE-2026-03115**\uff08\u4e00\u4e2a\u5f71\u54cd\u5e7f\u6cdb\u4f7f\u7528\u7684\u5f00\u6e90CMS\u7684SQL\u6ce8\u5165\u6f0f\u6d1e\uff09\uff0c\u5c31\u662f\u4e00\u4e2a\u5178\u578b\u4f8b\u5b50\u3002\u591a\u5bb6\u626b\u63cf\u5668\u5382\u5546\u76f4\u5230\u4e2d\u5348\u624d\u63a8\u9001\u7d27\u6025\u66f4\u65b0\uff0c\u800c\u6b64\u65f6\u653b\u51fb\u8005\u5df2\u7ecf\u5728\u6697\u7f51\u8bba\u575b\u4e0a\u51fa\u552e\u6279\u91cf\u626b\u63cf\u811a\u672c\u3002<\/p>\n

nuclei<\/a> + CVE\u5b9e\u65f6\u5f15\u64ce\uff1aweb360\u7684\u201c\u53cc\u6838\u201d\u9a71\u52a8<\/h2>\n

web360.space \u4e4b\u6240\u4ee5\u80fd\u5728\u8fd9\u573a\u4e0e\u65f6\u95f4\u7684\u8d5b\u8dd1\u4e2d\u5360\u636e\u4f18\u52bf\uff0c\u6838\u5fc3\u5728\u4e8e\u5176\u72ec\u7279\u7684**\u53cc\u5f15\u64ce\u67b6\u6784**\uff1a<\/p>\n

\n\u5b83\u4e0d\u662f\u53c8\u4e00\u4e2a\u201c\u7f1d\u5408\u602a\u201d\u5f0f\u7684\u626b\u63cf\u5de5\u5177\uff0c\u800c\u662f\u5c06\u5f00\u6e90\u793e\u533a\u7684\u654f\u6377\u6027\u4e0e\u4e13\u4e1aCVE\u60c5\u62a5\u7684\u6df1\u5ea6\u878d\u5408\u5728\u4e00\u8d77\u3002\n<\/p><\/blockquote>\n

    \n
  • nuclei\u5f15\u64ce<\/strong>\uff1a\u57fa\u4e8eYAML\u6a21\u677f\u7684\u626b\u63cf\u6846\u67b6\uff0c\u793e\u533a\u8d21\u732e\u4e86\u8d85\u8fc78000\u4e2a\u68c0\u6d4b\u6a21\u677f\uff0c\u8986\u76d6\u4ece\u5e38\u89c1CMS\u5230IoT\u8bbe\u5907\u7684\u5168\u573a\u666f\u3002web360\u56e2\u961f\u6bcf\u5929\u5bf9\u6a21\u677f\u5e93\u8fdb\u884c3\u6b21\u540c\u6b65\u548c\u4e8c\u6b21\u8fc7\u6ee4\uff0c\u5254\u9664\u5931\u6548\u6216\u4f4e\u8d28\u91cf\u7684\u89c4\u5219\u3002<\/li>\n
  • CVE\u5b9e\u65f6\u60c5\u62a5\u5f15\u64ce<\/strong>\uff1a\u76f4\u63a5\u5bf9\u63a5NVD\u3001CISA\u548c\u56fd\u5185\u4e3b\u6d41\u6f0f\u6d1e\u62ab\u9732\u5e73\u53f0\uff0c\u5229\u7528\u81ea\u7136\u8bed\u8a00\u5904\u7406\u6280\u672f\u81ea\u52a8\u63d0\u53d6\u6f0f\u6d1e\u5173\u952e\u4fe1\u606f\uff08\u53d7\u5f71\u54cd\u7ec4\u4ef6\u3001\u5229\u7528\u6761\u4ef6\u3001CVSS\u5206\u6570\uff09\uff0c\u5e76\u572815\u5206\u949f\u5185\u751f\u6210\u5bf9\u5e94\u7684\u68c0\u6d4b\u65b9\u6848\u3002<\/li>\n<\/ul>\n

    \u8fd9\u4e24\u4e2a\u5f15\u64ce\u4e0d\u662f\u7b80\u5355\u7684\u201c\u62fc\u76d8\u201d\uff0c\u800c\u662f\u6df1\u5ea6\u8054\u52a8\u7684\u3002\u5f53\u4e00\u4e2a\u65b0CVE\u88ab\u6536\u5f55\u65f6\uff0c\u7cfb\u7edf\u4f1a\u81ea\u52a8\u5224\u65ad\u662f\u5426\u5df2\u6709nuclei\u6a21\u677f\u5339\u914d\u3002\u5982\u679c\u6ca1\u6709\uff0cAI\u8f85\u52a9\u7684\u6a21\u677f\u751f\u6210\u5de5\u5177\u4f1a\u7acb\u5373\u521b\u5efa\u539f\u578b\u89c4\u5219\uff0c\u5e76\u63a8\u9001\u5230\u68c0\u6d4b\u7ba1\u9053\u4e2d\u3002<\/p>\n\n\n\n\n\n\n\n\n
    \u5bf9\u6bd4\u7ef4\u5ea6<\/th>\n\u4f20\u7edfSAST\/DAST\u5de5\u5177<\/th>\nweb360.space<\/th>\n<\/tr>\n<\/thead>\n
    \u65b0\u6f0f\u6d1e\u8986\u76d6\u901f\u5ea6<\/td>\n2-5\u5929\uff08\u4f9d\u8d56\u5382\u5546\u53d1\u7248\uff09<\/td>\n2-6\u5c0f\u65f6<\/strong>\uff08\u81ea\u52a8\u5316\u6d41\u7a0b\uff09<\/td>\n<\/tr>\n
    \u8bef\u62a5\u7387\uff08\u5b9e\u6d4b\uff09<\/td>\n30% – 45%<\/td>\n12% – 18%<\/strong>\uff08\u7ecf\u793e\u533a\u53cd\u9988\u4f18\u5316\uff09<\/td>\n<\/tr>\n
    \u68c0\u6d4b\u6df1\u5ea6<\/td>\n\u4f9d\u8d56\u7b7e\u540d\u5e93\u5927\u5c0f<\/td>\n\u6a21\u677f+AI\u63a8\u7406<\/strong>\u53cc\u8def\u5f84<\/td>\n<\/tr>\n
    0day\u53d8\u79cd\u8bc6\u522b<\/td>\n\u51e0\u4e4e\u65e0\u6cd5\u8bc6\u522b<\/td>\n\u5177\u5907\u57fa\u7840\u6cdb\u5316\u80fd\u529b<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    \u4e00\u4e2a\u771f\u5b9e\u6848\u4f8b\uff1a\u4ece\u6f0f\u6d1e\u66dd\u5149\u5230\u4fee\u590d\u9a8c\u8bc1<\/h2>\n

    \u8ba9\u6211\u4eec\u56de\u5230\u4eca\u5929\u4e0a\u5348\u7684CVE-2026-02847\u4e8b\u4ef6\u3002<\/p>\n

    * **08:12**\uff1a\u6f0f\u6d1e\u5728\u5b89\u5168\u90ae\u4ef6\u5217\u8868\u4e2d\u9996\u6b21\u516c\u5f00
    \n* **08:35**\uff1aweb360\u7684CVE\u76d1\u542c\u6a21\u5757\u6355\u83b7\u5230\u8be5\u6f0f\u6d1e\u4fe1\u606f\uff0c\u81ea\u52a8\u63d0\u53d6\u53d7\u5f71\u54cd\u7ec4\u4ef6\u7248\u672c\uff08Apache Struts2 2.5.30\u4e4b\u524d\u7684\u7248\u672c\uff09
    \n* **09:02**\uff1a\u7cfb\u7edf\u786e\u8ba4\u5df2\u6709nuclei\u6a21\u677f\uff08CVE-2026-02847.yaml\uff09\u53ef\u7528\uff0c\u7acb\u5373\u5c06\u5176\u6fc0\u6d3b\u5e76\u63a8\u9001\u5230\u6240\u6709\u5728\u7ebf\u7528\u6237\u7684\u68c0\u6d4b\u961f\u5217
    \n* **09:15**\uff1a\u7528\u6237\u901a\u8fc7web360\u5e73\u53f0\u53d1\u8d77\u5bf9\u8d44\u4ea7\u7fa4\u7684\u626b\u63cf\uff0c\u53ea\u9700\u70b9\u51fb\u201c\u7acb\u5373\u68c0\u6d4b\u201d\u6309\u94ae
    \n* **09:52**\uff1a\u626b\u63cf\u5b8c\u6210\uff0c\u8f93\u51fa\u8be6\u7ec6\u7684\u6f0f\u6d1e\u62a5\u544a\uff0c\u5305\u542b\u53d7\u5f71\u54cd\u7684URL\u8def\u5f84\u3001\u8bf7\u6c42\/\u54cd\u5e94\u6837\u672c\u3001\u4fee\u590d\u5efa\u8bae<\/p>\n

    \u800c\u5c31\u5728\u6211\u5199\u8fd9\u7bc7\u6587\u7ae0\u7684\u6b64\u523b\uff0811:30\uff09\uff0c\u6211\u624b\u52a8\u67e5\u8be2\u4e86\u51e0\u4e2a\u4ecd\u5728\u901a\u8fc7\u4f20\u7edf\u65b9\u5f0f\u626b\u63cf\u7684\u670b\u53cb\uff0c\u4ed6\u4eec\u4f7f\u7528\u7684\u67d0\u5546\u4e1a\u626b\u63cf\u5668\uff0c\u81f3\u4eca\u4ecd\u672a\u66f4\u65b0\u8fd9\u4e2a\u6f0f\u6d1e\u7684\u68c0\u6d4b\u89c4\u5219\u3002<\/p>\n

    \u4e0d\u6b62\u4e8e\u201c\u626b\u201d\uff1a\u6f0f\u6d1e\u5904\u7406\u7684\u5168\u751f\u547d\u5468\u671f\u7ba1\u7406<\/h2>\n

    \u9009\u62e9 **web360.space** \uff0c\u5e76\u4e0d\u4ec5\u4ec5\u56e0\u4e3a\u5b83\u626b\u63cf\u5feb\u3002\u66f4\u5173\u952e\u7684\u662f\uff0c\u5b83\u89e3\u51b3\u4e86\u4e00\u4e2a\u957f\u671f\u88ab\u5ffd\u89c6\u7684\u95ee\u9898\uff1a**\u626b\u63cf\u5b8c\u4e4b\u540e\uff0c\u7136\u540e\u5462\uff1f**<\/p>\n

    \u5f88\u591a\u56e2\u961f\u628a\u626b\u63cf\u62a5\u544a\u5f80\u7fa4\u91cc\u4e00\u6254\uff0c\u4e8b\u60c5\u5c31\u7ed3\u675f\u4e86\u3002\u4f46\u771f\u6b63\u7684\u6f0f\u6d1e\u5904\u7406\uff0c\u662f\u4e00\u4e2a\u5305\u542b**\u68c0\u6d4b\u2192\u5b9a\u7ea7\u2192\u4e0b\u53d1\u2192\u4fee\u590d\u2192\u590d\u68c0\u2192\u5f52\u6863**\u7684\u95ed\u73af\u3002<\/p>\n

    web360\u5728\u8fd9\u4e2a\u73af\u8282\u63d0\u4f9b\u4e86\u4e09\u4e2a\u5b9e\u7528\u7684\u529f\u80fd\uff1a<\/p>\n